last executing test programs: 3m4.795759092s ago: executing program 2 (id=40): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefeda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="a51d484e080005000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e44751170000000000000", 0x2f}], 0x2) 3m4.443912338s ago: executing program 2 (id=42): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0xf, 0x1000000, 0x33a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffff9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) 3m4.212749504s ago: executing program 2 (id=45): r0 = socket(0x11, 0x3, 0x0) futex(0x0, 0x5af907c7a8accaef, 0x1, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000066b8f7008ec0", 0x7e}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x5e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x30008803}, 0x44040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f00000000c0)={0x3, 0x3}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x2b, 0x0, 0x1, [@typed={0x4, 0x3}]}]}, 0x28}], 0x1}, 0x20000000) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) truncate(&(0x7f0000000240)='./file1\x00', 0x3) 3m3.742597112s ago: executing program 2 (id=47): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone3(&(0x7f0000001240)={0x40000000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m3.19088525s ago: executing program 2 (id=50): sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfba}}, './file0\x00'}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9a4b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc840}, 0xc000) (async, rerun: 64) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f00000003c0)=0x9) (async, rerun: 64) r3 = pidfd_getfd(r0, r0, 0x0) listen(0xffffffffffffffff, 0x400) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000400)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$COMEDI_SUBDINFO(r5, 0x80486402, &(0x7f0000000540)) (async) accept4$bt_l2cap(r3, &(0x7f00000005c0), &(0x7f0000000600)=0xe, 0x180000) (async) r6 = socket$netlink(0x10, 0x3, 0x8) setns(r5, 0x8000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x2c0, 0x10, 0x7, 0x301, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x4}, [@nested={0xe4, 0x93, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @u32=0x666e}, @generic="20b1f1a6134669c61dc97a256cd640ea58b9084d2d64dcf44455260826b91f4722e0511ce5dc453fd646a50e0e17a9ab3292679f33f07d379aedbf94b722e0a255c29d9031e4b55009f0eec08ae7e9f068ec89bd11b7d6a6bda0dcf10f281e106759f3eda85d7ff1738f30d0cee5e62e18fc84fc1bab4c39b522092690e3ff16e14c98628d1b515c11031619bbb9229f13d2be6fae5368508354d89b00554577fe655035ed8db9da6207725eaa9bb18e0e8deabee60205975f82db4f907b33568218aae1772da5df2f3ef03ed613ee507f5241c3032581dd"]}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="f99d7777333bc90b16a2070be4043f2e6b0861d181c080b7563656f72e2b2730a3f07e94aa6e1ab4159e7b27451a24e20a7669bacbb10be82c65a50b1896545e9aaa2f27cb90172fca27eba5e54d4582c96f26727fa2fcc0849bcde095c8e246df2c5e93285e73d4a5cb1197fd76de3e18070d60a7d7af465e6c63b96e6e88c986b0e4", @nested={0x12e, 0x9, 0x0, 0x1, [@nested={0x4, 0x101}, @nested={0x4, 0xcf}, @nested={0x4, 0x45}, @nested={0x4, 0x66}, @generic="06c8b304f453841011f62da1883538c7804a6b530f829c2cfc8c0b7508e6a00e839c94c43686e3c04fa47c2e0e0604a4e93018502223665d7e1198a546105db12ffd7479d85e4029a091d6ac6943fd885d03db7c771a30bafa25ca73d1874ffc9e5ccd35126341c98f3a88e9f436b104b71e3de324f08a7ea27fb2bd740da70ea15fb7d98e09d43c67c20561a6d6f471d19aaee54ce2a52e3930a304b44f591efc822a8699e1cbd3", @nested={0x4, 0x81}, @typed={0x8, 0x75, 0x0, 0x0, @u32=0x3}, @generic="35723d9c1c056c66931dd8b591681ba396c1e6fca3a7e07bfc83e36e72ac1249ad0a51f472f8a9fae6bd5dc6bb1684b82c9fe7ddf077b0015b91a412d3637a5272dd45cc6ac396d6639edb2c0f5fbba1ad51d37583a026fe6f6e1c66df7cce686fbbcfd6e21f"]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008044) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000009c0)=@vmx={0x3, 0x0, 0x2080, {0x4, 0x58000, {0x1}, 0x0, 0x2d}, {"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", "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"}}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x14, r8, 0x8, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 64) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000002b80)=0x5) (async, rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r6) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002c40)={0x0, @remote, @local}, &(0x7f0000002c80)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x3c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x4c840) (async) write$bt_hci(r5, &(0x7f0000002d80)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x7f, 0x9, 0x5, 0x3}}}, 0xb) (async) recvmsg$unix(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002dc0)=""/12, 0xc}], 0x1, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x12102) (async, rerun: 32) r11 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/self/make-it-fail\x00', 0x1, 0x0) (rerun: 32) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r11, 0x8008f513, &(0x7f0000003000)) 3m2.325210544s ago: executing program 2 (id=56): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x58, r1, 0x825, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8040) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0xf, 0x1000000, 0x33a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffff9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) 3m1.774222286s ago: executing program 32 (id=56): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x58, r1, 0x825, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8040) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0xf, 0x1000000, 0x33a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffff9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) 4.67416573s ago: executing program 0 (id=1509): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x34ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 4.510512944s ago: executing program 0 (id=1511): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x34ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 4.431141156s ago: executing program 0 (id=1513): mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) write(r0, &(0x7f0000000a00), 0x0) 4.265311221s ago: executing program 0 (id=1515): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x31, 0x30, 0x30, 0x39, 0x36, 0x66, 0x30, 0x30, 0x64, 0x32, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2d}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x35, 0x66, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0xf305cd31f706af89, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00062233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x39, 0x37, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x61, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x33, 0x36, 0x65, 0x30, 0x30, 0x30, 0x65, 0x62, 0x30, 0x61, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 4.081815234s ago: executing program 0 (id=1516): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2000, 0x0) 2.433915474s ago: executing program 4 (id=1530): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x1c1140) mmap(&(0x7f0000818000/0x4000)=nil, 0x4000, 0x1000002, 0x11012, r0, 0x0) 2.259254561s ago: executing program 4 (id=1531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x80000000000009}, {0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3505}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x3}, {{@in=@remote, 0x0, 0x2b}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x5a8, 0x0, 0x4}]}]}, 0x1bc}}, 0x20000000) 2.156109379s ago: executing program 4 (id=1532): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x303280, 0x0) dup3(r1, r0, 0x0) 1.993831338s ago: executing program 4 (id=1533): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xdf, 0x6, 0x0, 0x1, "3df19b6ca7f0008883e897fcb09c81a3d43b8ed0bea6b7758e34b92e49398e7a"}) 1.807357764s ago: executing program 4 (id=1534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e388418188", 0x2e1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.764542939s ago: executing program 1 (id=1535): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x31, 0x30, 0x30, 0x39, 0x36, 0x66, 0x30, 0x30, 0x64, 0x32, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2d}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x35, 0x66, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0xf305cd31f706af89, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00062233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x39, 0x37, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x61, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x33, 0x36, 0x65, 0x30, 0x30, 0x30, 0x65, 0x62, 0x30, 0x61, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 1.703374883s ago: executing program 1 (id=1536): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x1000100, 0x100, 0x0, 0x3, 0xed}, 0x1c) 1.562570894s ago: executing program 1 (id=1537): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.470944434s ago: executing program 1 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0), 0x0) 1.333767527s ago: executing program 1 (id=1541): syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac059202738801020301090222000100", @ANYBLOB="8b75"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 925.790552ms ago: executing program 4 (id=1546): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x8013, 0x0) 738.68224ms ago: executing program 3 (id=1548): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="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", 0x27f) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 626.896874ms ago: executing program 3 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0), 0x0) 535.350494ms ago: executing program 3 (id=1550): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x20004800) 451.089937ms ago: executing program 3 (id=1551): r0 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0) 353.571675ms ago: executing program 3 (id=1552): setresgid(0xee00, 0x0, 0xee00) setfsgid(0xee00) 221.571746ms ago: executing program 3 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket$packet(0x11, 0x3, 0x300) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 221.369667ms ago: executing program 0 (id=1554): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 1 (id=1555): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000005000100070000000900020073797a3200000000050005000000000014000780050015000100000008001240000f00090d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): [ T6169] RBP: 00007fad4b6cd090 R08: 0000000000000000 R09: 0000000000000000 [ 114.050244][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.050258][ T6169] R13: 00007fad4aa26308 R14: 00007fad4aa26270 R15: 00007ffeac38dad8 [ 114.050293][ T6169] [ 114.402167][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.402190][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.582251][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.582276][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.831480][ T6201] FAULT_INJECTION: forcing a failure. [ 114.831480][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.831512][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 114.831537][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.831551][ T6201] Call Trace: [ 114.831560][ T6201] [ 114.831570][ T6201] dump_stack_lvl+0xe8/0x150 [ 114.831605][ T6201] should_fail_ex+0x3eb/0x540 [ 114.831636][ T6201] _copy_to_user+0x31/0xb0 [ 114.831668][ T6201] simple_read_from_buffer+0xe1/0x170 [ 114.831704][ T6201] proc_fail_nth_read+0x1bb/0x230 [ 114.831741][ T6201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.831782][ T6201] ? rw_verify_area+0x24a/0x4c0 [ 114.831811][ T6201] ? i2c_smbus_xfer+0x243/0x310 [ 114.831836][ T6201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.831869][ T6201] vfs_read+0x213/0xa80 [ 114.831905][ T6201] ? __pfx___mutex_lock+0x10/0x10 [ 114.831929][ T6201] ? __pfx_vfs_read+0x10/0x10 [ 114.831961][ T6201] ? __fget_files+0x2a/0x420 [ 114.831994][ T6201] ? __fget_files+0x3a2/0x420 [ 114.832021][ T6201] ? __fget_files+0x2a/0x420 [ 114.832060][ T6201] ksys_read+0x150/0x270 [ 114.832093][ T6201] ? __pfx_ksys_read+0x10/0x10 [ 114.832142][ T6201] do_syscall_64+0x166/0x520 [ 114.832164][ T6201] ? trace_irq_disable+0x3b/0x140 [ 114.832196][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.832219][ T6201] ? clear_bhb_loop+0x70/0xc0 [ 114.832247][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.832268][ T6201] RIP: 0033:0x7fad4a75e98e [ 114.832288][ T6201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.832306][ T6201] RSP: 002b:00007fad4b72ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.832330][ T6201] RAX: ffffffffffffffda RBX: 00007fad4b7306c0 RCX: 00007fad4a75e98e [ 114.832347][ T6201] RDX: 000000000000000f RSI: 00007fad4b7300a0 RDI: 0000000000000004 [ 114.832361][ T6201] RBP: 00007fad4b730090 R08: 0000000000000000 R09: 0000000000000000 [ 114.832375][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.832389][ T6201] R13: 00007fad4aa26038 R14: 00007fad4aa25fa0 R15: 00007ffeac38dad8 [ 114.832423][ T6201] [ 115.320477][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 115.705014][ T6224] kAFS: bad VL server IP address [ 115.993998][ T43] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 115.994139][ T5765] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.144533][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.146897][ T5765] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.08 [ 116.149568][ T5765] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 116.149593][ T5765] usb 5-1: config 1 has no interface number 0 [ 116.154086][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.154111][ T5765] usb 5-1: Product: syz [ 116.154167][ T5765] usb 5-1: Manufacturer: syz [ 116.154216][ T5765] usb 5-1: SerialNumber: syz [ 116.215670][ T5765] usb 5-1: 3:0 : does not exist [ 116.215693][ T5765] usb 5-1: 3:0 : does not exist [ 116.274119][ T43] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 116.414490][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.415657][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.426200][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.428712][ T43] usb usb2-port1: attempt power cycle [ 116.577785][ T5765] usb 5-1: USB disconnect, device number 2 [ 116.773901][ T43] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 116.798512][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.924087][ T43] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 116.947841][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.948319][ T43] usb usb2-port1: unable to enumerate USB device [ 117.473942][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.624043][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 117.626951][ T43] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 117.627988][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.628020][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.628059][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.631420][ T43] usb 1-1: config 0 descriptor?? [ 118.065532][ T43] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 118.065576][ T43] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 118.093355][ T6275] netlink: 'syz.3.124': attribute type 2 has an invalid length. [ 118.093378][ T6275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.124'. [ 118.242790][ T43] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 118.354043][ T5765] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.365097][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.443612][ T43] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 118.494046][ T25] usb 5-1: device descriptor read/64, error -71 [ 118.505315][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 118.517000][ T5765] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 118.518215][ T5765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.518271][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.521082][ T5765] usb 4-1: config 0 descriptor?? [ 118.561872][ T5765] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 118.644874][ T43] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 118.733946][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.847938][ T6262] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 118.865830][ T25] usb 5-1: device descriptor read/64, error -71 [ 118.923240][ T6281] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 118.950457][ T5765] gspca_vc032x: reg_w err -71 [ 118.950555][ T5765] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 118.952612][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.976174][ T25] usb usb5-port1: attempt power cycle [ 118.977196][ T5765] usb 4-1: USB disconnect, device number 4 [ 118.989750][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.995680][ T6262] ft260 0003:0403:6030.0001: ft260_i2c_write: failed with -38 [ 119.004058][ T6281] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 119.013039][ T6281] ft260 0003:0403:6030.0001: ft260_i2c_write: failed with -38 [ 119.140029][ T6292] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 119.238555][ T6298] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 119.238555][ T6298] program syz.1.126 not setting count and/or reply_len properly [ 119.326363][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.329292][ T5754] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 119.347485][ T25] usb 5-1: device descriptor read/8, error -71 [ 119.456445][ T5754] usb 1-1: device descriptor read/64, error -32 [ 119.584146][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.613190][ T25] usb 5-1: device descriptor read/8, error -71 [ 119.695142][ T5754] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 119.714458][ T25] usb usb5-port1: unable to enumerate USB device [ 124.834368][ T5754] usb 1-1: device descriptor read/64, error -110 [ 125.074287][ T5754] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 125.094298][ T5754] usb 1-1: device descriptor read/8, error -32 [ 125.334100][ T5754] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 125.354853][ T5754] usb 1-1: device descriptor read/8, error -32 [ 125.475258][ T5716] usb 1-1: USB disconnect, device number 5 [ 128.657692][ T6380] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.133'. [ 128.932836][ T6398] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.137'. [ 129.333988][ T5754] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.486723][ T5754] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.490389][ T5754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.490446][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.522155][ T989] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.522638][ T5754] usb 5-1: config 0 descriptor?? [ 129.538524][ T5754] pwc: Askey VC010 type 2 USB webcam detected. [ 129.664823][ T989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.666174][ T989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.666205][ T989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 129.708672][ T6392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.709965][ T989] usb 4-1: string descriptor 0 read error: -71 [ 129.710118][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.750050][ T989] usb 4-1: can't set config #1, error -71 [ 129.764420][ T989] usb 4-1: USB disconnect, device number 5 [ 129.954505][ T5754] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.959410][ T5754] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.961479][ T5754] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.962224][ T5754] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.962961][ T5754] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.963584][ T5754] pwc: recv_control_msg error -32 req 04 val 1400 [ 130.008659][ T5754] pwc: recv_control_msg error -32 req 02 val 2000 [ 130.013517][ T5754] pwc: recv_control_msg error -32 req 02 val 2100 [ 130.031470][ T5754] pwc: recv_control_msg error -32 req 04 val 1500 [ 130.038639][ T5754] pwc: recv_control_msg error -32 req 02 val 2500 [ 130.044126][ T5754] pwc: recv_control_msg error -32 req 02 val 2400 [ 130.056343][ T5754] pwc: recv_control_msg error -32 req 02 val 2600 [ 130.179642][ T6419] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 130.179642][ T6419] program syz.0.143 not setting count and/or reply_len properly [ 130.260443][ T5754] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.262617][ T5754] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.268778][ T5754] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.285790][ T5754] pwc: Registered as video103. [ 130.291483][ T5754] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 130.318297][ T5754] usb 5-1: USB disconnect, device number 7 [ 130.444613][ T6428] CIFS: Attempting to mount //::1/share [ 130.764491][ T6437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 130.830863][ T6438] FAULT_INJECTION: forcing a failure. [ 130.830863][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.830896][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 130.830929][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.830943][ T6438] Call Trace: [ 130.830952][ T6438] [ 130.830962][ T6438] dump_stack_lvl+0xe8/0x150 [ 130.830997][ T6438] should_fail_ex+0x3eb/0x540 [ 130.831028][ T6438] _copy_to_user+0x31/0xb0 [ 130.831060][ T6438] simple_read_from_buffer+0xe1/0x170 [ 130.831095][ T6438] proc_fail_nth_read+0x1bb/0x230 [ 130.831133][ T6438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.831171][ T6438] ? rw_verify_area+0x24a/0x4c0 [ 130.831204][ T6438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.831236][ T6438] vfs_read+0x213/0xa80 [ 130.831271][ T6438] ? __pfx___mutex_lock+0x10/0x10 [ 130.831294][ T6438] ? __pfx_vfs_read+0x10/0x10 [ 130.831326][ T6438] ? __fget_files+0x2a/0x420 [ 130.831360][ T6438] ? __fget_files+0x3a2/0x420 [ 130.831388][ T6438] ? __fget_files+0x2a/0x420 [ 130.831425][ T6438] ksys_read+0x150/0x270 [ 130.831459][ T6438] ? __pfx_ksys_read+0x10/0x10 [ 130.831503][ T6438] do_syscall_64+0x166/0x520 [ 130.831523][ T6438] ? trace_irq_disable+0x3b/0x140 [ 130.831556][ T6438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.831579][ T6438] ? clear_bhb_loop+0x70/0xc0 [ 130.831608][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.831631][ T6438] RIP: 0033:0x7f22a975e98e [ 130.831651][ T6438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.831670][ T6438] RSP: 002b:00007f22aa5adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.831694][ T6438] RAX: ffffffffffffffda RBX: 00007f22aa5ae6c0 RCX: 00007f22a975e98e [ 130.831711][ T6438] RDX: 000000000000000f RSI: 00007f22aa5ae0a0 RDI: 0000000000000003 [ 130.831725][ T6438] RBP: 00007f22aa5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 130.831739][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.831753][ T6438] R13: 00007f22a9a26128 R14: 00007f22a9a26090 R15: 00007fff14bc0be8 [ 130.831788][ T6438] [ 131.266115][ T6428] CIFS: VFS: cifs_mount failed w/return code = -112 [ 131.888306][ T6468] fuse: Bad value for 'fd' [ 131.890584][ T6468] Cannot find set identified by id 0 to match [ 132.212353][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 132.433956][ T5703] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 132.594841][ T5703] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.598631][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.598670][ T5703] usb 4-1: Product: syz [ 132.598687][ T5703] usb 4-1: Manufacturer: syz [ 132.598702][ T5703] usb 4-1: SerialNumber: syz [ 132.601285][ T5703] usb 4-1: config 0 descriptor?? [ 132.773969][ T5604] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.805290][ T5703] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.935050][ T5604] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.940498][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.940526][ T5604] usb 2-1: Product: syz [ 132.940572][ T5604] usb 2-1: Manufacturer: syz [ 132.940589][ T5604] usb 2-1: SerialNumber: syz [ 133.108607][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109206][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.392254][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 133.392354][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 133.629388][ T6493] FAULT_INJECTION: forcing a failure. [ 133.629388][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 133.629421][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT(full) [ 133.629446][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.629459][ T6493] Call Trace: [ 133.629471][ T6493] [ 133.629481][ T6493] dump_stack_lvl+0xe8/0x150 [ 133.629517][ T6493] should_fail_ex+0x3eb/0x540 [ 133.629548][ T6493] should_failslab+0xa8/0x100 [ 133.629575][ T6493] __kmalloc_noprof+0xf9/0x710 [ 133.629608][ T6493] ? tomoyo_encode+0x2ad/0x570 [ 133.629635][ T6493] ? tomoyo_encode+0x2ad/0x570 [ 133.629670][ T6493] tomoyo_encode+0x2ad/0x570 [ 133.629705][ T6493] tomoyo_realpath_from_path+0x5fa/0x640 [ 133.629748][ T6493] tomoyo_check_open_permission+0x229/0x470 [ 133.629773][ T6493] ? tomoyo_check_open_permission+0x1d3/0x470 [ 133.629798][ T6493] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 133.629823][ T6493] ? __asan_memset+0x22/0x50 [ 133.629891][ T6493] ? tomoyo_file_open+0x163/0x220 [ 133.629920][ T6493] ? try_to_unlazy+0x625/0xb50 [ 133.629961][ T6493] security_file_open+0xa9/0x240 [ 133.629985][ T6493] do_dentry_open+0x495/0x1360 [ 133.630021][ T6493] vfs_open_consume+0x4a/0x350 [ 133.630049][ T6493] ? path_openat+0x14bb/0x1e40 [ 133.630089][ T6493] path_openat+0x14d7/0x1e40 [ 133.630150][ T6493] do_file_open+0x23e/0x4a0 [ 133.630194][ T6493] ? __pfx_do_file_open+0x10/0x10 [ 133.630251][ T6493] ? _raw_spin_unlock+0x28/0x50 [ 133.630281][ T6493] ? alloc_fd+0x651/0x6c0 [ 133.630319][ T6493] do_sys_openat2+0x115/0x200 [ 133.630348][ T6493] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.630375][ T6493] ? ksys_write+0x242/0x270 [ 133.630414][ T6493] ? __pfx_ksys_write+0x10/0x10 [ 133.630450][ T6493] __x64_sys_openat+0x138/0x170 [ 133.630482][ T6493] do_syscall_64+0x166/0x520 [ 133.630503][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.630526][ T6493] ? clear_bhb_loop+0x70/0xc0 [ 133.630555][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.630577][ T6493] RIP: 0033:0x7fa79bf9e159 [ 133.630598][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.630616][ T6493] RSP: 002b:00007fa79ce97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.630640][ T6493] RAX: ffffffffffffffda RBX: 00007fa79c225fa0 RCX: 00007fa79bf9e159 [ 133.630657][ T6493] RDX: 0000000000000000 RSI: 0000200000002180 RDI: ffffffffffffff9c [ 133.630673][ T6493] RBP: 00007fa79ce97090 R08: 0000000000000000 R09: 0000000000000000 [ 133.630687][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.630700][ T6493] R13: 00007fa79c226038 R14: 00007fa79c225fa0 R15: 00007ffffafa2918 [ 133.630736][ T6493] [ 133.631142][ T6493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.258965][ T6477] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.374725][ T5703] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 134.379551][ T5703] usb 4-1: USB disconnect, device number 6 [ 134.774008][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 134.775077][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 134.775475][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 134.775534][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.781933][ T5604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.797123][ T5604] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 134.855331][ T5604] usb 2-1: USB disconnect, device number 11 [ 135.217453][ T6524] rust_binder: 6523:6524 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 135.601959][ T6538] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 135.601983][ T6538] FAULT_INJECTION: forcing a failure. [ 135.601983][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 135.602009][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 135.602035][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.602049][ T6538] Call Trace: [ 135.602058][ T6538] [ 135.602069][ T6538] dump_stack_lvl+0xe8/0x150 [ 135.602105][ T6538] should_fail_ex+0x3eb/0x540 [ 135.602138][ T6538] should_failslab+0xa8/0x100 [ 135.602166][ T6538] __kmalloc_cache_noprof+0x9e/0x600 [ 135.602203][ T6538] ? nfnetlink_rcv+0x1021/0x28c0 [ 135.602229][ T6538] ? nfnetlink_rcv+0x1021/0x28c0 [ 135.602261][ T6538] nfnetlink_rcv+0x1021/0x28c0 [ 135.602321][ T6538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 135.602364][ T6538] ? ref_tracker_free+0x689/0x830 [ 135.602419][ T6538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.602451][ T6538] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 135.602501][ T6538] netlink_unicast+0x7bd/0x940 [ 135.602540][ T6538] netlink_sendmsg+0x7c3/0xae0 [ 135.602576][ T6538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.602614][ T6538] ? apparmor_socket_sendmsg+0x98/0x360 [ 135.602641][ T6538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.602670][ T6538] sock_sendmsg_nosec+0x13a/0x180 [ 135.602708][ T6538] ____sys_sendmsg+0x54e/0x850 [ 135.602740][ T6538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.602774][ T6538] ? import_iovec+0x73/0xa0 [ 135.602807][ T6538] ___sys_sendmsg+0x2a5/0x360 [ 135.602840][ T6538] ? __lock_acquire+0x747/0x2de0 [ 135.602879][ T6538] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.602941][ T6538] ? __fget_files+0x2a/0x420 [ 135.602970][ T6538] ? __fget_files+0x3a2/0x420 [ 135.603009][ T6538] __x64_sys_sendmsg+0x1b1/0x290 [ 135.603037][ T6538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.603085][ T6538] do_syscall_64+0x166/0x520 [ 135.603106][ T6538] ? trace_irq_disable+0x3b/0x140 [ 135.603138][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.603162][ T6538] ? clear_bhb_loop+0x70/0xc0 [ 135.603190][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.603214][ T6538] RIP: 0033:0x7ff51079e159 [ 135.603235][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.603253][ T6538] RSP: 002b:00007ff5116f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.603277][ T6538] RAX: ffffffffffffffda RBX: 00007ff510a25fa0 RCX: 00007ff51079e159 [ 135.603294][ T6538] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 135.603309][ T6538] RBP: 00007ff5116f7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.603323][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.603335][ T6538] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 135.603371][ T6538] [ 136.259137][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.259639][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.635898][ T6563] loop7: detected capacity change from 0 to 16384 [ 136.856458][ T6567] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 136.875012][ T6565] loop7: detected capacity change from 16384 to 0 [ 136.875547][ T6565] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 136.875646][ T6565] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 136.875686][ T6565] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 136.875726][ T6565] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 136.875766][ T6565] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 136.875804][ T6565] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 136.875843][ T6565] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 136.875882][ T6565] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 136.875921][ T6565] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 136.897035][ T6565] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 137.014783][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.151081][ T6570] netlink: 'syz.4.195': attribute type 1 has an invalid length. [ 137.175694][ T43] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 137.178248][ T43] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 137.178281][ T43] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 137.178308][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 137.192075][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.192149][ T43] usb 2-1: Product: syz [ 137.192201][ T43] usb 2-1: Manufacturer: syz [ 137.192243][ T43] usb 2-1: SerialNumber: syz [ 137.254768][ T6566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.254939][ T6566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.384903][ T5754] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 137.545425][ T5754] usb 4-1: not running at top speed; connect to a high speed hub [ 137.545489][ T5754] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 137.548135][ T5754] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.548304][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.598617][ T5754] gspca_main: spca501-2.14.0 probing 0000:0000 [ 137.730262][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.732335][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.764410][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.767032][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.827530][ T43] rtl8150 2-1:1.0: couldn't reset the device [ 137.827891][ T43] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 137.838478][ T43] usb 2-1: USB disconnect, device number 12 [ 138.105080][ T5754] gspca_spca501: reg write: error -110 [ 138.105097][ T5754] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 138.105155][ T5754] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 138.106116][ T5754] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 138.106806][ T5754] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 138.107172][ T5754] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 138.107212][ T5754] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 138.107830][ T5754] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 138.338327][ T6589] netlink: 'syz.4.199': attribute type 9 has an invalid length. [ 138.733949][ T5604] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.804083][ T43] usb 4-1: USB disconnect, device number 7 [ 138.883899][ T5604] usb 2-1: Using ep0 maxpacket: 8 [ 138.884623][ T5604] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.885604][ T5604] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.885629][ T5604] usb 2-1: config 0 has no interface number 0 [ 138.885669][ T5604] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.885710][ T5604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.894434][ T5604] usb 2-1: config 0 descriptor?? [ 138.913908][ T5754] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.979083][ T5604] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.044266][ T5754] usb 5-1: device descriptor read/64, error -71 [ 139.288725][ T5754] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.428731][ T5754] usb 5-1: device descriptor read/64, error -71 [ 139.478061][ T5765] usb 2-1: USB disconnect, device number 13 [ 139.536242][ T5754] usb usb5-port1: attempt power cycle [ 139.643067][ T6606] fuse: Bad value for 'fd' [ 139.733727][ T6610] fuse: Unknown parameter 'group_id00000000000000000000' [ 139.874434][ T5754] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.894513][ T5754] usb 5-1: device descriptor read/8, error -71 [ 139.953938][ T5703] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.084964][ T5703] usb 4-1: device descriptor read/64, error -71 [ 140.133904][ T5754] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.159209][ T5754] usb 5-1: device descriptor read/8, error -71 [ 140.265770][ T5754] usb usb5-port1: unable to enumerate USB device [ 140.333898][ T5703] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.465008][ T5703] usb 4-1: device descriptor read/64, error -71 [ 140.578063][ T5703] usb usb4-port1: attempt power cycle [ 140.925077][ T5703] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.947321][ T5703] usb 4-1: device descriptor read/8, error -71 [ 141.006361][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.006845][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.058466][ T6627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.184009][ T5703] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.205015][ T5703] usb 4-1: device descriptor read/8, error -71 [ 141.314218][ T5703] usb usb4-port1: unable to enumerate USB device [ 141.751435][ T6650] FAULT_INJECTION: forcing a failure. [ 141.751435][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.751467][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(full) [ 141.751492][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.751505][ T6650] Call Trace: [ 141.751514][ T6650] [ 141.751523][ T6650] dump_stack_lvl+0xe8/0x150 [ 141.751558][ T6650] should_fail_ex+0x3eb/0x540 [ 141.751589][ T6650] _copy_to_user+0x31/0xb0 [ 141.751622][ T6650] simple_read_from_buffer+0xe1/0x170 [ 141.751657][ T6650] proc_fail_nth_read+0x1bb/0x230 [ 141.751695][ T6650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.751732][ T6650] ? rw_verify_area+0x24a/0x4c0 [ 141.751765][ T6650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.751798][ T6650] vfs_read+0x213/0xa80 [ 141.751835][ T6650] ? __pfx___mutex_lock+0x10/0x10 [ 141.751859][ T6650] ? __pfx_vfs_read+0x10/0x10 [ 141.751899][ T6650] ? __fget_files+0x2a/0x420 [ 141.751933][ T6650] ? __fget_files+0x3a2/0x420 [ 141.751960][ T6650] ? __fget_files+0x2a/0x420 [ 141.751998][ T6650] ksys_read+0x150/0x270 [ 141.752031][ T6650] ? __pfx_ksys_read+0x10/0x10 [ 141.752075][ T6650] do_syscall_64+0x166/0x520 [ 141.752096][ T6650] ? trace_irq_disable+0x3b/0x140 [ 141.752127][ T6650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.752151][ T6650] ? clear_bhb_loop+0x70/0xc0 [ 141.752182][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.752206][ T6650] RIP: 0033:0x7fa79bf5e98e [ 141.752226][ T6650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.752244][ T6650] RSP: 002b:00007fa79ce96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.752268][ T6650] RAX: ffffffffffffffda RBX: 00007fa79ce976c0 RCX: 00007fa79bf5e98e [ 141.752285][ T6650] RDX: 000000000000000f RSI: 00007fa79ce970a0 RDI: 0000000000000004 [ 141.752299][ T6650] RBP: 00007fa79ce97090 R08: 0000000000000000 R09: 0000000000000000 [ 141.752313][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.752326][ T6650] R13: 00007fa79c226038 R14: 00007fa79c225fa0 R15: 00007ffffafa2918 [ 141.752362][ T6650] [ 143.233915][ T5754] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.363917][ T5754] usb 5-1: device descriptor read/64, error -71 [ 143.604013][ T5754] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.733931][ T5754] usb 5-1: device descriptor read/64, error -71 [ 143.850879][ T5754] usb usb5-port1: attempt power cycle [ 144.112535][ T6689] FAULT_INJECTION: forcing a failure. [ 144.112535][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 144.112573][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 144.112598][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.112616][ T6689] Call Trace: [ 144.112625][ T6689] [ 144.112634][ T6689] dump_stack_lvl+0xe8/0x150 [ 144.112669][ T6689] should_fail_ex+0x3eb/0x540 [ 144.112697][ T6689] ? __alloc_skb+0x1db/0x7a0 [ 144.112717][ T6689] should_failslab+0xa8/0x100 [ 144.112743][ T6689] ? __alloc_skb+0x1db/0x7a0 [ 144.112761][ T6689] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 144.112792][ T6689] ? __alloc_skb+0x18d/0x7a0 [ 144.112813][ T6689] ? __alloc_skb+0x1db/0x7a0 [ 144.112840][ T6689] __alloc_skb+0x1db/0x7a0 [ 144.112865][ T6689] netlink_ack+0x136/0xb30 [ 144.112892][ T6689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.112932][ T6689] ? __asan_memcpy+0x40/0x70 [ 144.112972][ T6689] netlink_rcv_skb+0x2a4/0x4a0 [ 144.113001][ T6689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.113041][ T6689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.113084][ T6689] ? down_read+0x2b9/0x320 [ 144.113121][ T6689] genl_rcv+0x28/0x40 [ 144.113153][ T6689] netlink_unicast+0x7bd/0x940 [ 144.113190][ T6689] netlink_sendmsg+0x7c3/0xae0 [ 144.113225][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.113264][ T6689] ? apparmor_socket_sendmsg+0x98/0x360 [ 144.113291][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.113320][ T6689] sock_sendmsg_nosec+0x13a/0x180 [ 144.113355][ T6689] ____sys_sendmsg+0x54e/0x850 [ 144.113386][ T6689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.113421][ T6689] ? import_iovec+0x73/0xa0 [ 144.113454][ T6689] ___sys_sendmsg+0x2a5/0x360 [ 144.113478][ T6689] ? __lock_acquire+0x747/0x2de0 [ 144.113516][ T6689] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.113577][ T6689] ? __fget_files+0x2a/0x420 [ 144.113605][ T6689] ? __fget_files+0x3a2/0x420 [ 144.113645][ T6689] __x64_sys_sendmsg+0x1b1/0x290 [ 144.113674][ T6689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.113722][ T6689] do_syscall_64+0x166/0x520 [ 144.113743][ T6689] ? trace_irq_disable+0x3b/0x140 [ 144.113774][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.113797][ T6689] ? clear_bhb_loop+0x70/0xc0 [ 144.113824][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.113847][ T6689] RIP: 0033:0x7fad4a79e159 [ 144.113868][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.113886][ T6689] RSP: 002b:00007fad4b730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.113911][ T6689] RAX: ffffffffffffffda RBX: 00007fad4aa25fa0 RCX: 00007fad4a79e159 [ 144.113927][ T6689] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.113942][ T6689] RBP: 00007fad4b730090 R08: 0000000000000000 R09: 0000000000000000 [ 144.113955][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.113968][ T6689] R13: 00007fad4aa26038 R14: 00007fad4aa25fa0 R15: 00007ffeac38dad8 [ 144.114002][ T6689] [ 144.184792][ T5754] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.327680][ T5754] usb 5-1: device descriptor read/8, error -71 [ 144.478304][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.478794][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.584896][ T5754] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.604814][ T5754] usb 5-1: device descriptor read/8, error -71 [ 144.715222][ T5754] usb usb5-port1: unable to enumerate USB device [ 145.985282][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 146.786878][ T6748] fuse: Bad value for 'user_id' [ 146.786901][ T6748] fuse: Bad value for 'user_id' [ 146.862553][ T6750] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 146.862553][ T6750] program syz.0.250 not setting count and/or reply_len properly [ 147.114865][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.118009][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.223430][ T6777] fuse: Bad value for 'fd' [ 148.425923][ T6778] dlm: no locking on control device [ 149.167533][ T6799] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 149.167558][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 149.256866][ T6802] capability: warning: `syz.1.265' uses deprecated v2 capabilities in a way that may be insecure [ 149.711103][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 150.205649][ T5703] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 150.355097][ T5703] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.356628][ T5703] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 150.356664][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.362823][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.362851][ T5703] usb 4-1: Product: syz [ 150.362868][ T5703] usb 4-1: Manufacturer: syz [ 150.362894][ T5703] usb 4-1: SerialNumber: syz [ 150.428043][ T5703] usb 4-1: config 0 descriptor?? [ 150.451488][ T5703] usb 4-1: selecting invalid altsetting 0 [ 151.047023][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.047583][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.048118][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.053477][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.064952][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.076679][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.077402][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.086817][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.098740][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.099872][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.100885][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.101313][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.101747][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.102272][ T6829] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 151.116505][ T43] usb 4-1: USB disconnect, device number 12 [ 151.171077][ T989] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.315420][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 151.317529][ T989] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 151.318887][ T989] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.318922][ T989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.318960][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.409766][ T989] usb 2-1: config 0 descriptor?? [ 151.497439][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 151.673990][ T989] usbhid 2-1:0.0: can't add hid device: -71 [ 151.674099][ T989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 151.703111][ T989] usb 2-1: USB disconnect, device number 14 [ 151.892496][ T6850] UDC core: g1: couldn't find an available UDC or it's busy [ 153.775501][ T6897] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.249729][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.251462][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.518229][ T6913] syz.1.297 uses obsolete (PF_INET,SOCK_PACKET) [ 155.096369][ T6936] FAULT_INJECTION: forcing a failure. [ 155.096369][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 155.096405][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT(full) [ 155.096431][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.096454][ T6936] Call Trace: [ 155.096463][ T6936] [ 155.096474][ T6936] dump_stack_lvl+0xe8/0x150 [ 155.096511][ T6936] should_fail_ex+0x3eb/0x540 [ 155.096543][ T6936] should_failslab+0xa8/0x100 [ 155.096571][ T6936] __kmalloc_noprof+0xf9/0x710 [ 155.096606][ T6936] ? __list_lru_init+0x114/0x680 [ 155.096641][ T6936] ? __list_lru_init+0x114/0x680 [ 155.096683][ T6936] __list_lru_init+0x114/0x680 [ 155.096726][ T6936] sget_fc+0xf3c/0x1a40 [ 155.096766][ T6936] ? __pfx_super_s_dev_test+0x10/0x10 [ 155.096806][ T6936] ? __pfx_super_s_dev_set+0x10/0x10 [ 155.096841][ T6936] ? __pfx_sget_fc+0x10/0x10 [ 155.096873][ T6936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.096909][ T6936] sget_dev+0xab/0xf0 [ 155.096939][ T6936] ? __pfx_sget_dev+0x10/0x10 [ 155.096977][ T6936] ? get_mtd_device+0x200/0x240 [ 155.097014][ T6936] ? __pfx_get_mtd_device+0x10/0x10 [ 155.097058][ T6936] mtd_get_sb+0x51/0x410 [ 155.097085][ T6936] ? __pfx_jffs2_fill_super+0x10/0x10 [ 155.097114][ T6936] ? __pfx_jffs2_fill_super+0x10/0x10 [ 155.097144][ T6936] get_tree_mtd+0x597/0x7d0 [ 155.097173][ T6936] ? __pfx_jffs2_fill_super+0x10/0x10 [ 155.097201][ T6936] ? __pfx_get_tree_mtd+0x10/0x10 [ 155.097243][ T6936] vfs_get_tree+0x92/0x2a0 [ 155.097279][ T6936] do_new_mount+0x319/0xdc0 [ 155.097314][ T6936] ? __pfx_do_new_mount+0x10/0x10 [ 155.097345][ T6936] ? ns_capable+0x84/0xe0 [ 155.097374][ T6936] ? path_mount+0x647/0x1050 [ 155.097405][ T6936] ? user_path_at+0xd4/0x160 [ 155.097440][ T6936] __se_sys_mount+0x31d/0x420 [ 155.097476][ T6936] ? __pfx___se_sys_mount+0x10/0x10 [ 155.097512][ T6936] ? __x64_sys_mount+0x20/0xc0 [ 155.097544][ T6936] do_syscall_64+0x166/0x520 [ 155.097564][ T6936] ? trace_irq_disable+0x3b/0x140 [ 155.097598][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.097622][ T6936] ? clear_bhb_loop+0x70/0xc0 [ 155.097651][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.097675][ T6936] RIP: 0033:0x7fa79bf9e159 [ 155.097696][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.097716][ T6936] RSP: 002b:00007fa79ce97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.097742][ T6936] RAX: ffffffffffffffda RBX: 00007fa79c225fa0 RCX: 00007fa79bf9e159 [ 155.097759][ T6936] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 155.097774][ T6936] RBP: 00007fa79c035024 R08: 0000000000000000 R09: 0000000000000000 [ 155.097789][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.097803][ T6936] R13: 00007fa79c226038 R14: 00007fa79c225fa0 R15: 00007ffffafa2918 [ 155.097839][ T6936] [ 155.282760][ T6942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.306'. [ 155.283009][ T6942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.306'. [ 155.877254][ T5604] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.034711][ T5604] usb 5-1: Using ep0 maxpacket: 32 [ 156.036504][ T5604] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 156.039512][ T5604] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 156.039531][ T5604] usb 5-1: config 0 has no interface number 0 [ 156.039558][ T5604] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.039573][ T5604] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 156.039592][ T5604] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.039611][ T5604] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.050201][ T5604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.050271][ T5604] usb 5-1: Product: syz [ 156.050306][ T5604] usb 5-1: Manufacturer: syz [ 156.050348][ T5604] usb 5-1: SerialNumber: syz [ 156.123539][ T5604] usb 5-1: config 0 descriptor?? [ 156.172146][ T5604] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input12 [ 156.419385][ T5604] usb 5-1: USB disconnect, device number 16 [ 157.227593][ T30] audit: type=1326 audit(1788586027.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.245264][ T30] audit: type=1326 audit(1788586027.524:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.285069][ T30] audit: type=1326 audit(1788586027.574:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.285126][ T30] audit: type=1326 audit(1788586027.574:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.295789][ T30] audit: type=1326 audit(1788586027.574:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.332640][ T30] audit: type=1326 audit(1788586027.574:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.332790][ T30] audit: type=1326 audit(1788586027.604:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.335731][ T30] audit: type=1326 audit(1788586027.604:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.340375][ T30] audit: type=1326 audit(1788586027.604:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 157.663924][ T6994] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 160.349968][ T7086] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 160.568509][ T7086] team0 (unregistering): Port device team_slave_0 removed [ 160.911200][ T7086] team0 (unregistering): Port device team_slave_1 removed [ 161.831554][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 162.668551][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.678087][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.642206][ T7111] 9pnet_virtio: no channels available for device syz [ 163.888367][ T7125] Zero length message leads to an empty skb [ 164.517418][ T7148] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 164.517581][ T7148] netlink: 'syz.4.357': attribute type 5 has an invalid length. [ 164.517598][ T7148] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 164.517618][ T7148] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22) [ 165.568925][ T7174] ima: policy update failed [ 165.569463][ T30] audit: type=1802 audit(1788586035.854:11): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.366" res=0 errno=0 [ 165.665598][ T989] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 165.823407][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.826568][ T989] usb 2-1: not running at top speed; connect to a high speed hub [ 165.826653][ T989] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 165.840942][ T989] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 165.840992][ T989] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 165.841013][ T989] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 165.841033][ T989] usb 2-1: config 14 has no interface number 0 [ 165.841049][ T989] usb 2-1: config 14 has no interface number 1 [ 165.841242][ T989] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 165.841313][ T989] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 165.841384][ T989] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.841458][ T989] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 165.841531][ T989] usb 2-1: config 14 interface 57 has no altsetting 0 [ 165.841584][ T989] usb 2-1: config 14 interface 228 has no altsetting 0 [ 165.891875][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.891900][ T989] usb 2-1: Product: syz [ 165.891913][ T989] usb 2-1: Manufacturer: syz [ 165.891926][ T989] usb 2-1: SerialNumber: syz [ 166.435503][ T989] legousbtower 2-1:14.57: interrupt endpoints not found [ 166.784179][ T52] Bluetooth: hci1: command tx timeout [ 166.843478][ T989] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 166.858168][ T989] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 167.095558][ T7161] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint [ 167.100734][ T7161] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f] [ 167.100802][ T7161] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f] [ 167.154831][ T7161] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 167.156544][ T7161] pci 0000:00:04.0: BAR 0 [io 0x1000-0x103f]: assigned [ 167.212809][ T7161] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 168.065280][ T7169] usb 2-1: LEGO USB Tower reset control request failed [ 168.067975][ T43] usb 2-1: USB disconnect, device number 15 [ 168.098189][ T43] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 170.944016][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 179.833981][ T7298] process 'syz.3.374' launched './file0' with NULL argv: empty string added [ 179.875711][ T7298] FAULT_INJECTION: forcing a failure. [ 179.875711][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 179.875743][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(full) [ 179.875767][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.875780][ T7298] Call Trace: [ 179.875789][ T7298] [ 179.875798][ T7298] dump_stack_lvl+0xe8/0x150 [ 179.875835][ T7298] should_fail_ex+0x3eb/0x540 [ 179.875866][ T7298] should_failslab+0xa8/0x100 [ 179.875891][ T7298] ? single_open+0x119/0x240 [ 179.875916][ T7298] kmem_cache_alloc_noprof+0x9c/0x600 [ 179.875947][ T7298] ? __kmalloc_cache_noprof+0x31c/0x600 [ 179.875981][ T7298] ? single_open+0x5a/0x240 [ 179.876003][ T7298] ? single_open+0x119/0x240 [ 179.876033][ T7298] single_open+0x119/0x240 [ 179.876064][ T7298] proc_setgroups_open+0x575/0x6e0 [ 179.876101][ T7298] ? __pfx_proc_setgroups_open+0x10/0x10 [ 179.876135][ T7298] do_dentry_open+0x80e/0x1360 [ 179.876171][ T7298] vfs_open_consume+0x4a/0x350 [ 179.876194][ T7298] ? path_openat+0x14bb/0x1e40 [ 179.876230][ T7298] path_openat+0x14d7/0x1e40 [ 179.876281][ T7298] do_file_open+0x23e/0x4a0 [ 179.876318][ T7298] ? __pfx_do_file_open+0x10/0x10 [ 179.876359][ T7298] ? __pfx_kfree_link+0x10/0x10 [ 179.876407][ T7298] ? _raw_spin_unlock+0x28/0x50 [ 179.876440][ T7298] ? alloc_fd+0x651/0x6c0 [ 179.876474][ T7298] do_sys_openat2+0x115/0x200 [ 179.876497][ T7298] ? __se_sys_futex+0x3a8/0x450 [ 179.876521][ T7298] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.876549][ T7298] ? rcu_is_watching+0x16/0xb0 [ 179.876574][ T7298] __x64_sys_openat+0x138/0x170 [ 179.876602][ T7298] do_syscall_64+0x166/0x520 [ 179.876620][ T7298] ? trace_irq_disable+0x3b/0x140 [ 179.876649][ T7298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.876670][ T7298] ? clear_bhb_loop+0x70/0xc0 [ 179.876695][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.876715][ T7298] RIP: 0033:0x7ff51075e98e [ 179.876735][ T7298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.876752][ T7298] RSP: 002b:00007ff5116f6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.876776][ T7298] RAX: ffffffffffffffda RBX: 00007ff5116f76c0 RCX: 00007ff51075e98e [ 179.876793][ T7298] RDX: 0000000000000002 RSI: 00007ff5116f6f90 RDI: ffffffffffffff9c [ 179.876808][ T7298] RBP: 00007ff510835024 R08: 0000000000000000 R09: 0000000000000000 [ 179.876821][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.876835][ T7298] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 179.876870][ T7298] [ 180.188733][ T7302] FAULT_INJECTION: forcing a failure. [ 180.188733][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 180.188766][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 180.188791][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.188806][ T7302] Call Trace: [ 180.188815][ T7302] [ 180.188824][ T7302] dump_stack_lvl+0xe8/0x150 [ 180.188868][ T7302] should_fail_ex+0x3eb/0x540 [ 180.188901][ T7302] should_failslab+0xa8/0x100 [ 180.188929][ T7302] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 180.188965][ T7302] ? __d_alloc+0x37/0x6f0 [ 180.188994][ T7302] ? __d_alloc+0x37/0x6f0 [ 180.189032][ T7302] __d_alloc+0x37/0x6f0 [ 180.189070][ T7302] path_from_stashed+0x35c/0x580 [ 180.189110][ T7302] proc_ns_get_link+0x16b/0x2a0 [ 180.189145][ T7302] ? __pfx_proc_ns_get_link+0x10/0x10 [ 180.189184][ T7302] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 180.189211][ T7302] ? __pfx_proc_ns_get_link+0x10/0x10 [ 180.189246][ T7302] pick_link+0x72a/0xfd0 [ 180.189285][ T7302] step_into_slowpath+0x58a/0x820 [ 180.189318][ T7302] ? __pfx_step_into_slowpath+0x10/0x10 [ 180.189359][ T7302] path_openat+0x9ac/0x1e40 [ 180.189416][ T7302] do_file_open+0x23e/0x4a0 [ 180.189457][ T7302] ? __pfx_do_file_open+0x10/0x10 [ 180.189513][ T7302] ? _raw_spin_unlock+0x28/0x50 [ 180.189544][ T7302] ? alloc_fd+0x651/0x6c0 [ 180.189586][ T7302] do_sys_openat2+0x115/0x200 [ 180.189614][ T7302] ? __se_sys_futex+0x3a8/0x450 [ 180.189640][ T7302] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.189672][ T7302] ? rcu_is_watching+0x16/0xb0 [ 180.189701][ T7302] __x64_sys_openat+0x138/0x170 [ 180.189733][ T7302] do_syscall_64+0x166/0x520 [ 180.189754][ T7302] ? trace_irq_disable+0x3b/0x140 [ 180.189786][ T7302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.189811][ T7302] ? clear_bhb_loop+0x70/0xc0 [ 180.189839][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.189872][ T7302] RIP: 0033:0x7f22a975e98e [ 180.189893][ T7302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.189912][ T7302] RSP: 002b:00007f22aa5ceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.189937][ T7302] RAX: ffffffffffffffda RBX: 00007f22aa5cf6c0 RCX: 00007f22a975e98e [ 180.189954][ T7302] RDX: 0000000000000002 RSI: 00007f22aa5cef90 RDI: ffffffffffffff9c [ 180.189969][ T7302] RBP: 00007f22a9835024 R08: 0000000000000000 R09: 0000000000000000 [ 180.189984][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.189997][ T7302] R13: 00007f22a9a26038 R14: 00007f22a9a25fa0 R15: 00007fff14bc0be8 [ 180.190033][ T7302] [ 180.568913][ T7307] ======================================================= [ 180.568913][ T7307] WARNING: The mand mount option has been deprecated and [ 180.568913][ T7307] and is ignored by this kernel. Remove the mand [ 180.568913][ T7307] option from the mount to silence this warning. [ 180.568913][ T7307] ======================================================= [ 180.745199][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 181.176528][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.177844][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.263921][ T5754] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 181.429247][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 181.431363][ T5754] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 181.450558][ T5754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.450585][ T5754] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 181.482744][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.482770][ T5754] usb 5-1: Product: syz [ 181.482794][ T5754] usb 5-1: Manufacturer: syz [ 181.482806][ T5754] usb 5-1: SerialNumber: syz [ 181.537075][ T5754] usb 5-1: config 0 descriptor?? [ 181.809968][ T5754] usb 5-1: USB disconnect, device number 17 [ 182.057955][ T7351] input: syz0 as /devices/virtual/input/input13 [ 182.190016][ T7351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.386'. [ 182.350995][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 182.401759][ T7362] netlink: del zone limit has 4 unknown bytes [ 182.764950][ T7368] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 182.765132][ T7368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 183.122372][ T7383] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 183.281479][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 183.405843][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 184.715230][ T989] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.857596][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 184.872918][ T989] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 184.883225][ T989] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 184.883264][ T989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.910901][ T989] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 184.910931][ T989] usb 5-1: Product: syz [ 184.910947][ T989] usb 5-1: Manufacturer: syz [ 184.910963][ T989] usb 5-1: SerialNumber: syz [ 184.938830][ T989] usb 5-1: config 0 descriptor?? [ 184.958349][ T989] usb 5-1: selecting invalid altsetting 0 [ 185.181898][ T7429] overlayfs: missing 'workdir' [ 185.310318][ T989] usb 5-1: USB disconnect, device number 18 [ 185.310652][ C0] usb 5-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 185.314539][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 185.529048][ T7444] udevd[7444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.339096][ T7475] FAULT_INJECTION: forcing a failure. [ 186.339096][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 186.339129][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(full) [ 186.339161][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.339176][ T7475] Call Trace: [ 186.339185][ T7475] [ 186.339195][ T7475] dump_stack_lvl+0xe8/0x150 [ 186.339234][ T7475] should_fail_ex+0x3eb/0x540 [ 186.339267][ T7475] should_failslab+0xa8/0x100 [ 186.339305][ T7475] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 186.339341][ T7475] ? __d_alloc+0x37/0x6f0 [ 186.339370][ T7475] ? __d_alloc+0x37/0x6f0 [ 186.339408][ T7475] __d_alloc+0x37/0x6f0 [ 186.339437][ T7475] ? __list_lru_init+0x542/0x680 [ 186.339472][ T7475] ? shmem_fill_super+0xa5a/0x1150 [ 186.339506][ T7475] d_make_root+0x41/0x80 [ 186.339539][ T7475] shmem_fill_super+0xcbc/0x1150 [ 186.339583][ T7475] ? __pfx_shmem_fill_super+0x10/0x10 [ 186.339623][ T7475] ? __pfx_shmem_fill_super+0x10/0x10 [ 186.339655][ T7475] get_tree_nodev+0xbb/0x150 [ 186.339690][ T7475] vfs_get_tree+0x92/0x2a0 [ 186.339727][ T7475] do_new_mount+0x319/0xdc0 [ 186.339762][ T7475] ? __pfx_do_new_mount+0x10/0x10 [ 186.339792][ T7475] ? ns_capable+0x84/0xe0 [ 186.339821][ T7475] ? path_mount+0x647/0x1050 [ 186.339853][ T7475] ? user_path_at+0xd4/0x160 [ 186.339887][ T7475] __se_sys_mount+0x31d/0x420 [ 186.339922][ T7475] ? __pfx___se_sys_mount+0x10/0x10 [ 186.339958][ T7475] ? __x64_sys_mount+0x20/0xc0 [ 186.339990][ T7475] do_syscall_64+0x166/0x520 [ 186.340011][ T7475] ? trace_irq_disable+0x3b/0x140 [ 186.340045][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.340070][ T7475] ? clear_bhb_loop+0x70/0xc0 [ 186.340099][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.340122][ T7475] RIP: 0033:0x7ff51079e159 [ 186.340144][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.340163][ T7475] RSP: 002b:00007ff5116f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.340188][ T7475] RAX: ffffffffffffffda RBX: 00007ff510a25fa0 RCX: 00007ff51079e159 [ 186.340205][ T7475] RDX: 0000200000001fc0 RSI: 0000200000001f80 RDI: 0000000000000000 [ 186.340221][ T7475] RBP: 00007ff510835024 R08: 0000200000002000 R09: 0000000000000000 [ 186.340236][ T7475] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 186.340251][ T7475] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 186.340296][ T7475] [ 187.002282][ T7494] netlink: 'syz.3.438': attribute type 9 has an invalid length. [ 187.782575][ T7529] kvm: pic: level sensitive irq not supported [ 187.782751][ T7529] kvm: pic: non byte read [ 187.783182][ T7529] kvm: pic: single mode not supported [ 187.783254][ T7529] kvm: pic: non byte read [ 187.783610][ T7529] kvm: pic: non byte read [ 187.787666][ T7529] kvm: pic: non byte read [ 187.788435][ T7529] kvm: pic: non byte read [ 187.790448][ T7529] kvm: pic: single mode not supported [ 187.790479][ T7529] kvm: pic: level sensitive irq not supported [ 187.790641][ T7529] kvm: pic: non byte read [ 187.791276][ T7529] kvm: pic: level sensitive irq not supported [ 187.791627][ T7529] kvm: pic: non byte read [ 187.792210][ T7529] kvm: pic: single mode not supported [ 187.792337][ T7529] kvm: pic: non byte read [ 187.793068][ T7529] kvm: pic: non byte read [ 188.695308][ T7560] 9pnet_virtio: no channels available for device syz [ 189.181812][ T7579] netlink: zone id is out of range [ 189.181830][ T7579] netlink: zone id is out of range [ 189.213278][ T7579] fuse: Invalid rootmode [ 189.220763][ T7579] netlink: 844 bytes leftover after parsing attributes in process `syz.4.477'. [ 189.220789][ T7579] netlink: 844 bytes leftover after parsing attributes in process `syz.4.477'. [ 189.360157][ T7581] netlink: 76 bytes leftover after parsing attributes in process `syz.1.478'. [ 189.360205][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 189.360221][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 191.193149][ T7654] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 191.858036][ T7683] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.661197][ T989] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.815230][ T989] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 192.837954][ T989] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 192.838009][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.843451][ T989] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.843482][ T989] usb 5-1: Manufacturer: syz [ 192.890492][ T989] usb 5-1: config 0 descriptor?? [ 193.118388][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.122050][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.176123][ T989] rc_core: IR keymap rc-hauppauge not found [ 193.176145][ T989] Registered IR keymap rc-empty [ 193.207101][ T989] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 193.243417][ T989] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 193.307740][ T989] usb 5-1: USB disconnect, device number 19 [ 194.441779][ T7747] FAULT_INJECTION: forcing a failure. [ 194.441779][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 194.441815][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.4.536 Not tainted syzkaller #0 PREEMPT(full) [ 194.441865][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.441880][ T7747] Call Trace: [ 194.441889][ T7747] [ 194.441900][ T7747] dump_stack_lvl+0xe8/0x150 [ 194.441944][ T7747] should_fail_ex+0x3eb/0x540 [ 194.441975][ T7747] ? __alloc_skb+0x1db/0x7a0 [ 194.441998][ T7747] should_failslab+0xa8/0x100 [ 194.442024][ T7747] ? __alloc_skb+0x1db/0x7a0 [ 194.442044][ T7747] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 194.442077][ T7747] ? __alloc_skb+0x18d/0x7a0 [ 194.442099][ T7747] ? __alloc_skb+0x1db/0x7a0 [ 194.442128][ T7747] __alloc_skb+0x1db/0x7a0 [ 194.442154][ T7747] netlink_ack+0x136/0xb30 [ 194.442181][ T7747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.442223][ T7747] ? __asan_memcpy+0x40/0x70 [ 194.442264][ T7747] netlink_rcv_skb+0x2a4/0x4a0 [ 194.442297][ T7747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.442335][ T7747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.442381][ T7747] ? down_read+0x2b9/0x320 [ 194.442410][ T7747] genl_rcv+0x28/0x40 [ 194.442443][ T7747] netlink_unicast+0x7bd/0x940 [ 194.442481][ T7747] netlink_sendmsg+0x7c3/0xae0 [ 194.442518][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.442557][ T7747] ? apparmor_socket_sendmsg+0x98/0x360 [ 194.442585][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.442615][ T7747] sock_sendmsg_nosec+0x13a/0x180 [ 194.442652][ T7747] __sys_sendto+0x408/0x5a0 [ 194.442682][ T7747] ? __pfx___sys_sendto+0x10/0x10 [ 194.442735][ T7747] ? do_user_addr_fault+0xd3f/0x1480 [ 194.442776][ T7747] __x64_sys_sendto+0xde/0x100 [ 194.442803][ T7747] do_syscall_64+0x166/0x520 [ 194.442824][ T7747] ? trace_irq_disable+0x3b/0x140 [ 194.442856][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.442881][ T7747] ? clear_bhb_loop+0x70/0xc0 [ 194.442910][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.442941][ T7747] RIP: 0033:0x7fa79bf5e98e [ 194.442963][ T7747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.442984][ T7747] RSP: 002b:00007fa79ce95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.443011][ T7747] RAX: ffffffffffffffda RBX: 00007fa79ce976c0 RCX: 00007fa79bf5e98e [ 194.443029][ T7747] RDX: 0000000000000020 RSI: 00007fa79ce96000 RDI: 0000000000000005 [ 194.443045][ T7747] RBP: 0000000000000000 R08: 00007fa79ce95f04 R09: 000000000000000c [ 194.443059][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 194.443074][ T7747] R13: 00007fa79ce95f58 R14: 00007fa79ce96000 R15: 0000000000000000 [ 194.443109][ T7747] [ 194.551885][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.552039][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.880915][ T5604] rust_binder: 7753: undelivered TRANSACTION_ERROR: 29189 [ 194.882366][ T7755] syz.4.538 (7755) used greatest stack depth: 19232 bytes left [ 196.118485][ T7777] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 196.220765][ T7781] FAULT_INJECTION: forcing a failure. [ 196.220765][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 196.220802][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.0.547 Not tainted syzkaller #0 PREEMPT(full) [ 196.220828][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.220842][ T7781] Call Trace: [ 196.220851][ T7781] [ 196.220861][ T7781] dump_stack_lvl+0xe8/0x150 [ 196.220899][ T7781] should_fail_ex+0x3eb/0x540 [ 196.220931][ T7781] should_failslab+0xa8/0x100 [ 196.220958][ T7781] ? skb_clone+0x212/0x3a0 [ 196.220989][ T7781] kmem_cache_alloc_noprof+0x9c/0x600 [ 196.221026][ T7781] ? skb_clone+0x212/0x3a0 [ 196.221059][ T7781] skb_clone+0x212/0x3a0 [ 196.221090][ T7781] __netlink_deliver_tap+0x413/0x860 [ 196.221133][ T7781] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.221165][ T7781] netlink_deliver_tap+0x19c/0x1b0 [ 196.221196][ T7781] netlink_sendskb+0x68/0x140 [ 196.221225][ T7781] ctrl_getfamily+0x4c8/0x5c0 [ 196.221262][ T7781] ? __pfx_ctrl_getfamily+0x10/0x10 [ 196.221308][ T7781] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 196.221342][ T7781] genl_family_rcv_msg_doit+0x233/0x340 [ 196.221386][ T7781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 196.221435][ T7781] ? __dev_queue_xmit+0x29b/0x3820 [ 196.221474][ T7781] genl_rcv_msg+0x614/0x7a0 [ 196.221516][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.221550][ T7781] ? __pfx_ctrl_getfamily+0x10/0x10 [ 196.221589][ T7781] ? __asan_memcpy+0x40/0x70 [ 196.221620][ T7781] ? __skb_clone+0x5c/0x6c0 [ 196.221653][ T7781] netlink_rcv_skb+0x226/0x4a0 [ 196.221707][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.221744][ T7781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.221789][ T7781] ? down_read+0x2b9/0x320 [ 196.221821][ T7781] genl_rcv+0x28/0x40 [ 196.221856][ T7781] netlink_unicast+0x7bd/0x940 [ 196.221894][ T7781] netlink_sendmsg+0x7c3/0xae0 [ 196.221931][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.221973][ T7781] ? apparmor_socket_sendmsg+0x98/0x360 [ 196.222003][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.222032][ T7781] sock_sendmsg_nosec+0x13a/0x180 [ 196.222069][ T7781] __sys_sendto+0x408/0x5a0 [ 196.222101][ T7781] ? __pfx___sys_sendto+0x10/0x10 [ 196.222156][ T7781] ? rcu_is_watching+0x16/0xb0 [ 196.222188][ T7781] __x64_sys_sendto+0xde/0x100 [ 196.222216][ T7781] do_syscall_64+0x166/0x520 [ 196.222238][ T7781] ? trace_irq_disable+0x3b/0x140 [ 196.222272][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.222305][ T7781] ? clear_bhb_loop+0x70/0xc0 [ 196.222335][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.222356][ T7781] RIP: 0033:0x7fad4a75e98e [ 196.222379][ T7781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.222400][ T7781] RSP: 002b:00007fad4b72ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.222426][ T7781] RAX: ffffffffffffffda RBX: 00007fad4b7306c0 RCX: 00007fad4a75e98e [ 196.222444][ T7781] RDX: 0000000000000020 RSI: 00007fad4b72f000 RDI: 0000000000000005 [ 196.222460][ T7781] RBP: 0000000000000000 R08: 00007fad4b72ef04 R09: 000000000000000c [ 196.222476][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 196.222490][ T7781] R13: 00007fad4b72ef58 R14: 00007fad4b72f000 R15: 0000000000000000 [ 196.222526][ T7781] [ 196.969354][ T7806] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 197.155036][ T989] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.316146][ T989] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 197.317799][ T989] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.317832][ T989] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 197.317859][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.317887][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.317927][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.386118][ T7802] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.386405][ T7802] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.389266][ T989] pl2303 4-1:1.0: pl2303 converter detected [ 197.418231][ T989] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 197.442916][ T7821] 9pnet_virtio: no channels available for device syz [ 197.669941][ T5614] Bluetooth: hci1: unexpected event for opcode 0x202f [ 197.745665][ T7802] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 197.746545][ T7802] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 197.747303][ T7802] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 197.750478][ T7802] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 197.750584][ T7802] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 197.777424][ T989] usb 4-1: USB disconnect, device number 13 [ 197.809576][ T989] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 197.810419][ T989] pl2303 4-1:1.0: device disconnected [ 198.175421][ T7847] mmap: syz.4.573 (7847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.481857][ T7861] FAULT_INJECTION: forcing a failure. [ 198.481857][ T7861] name failslab, interval 1, probability 0, space 0, times 0 [ 198.481884][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.4.578 Not tainted syzkaller #0 PREEMPT(full) [ 198.481902][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.481912][ T7861] Call Trace: [ 198.481918][ T7861] [ 198.481925][ T7861] dump_stack_lvl+0xe8/0x150 [ 198.481951][ T7861] should_fail_ex+0x3eb/0x540 [ 198.481973][ T7861] should_failslab+0xa8/0x100 [ 198.481992][ T7861] __kmalloc_noprof+0xf9/0x710 [ 198.482041][ T7861] ? tomoyo_encode+0x2ad/0x570 [ 198.482070][ T7861] ? tomoyo_encode+0x2ad/0x570 [ 198.482106][ T7861] tomoyo_encode+0x2ad/0x570 [ 198.482145][ T7861] tomoyo_realpath_from_path+0x5fa/0x640 [ 198.482177][ T7861] tomoyo_check_open_permission+0x229/0x470 [ 198.482195][ T7861] ? tomoyo_check_open_permission+0x1d3/0x470 [ 198.482211][ T7861] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 198.482252][ T7861] ? __asan_memset+0x22/0x50 [ 198.482292][ T7861] ? lockdep_hardirqs_on+0x7b/0x110 [ 198.482354][ T7861] ? tomoyo_file_open+0x163/0x220 [ 198.482376][ T7861] ? devcgroup_check_permission+0x31/0x8f0 [ 198.482405][ T7861] security_file_open+0xa9/0x240 [ 198.482421][ T7861] do_dentry_open+0x495/0x1360 [ 198.482447][ T7861] vfs_open_consume+0x4a/0x350 [ 198.482463][ T7861] ? path_openat+0x14bb/0x1e40 [ 198.482488][ T7861] path_openat+0x14d7/0x1e40 [ 198.482526][ T7861] do_file_open+0x23e/0x4a0 [ 198.482554][ T7861] ? __pfx_do_file_open+0x10/0x10 [ 198.482594][ T7861] ? _raw_spin_unlock+0x28/0x50 [ 198.482616][ T7861] ? alloc_fd+0x651/0x6c0 [ 198.482645][ T7861] do_sys_openat2+0x115/0x200 [ 198.482666][ T7861] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.482689][ T7861] ? do_user_addr_fault+0xd3f/0x1480 [ 198.482716][ T7861] __x64_sys_openat+0x138/0x170 [ 198.482739][ T7861] do_syscall_64+0x166/0x520 [ 198.482753][ T7861] ? trace_irq_disable+0x3b/0x140 [ 198.482775][ T7861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.482792][ T7861] ? clear_bhb_loop+0x70/0xc0 [ 198.482812][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.482828][ T7861] RIP: 0033:0x7fa79bf5e98e [ 198.482843][ T7861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.482856][ T7861] RSP: 002b:00007fa79ce96b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.482873][ T7861] RAX: ffffffffffffffda RBX: 00007fa79ce976c0 RCX: 00007fa79bf5e98e [ 198.482885][ T7861] RDX: 0000000000000000 RSI: 00007fa79ce96c00 RDI: ffffffffffffff9c [ 198.482896][ T7861] RBP: 00007fa79ce96c00 R08: 0000000000000000 R09: 0000000000000000 [ 198.482907][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 198.482917][ T7861] R13: 00007fa79c226038 R14: 00007fa79c225fa0 R15: 00007ffffafa2918 [ 198.482941][ T7861] [ 198.482969][ T7861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.013619][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.030321][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.197465][ T989] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 199.220296][ T7882] ceph: No mds server is up or the cluster is laggy [ 199.223122][ T989] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 199.414297][ T7892] fuse: Bad value for 'fd' [ 199.460547][ T7894] loop2: detected capacity change from 0 to 4095 [ 199.567650][ T7894] buffer_io_error: 1782 callbacks suppressed [ 199.567736][ T7894] Buffer I/O error on dev loop2, logical block 511, async page read [ 199.570520][ T7444] Buffer I/O error on dev loop2, logical block 511, async page read [ 200.372049][ T7933] input: syz0 as /devices/virtual/input/input15 [ 200.957396][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.623'. [ 201.065201][ T7444] block nbd64: NBD_DISCONNECT [ 201.336452][ T7444] udevd[7444]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 201.395455][ T7973] kvm: pic: non byte read [ 201.395625][ T7973] kvm: MONITOR instruction emulated as NOP! [ 201.395890][ T7973] kvm: pic: non byte read [ 201.396224][ T7973] kvm: pic: non byte read [ 201.396561][ T7973] kvm: pic: non byte read [ 201.396904][ T7973] kvm: pic: non byte read [ 201.397210][ T7973] kvm: pic: level sensitive irq not supported [ 201.397257][ T7973] kvm: pic: non byte read [ 201.397520][ T7973] kvm: pic: non byte write [ 201.397864][ T7973] kvm: pic: non byte read [ 201.397936][ T7973] kvm: pic: non byte write [ 201.431853][ T7973] kvm: pic: non byte read [ 201.432012][ T7973] kvm: pic: non byte write [ 201.432680][ T7973] kvm: pic: single mode not supported [ 201.475138][ T7973] kvm: pic: non byte read [ 201.475214][ T7973] kvm: pic: non byte write [ 201.475429][ T7973] kvm: pic: single mode not supported [ 201.475437][ T7973] kvm: pic: level sensitive irq not supported [ 201.475470][ T7973] kvm: pic: non byte read [ 201.475554][ T7973] kvm: pic: non byte write [ 201.656140][ T7981] tipc: Started in network mode [ 201.656176][ T7981] tipc: Node identity ac1414aa, cluster identity 4711 [ 201.672910][ T7981] tipc: New replicast peer: 172.20.20.187 [ 201.718578][ T7981] tipc: Enabled bearer , priority 10 [ 202.254603][ T8011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.664182][ T989] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.788962][ T5765] tipc: Node number set to 2886997162 [ 202.813974][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 202.814947][ T989] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 202.816668][ T989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.816717][ T989] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 202.816748][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.820152][ T989] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 202.820199][ T989] usb 2-1: Product: syz [ 202.820215][ T989] usb 2-1: Manufacturer: syz [ 202.820232][ T989] usb 2-1: SerialNumber: syz [ 202.899157][ T989] usb 2-1: config 0 descriptor?? [ 202.993907][ T989] rc_core: IR keymap rc-imon-rsc not found [ 202.993928][ T989] Registered IR keymap rc-empty [ 202.995307][ T989] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 203.002784][ T989] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 203.116410][ T5765] usb 2-1: USB disconnect, device number 16 [ 203.436395][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.436889][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.309010][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 204.754560][ T8099] infiniband !yz2: set active [ 204.754584][ T8099] infiniband !yz2: added veth0_to_batadv [ 204.848829][ T8099] smbdirect: ib_dev[!yz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 204.848862][ T8099] smbdirect: ib_dev[!yz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 204.848892][ T8099] smbdirect: ib_dev[!yz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 204.962838][ T8129] tipc: Enabling not permitted [ 204.962866][ T8129] tipc: Enabling of bearer rejected, failed to enable media [ 205.022072][ T8099] RDS/IB: !yz2: added [ 205.022563][ T8099] smc: adding ib device !yz2 with port count 1 [ 205.022695][ T8099] smc: ib device !yz2 port 1 has no pnetid [ 205.309399][ T30] audit: type=1326 audit(1788586075.594:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.310166][ T30] audit: type=1326 audit(1788586075.594:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.369946][ T30] audit: type=1326 audit(1788586075.654:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.370585][ T30] audit: type=1326 audit(1788586075.654:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.370639][ T30] audit: type=1326 audit(1788586075.654:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.370996][ T30] audit: type=1326 audit(1788586075.654:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.371045][ T30] audit: type=1326 audit(1788586075.654:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.372312][ T30] audit: type=1326 audit(1788586075.654:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.372364][ T30] audit: type=1326 audit(1788586075.654:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 205.373318][ T30] audit: type=1326 audit(1788586075.654:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.1.698" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f22a979e159 code=0x7ffc0000 [ 206.961210][ T8183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 207.554004][ T5695] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.704012][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 207.708500][ T5695] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 207.710520][ T5695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.710545][ T5695] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.751445][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.751475][ T5695] usb 2-1: Product: syz [ 207.751492][ T5695] usb 2-1: Manufacturer: syz [ 207.751511][ T5695] usb 2-1: SerialNumber: syz [ 207.787080][ T5695] usb 2-1: config 0 descriptor?? [ 208.031592][ T8198] FAULT_INJECTION: forcing a failure. [ 208.031592][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 208.031628][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.0.722 Not tainted syzkaller #0 PREEMPT(full) [ 208.031655][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.031670][ T8198] Call Trace: [ 208.031679][ T8198] [ 208.031690][ T8198] dump_stack_lvl+0xe8/0x150 [ 208.031728][ T8198] should_fail_ex+0x3eb/0x540 [ 208.031759][ T8198] should_failslab+0xa8/0x100 [ 208.031785][ T8198] ? alloc_empty_file+0x5b/0x1d0 [ 208.031811][ T8198] kmem_cache_alloc_noprof+0x9c/0x600 [ 208.031844][ T8198] ? stack_depot_save_flags+0x33/0x7f0 [ 208.031872][ T8198] ? alloc_empty_file+0x5b/0x1d0 [ 208.031898][ T8198] ? kmem_cache_alloc_noprof+0x151/0x600 [ 208.031934][ T8198] alloc_empty_file+0x5b/0x1d0 [ 208.031961][ T8198] path_openat+0x9d/0x1e40 [ 208.032001][ T8198] ? __lock_acquire+0x747/0x2de0 [ 208.032046][ T8198] do_file_open+0x23e/0x4a0 [ 208.032086][ T8198] ? __pfx_do_file_open+0x10/0x10 [ 208.032144][ T8198] ? _raw_spin_unlock+0x28/0x50 [ 208.032174][ T8198] ? alloc_fd+0x651/0x6c0 [ 208.032213][ T8198] do_sys_openat2+0x115/0x200 [ 208.032240][ T8198] ? __se_sys_futex+0x3a8/0x450 [ 208.032266][ T8198] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.032299][ T8198] ? rcu_is_watching+0x16/0xb0 [ 208.032328][ T8198] __x64_sys_openat+0x138/0x170 [ 208.032360][ T8198] do_syscall_64+0x166/0x520 [ 208.032381][ T8198] ? trace_irq_disable+0x3b/0x140 [ 208.032414][ T8198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.032438][ T8198] ? clear_bhb_loop+0x70/0xc0 [ 208.032466][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.032490][ T8198] RIP: 0033:0x7fad4a79e159 [ 208.032512][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.032533][ T8198] RSP: 002b:00007fad4b730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.032558][ T8198] RAX: ffffffffffffffda RBX: 00007fad4aa25fa0 RCX: 00007fad4a79e159 [ 208.032584][ T8198] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 208.032601][ T8198] RBP: 00007fad4a835024 R08: 0000000000000000 R09: 0000000000000000 [ 208.032616][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.032630][ T8198] R13: 00007fad4aa26038 R14: 00007fad4aa25fa0 R15: 00007ffeac38dad8 [ 208.032665][ T8198] [ 208.716507][ T8211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.923929][ T5765] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.074828][ T5765] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.076520][ T5765] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.076550][ T5765] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.076572][ T5765] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.076620][ T5765] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.076650][ T5765] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.079866][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.079896][ T5765] usb 4-1: Product: syz [ 209.079912][ T5765] usb 4-1: Manufacturer: syz [ 209.105369][ T5765] cdc_wdm 4-1:1.0: skipping garbage [ 209.105440][ T5765] cdc_wdm 4-1:1.0: skipping garbage [ 209.185768][ T5765] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 209.185806][ T5765] cdc_wdm 4-1:1.0: Unknown control protocol [ 209.408713][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.408835][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.409063][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.409088][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.409404][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.409429][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.409644][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.409668][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.409882][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.409906][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.410121][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.410146][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.410245][ T5765] usb 4-1: USB disconnect, device number 14 [ 209.410364][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 209.410387][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 209.410408][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 209.620915][ T5754] usb 2-1: USB disconnect, device number 17 [ 211.831247][ T8271] UDC core: g1: couldn't find an available UDC or it's busy [ 211.997212][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 211.997254][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 211.997282][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 212.247605][ T8186] Set syz1 is full, maxelem 65536 reached [ 212.416302][ T8296] overlayfs: failed to clone upperpath [ 212.870935][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.883561][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.040598][ T8331] overlayfs: failed to clone upperpath [ 214.590507][ T8363] device-mapper: ioctl: Unable to rename non-existent device, to [ 217.144012][ T8322] Set syz1 is full, maxelem 65536 reached [ 221.132381][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.132876][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.115613][ T8571] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint [ 222.120402][ T8571] pci 0000:00:04.0: BAR 0 [io 0x1000-0x103f] [ 222.120458][ T8571] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f] [ 222.156280][ T8571] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 222.156376][ T8571] pci 0000:00:04.0: BAR 0 [io 0x1000-0x103f]: assigned [ 222.209358][ T8571] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 235.152100][ T8724] syzkaller1: entered promiscuous mode [ 235.152127][ T8724] syzkaller1: entered allmulticast mode [ 235.431268][ T8748] overlayfs: failed to resolve './file1': -2 [ 235.444972][ T5754] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.594877][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 235.595751][ T5754] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 235.599850][ T5754] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 235.599879][ T5754] usb 4-1: config 0 has no interface number 0 [ 235.599920][ T5754] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.599943][ T5754] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 235.599971][ T5754] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.599999][ T5754] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.655620][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.655705][ T5754] usb 4-1: Product: syz [ 235.655747][ T5754] usb 4-1: Manufacturer: syz [ 235.655792][ T5754] usb 4-1: SerialNumber: syz [ 235.714085][ T5754] usb 4-1: config 0 descriptor?? [ 235.730204][ T5754] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input17 [ 235.744958][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 235.932837][ T5703] usb 4-1: USB disconnect, device number 15 [ 237.166660][ T8820] overlayfs: failed to resolve './file1': -2 [ 238.000910][ T8849] overlayfs: failed to clone upperpath [ 238.120321][ T8853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.581794][ T8878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.295083][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 239.295103][ T30] audit: type=1326 audit(1788586109.584:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.295910][ T30] audit: type=1326 audit(1788586109.584:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.302156][ T30] audit: type=1326 audit(1788586109.584:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.302213][ T30] audit: type=1326 audit(1788586109.584:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.302261][ T30] audit: type=1326 audit(1788586109.584:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.302308][ T30] audit: type=1326 audit(1788586109.584:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.368918][ T30] audit: type=1326 audit(1788586109.634:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.369066][ T30] audit: type=1326 audit(1788586109.634:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.376869][ T30] audit: type=1326 audit(1788586109.664:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.377014][ T30] audit: type=1326 audit(1788586109.664:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.982" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51079e159 code=0x7ffc0000 [ 239.834728][ T8932] overlayfs: failed to resolve './file1': -2 [ 240.361812][ T8961] overlayfs: failed to resolve './file0': -2 [ 240.951437][ T8985] overlayfs: failed to resolve './file0': -2 [ 240.984566][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 240.984601][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 240.984620][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 241.182603][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1018'. [ 241.367968][ T9007] overlayfs: overlapping lowerdir path [ 241.615737][ T9013] overlayfs: failed to resolve './file0': -2 [ 242.218372][ T9033] overlayfs: overlapping lowerdir path [ 243.765902][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 243.929560][ T9106] tipc: Started in network mode [ 243.929596][ T9106] tipc: Node identity 5e1322881fe1, cluster identity 4711 [ 243.929974][ T9106] tipc: Enabled bearer , priority 0 [ 244.020810][ T9106] syzkaller0: entered promiscuous mode [ 244.020842][ T9106] syzkaller0: entered allmulticast mode [ 244.021801][ T9106] tipc: Resetting bearer [ 244.074738][ T9104] tipc: Resetting bearer [ 244.158002][ T9115] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 247.096800][ T9104] tipc: Disabling bearer [ 247.148232][ T5754] tipc: Node number set to 1106387592 [ 248.058427][ T9183] FAULT_INJECTION: forcing a failure. [ 248.058427][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.058469][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.3.1096 Not tainted syzkaller #0 PREEMPT(full) [ 248.058487][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.058498][ T9183] Call Trace: [ 248.058505][ T9183] [ 248.058512][ T9183] dump_stack_lvl+0xe8/0x150 [ 248.058539][ T9183] should_fail_ex+0x3eb/0x540 [ 248.058567][ T9183] _copy_from_user+0x2d/0xb0 [ 248.058591][ T9183] __x64_sys_signalfd4+0x117/0x1a0 [ 248.058612][ T9183] ? __pfx___se_sys_futex+0x10/0x10 [ 248.058631][ T9183] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 248.058658][ T9183] do_syscall_64+0x166/0x520 [ 248.058673][ T9183] ? trace_irq_disable+0x3b/0x140 [ 248.058698][ T9183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.058714][ T9183] ? clear_bhb_loop+0x70/0xc0 [ 248.058735][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.058775][ T9183] RIP: 0033:0x7ff51079e159 [ 248.058796][ T9183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.058817][ T9183] RSP: 002b:00007ff5116f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 248.058844][ T9183] RAX: ffffffffffffffda RBX: 00007ff510a25fa0 RCX: 00007ff51079e159 [ 248.058856][ T9183] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 248.058867][ T9183] RBP: 00007ff510835024 R08: 0000000000000000 R09: 0000000000000000 [ 248.058878][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.058887][ T9183] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 248.058911][ T9183] [ 248.701823][ T9206] FAULT_INJECTION: forcing a failure. [ 248.701823][ T9206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.701860][ T9206] CPU: 1 UID: 0 PID: 9206 Comm: syz.1.1106 Not tainted syzkaller #0 PREEMPT(full) [ 248.701887][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.701901][ T9206] Call Trace: [ 248.701911][ T9206] [ 248.701921][ T9206] dump_stack_lvl+0xe8/0x150 [ 248.701958][ T9206] should_fail_ex+0x3eb/0x540 [ 248.701990][ T9206] _copy_from_user+0x2d/0xb0 [ 248.702022][ T9206] __x64_sys_signalfd4+0x117/0x1a0 [ 248.702054][ T9206] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 248.702094][ T9206] do_syscall_64+0x166/0x520 [ 248.702115][ T9206] ? trace_irq_disable+0x3b/0x140 [ 248.702150][ T9206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.702174][ T9206] ? clear_bhb_loop+0x70/0xc0 [ 248.702203][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.702227][ T9206] RIP: 0033:0x7f22a979e159 [ 248.702249][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.702269][ T9206] RSP: 002b:00007f22aa5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 248.702295][ T9206] RAX: ffffffffffffffda RBX: 00007f22a9a25fa0 RCX: 00007f22a979e159 [ 248.702323][ T9206] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 248.702340][ T9206] RBP: 00007f22a9835024 R08: 0000000000000000 R09: 0000000000000000 [ 248.702355][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.702370][ T9206] R13: 00007f22a9a26038 R14: 00007f22a9a25fa0 R15: 00007fff14bc0be8 [ 248.702405][ T9206] [ 251.548818][ T9337] FAULT_INJECTION: forcing a failure. [ 251.548818][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.548854][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.3.1144 Not tainted syzkaller #0 PREEMPT(full) [ 251.548882][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.548896][ T9337] Call Trace: [ 251.548905][ T9337] [ 251.548916][ T9337] dump_stack_lvl+0xe8/0x150 [ 251.548953][ T9337] should_fail_ex+0x3eb/0x540 [ 251.548985][ T9337] _copy_from_user+0x2d/0xb0 [ 251.549026][ T9337] __x64_sys_signalfd4+0x117/0x1a0 [ 251.549060][ T9337] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 251.549100][ T9337] do_syscall_64+0x166/0x520 [ 251.549122][ T9337] ? trace_irq_disable+0x3b/0x140 [ 251.549155][ T9337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.549180][ T9337] ? clear_bhb_loop+0x70/0xc0 [ 251.549209][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.549232][ T9337] RIP: 0033:0x7ff51079e159 [ 251.549254][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.549275][ T9337] RSP: 002b:00007ff5116f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 251.549301][ T9337] RAX: ffffffffffffffda RBX: 00007ff510a25fa0 RCX: 00007ff51079e159 [ 251.549319][ T9337] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 251.549336][ T9337] RBP: 00007ff510835024 R08: 0000000000000000 R09: 0000000000000000 [ 251.549351][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.549364][ T9337] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 251.549398][ T9337] [ 252.332674][ T9235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.549342][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1155'. [ 253.115070][ T9404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1165'. [ 253.268406][ T9408] overlayfs: missing 'lowerdir' [ 253.412860][ T9415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1170'. [ 253.789591][ T9429] syzkaller1: entered promiscuous mode [ 253.789619][ T9429] syzkaller1: entered allmulticast mode [ 253.840339][ T9435] overlayfs: missing 'lowerdir' [ 254.296089][ T9461] overlayfs: missing 'lowerdir' [ 254.344285][ T9459] syzkaller1: entered promiscuous mode [ 254.344311][ T9459] syzkaller1: entered allmulticast mode [ 254.426037][ T9467] netlink: 'syz.4.1194': attribute type 10 has an invalid length. [ 254.511032][ T9467] team0 (unregistering): Port device team_slave_0 removed [ 254.537225][ T9467] team0 (unregistering): Port device team_slave_1 removed [ 254.785891][ T5703] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.830810][ T9487] binfmt_misc: register: failed to install interpreter ./file0 [ 254.947811][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 254.948649][ T5703] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 254.949963][ T5703] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 254.949989][ T5703] usb 4-1: config 0 has no interface number 0 [ 254.950030][ T5703] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.950054][ T5703] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 254.950082][ T5703] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.950105][ T5703] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.971488][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.971578][ T5703] usb 4-1: Product: syz [ 254.971635][ T5703] usb 4-1: Manufacturer: syz [ 254.971677][ T5703] usb 4-1: SerialNumber: syz [ 254.996718][ T5703] usb 4-1: config 0 descriptor?? [ 255.076635][ T5703] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input19 [ 255.329798][ T5703] usb 4-1: USB disconnect, device number 16 [ 255.377754][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 255.986623][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986697][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.530243][ T9522] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1219'. [ 256.711982][ T9527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 256.833205][ T9507] Set syz1 is full, maxelem 65536 reached [ 256.943603][ T9536] netlink: 'syz.3.1227': attribute type 1 has an invalid length. [ 257.043712][ T9541] FAULT_INJECTION: forcing a failure. [ 257.043712][ T9541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.043897][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.3.1229 Not tainted syzkaller #0 PREEMPT(full) [ 257.043924][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.043939][ T9541] Call Trace: [ 257.043948][ T9541] [ 257.043958][ T9541] dump_stack_lvl+0xe8/0x150 [ 257.043994][ T9541] should_fail_ex+0x3eb/0x540 [ 257.044024][ T9541] _copy_from_user+0x2d/0xb0 [ 257.044066][ T9541] __x64_sys_signalfd4+0x117/0x1a0 [ 257.044098][ T9541] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 257.044138][ T9541] do_syscall_64+0x166/0x520 [ 257.044159][ T9541] ? trace_irq_disable+0x3b/0x140 [ 257.044192][ T9541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.044215][ T9541] ? clear_bhb_loop+0x70/0xc0 [ 257.044243][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.044266][ T9541] RIP: 0033:0x7ff51079e159 [ 257.044287][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.044307][ T9541] RSP: 002b:00007ff5116f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 257.044332][ T9541] RAX: ffffffffffffffda RBX: 00007ff510a25fa0 RCX: 00007ff51079e159 [ 257.044349][ T9541] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 257.044365][ T9541] RBP: 00007ff510835024 R08: 0000000000000000 R09: 0000000000000000 [ 257.044380][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.044394][ T9541] R13: 00007ff510a26038 R14: 00007ff510a25fa0 R15: 00007ffd81189218 [ 257.044430][ T9541] [ 257.371161][ T9552] overlayfs: missing 'workdir' [ 257.617919][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 257.692741][ T9569] FAULT_INJECTION: forcing a failure. [ 257.692741][ T9569] name failslab, interval 1, probability 0, space 0, times 0 [ 257.692779][ T9569] CPU: 0 UID: 0 PID: 9569 Comm: syz.1.1242 Not tainted syzkaller #0 PREEMPT(full) [ 257.692806][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.692820][ T9569] Call Trace: [ 257.692830][ T9569] [ 257.692840][ T9569] dump_stack_lvl+0xe8/0x150 [ 257.692877][ T9569] should_fail_ex+0x3eb/0x540 [ 257.692919][ T9569] should_failslab+0xa8/0x100 [ 257.692947][ T9569] __kmalloc_cache_noprof+0x9e/0x600 [ 257.692983][ T9569] ? do_signalfd4+0x11f/0x3f0 [ 257.693008][ T9569] ? do_signalfd4+0x11f/0x3f0 [ 257.693042][ T9569] do_signalfd4+0x11f/0x3f0 [ 257.693074][ T9569] __x64_sys_signalfd4+0x15a/0x1a0 [ 257.693104][ T9569] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 257.693144][ T9569] do_syscall_64+0x166/0x520 [ 257.693166][ T9569] ? trace_irq_disable+0x3b/0x140 [ 257.693199][ T9569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.693223][ T9569] ? clear_bhb_loop+0x70/0xc0 [ 257.693251][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.693274][ T9569] RIP: 0033:0x7f22a979e159 [ 257.693299][ T9569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.693320][ T9569] RSP: 002b:00007f22aa5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 257.693346][ T9569] RAX: ffffffffffffffda RBX: 00007f22a9a25fa0 RCX: 00007f22a979e159 [ 257.693363][ T9569] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 257.693379][ T9569] RBP: 00007f22a9835024 R08: 0000000000000000 R09: 0000000000000000 [ 257.693394][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.693409][ T9569] R13: 00007f22a9a26038 R14: 00007f22a9a25fa0 R15: 00007fff14bc0be8 [ 257.693444][ T9569] [ 258.043057][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 258.043078][ T30] audit: type=1326 audit(1788586128.324:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.046829][ T30] audit: type=1326 audit(1788586128.334:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.072641][ T30] audit: type=1326 audit(1788586128.354:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.073341][ T30] audit: type=1326 audit(1788586128.354:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.080994][ T30] audit: type=1326 audit(1788586128.354:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.092080][ T30] audit: type=1326 audit(1788586128.364:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.094613][ T30] audit: type=1326 audit(1788586128.384:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.106106][ T30] audit: type=1326 audit(1788586128.384:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.117686][ T30] audit: type=1326 audit(1788586128.404:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.4.1248" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 258.288521][ T9584] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 258.777182][ T9604] loop1: detected capacity change from 0 to 8 [ 258.930972][ T9606] tipc: Started in network mode [ 258.931008][ T9606] tipc: Node identity 866e80b9843f, cluster identity 4711 [ 258.931180][ T9606] tipc: Enabled bearer , priority 0 [ 258.965775][ T9605] tipc: Disabling bearer [ 259.120773][ T9604] Dev loop1: unable to read RDB block 8 [ 259.120820][ T9604] loop1: unable to read partition table [ 259.121038][ T9604] loop1: partition table beyond EOD, truncated [ 259.122600][ T9604] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 259.178341][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 259.251541][ T30] audit: type=1326 audit(1788586129.534:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.4.1263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bf9e159 code=0x7ffc0000 [ 259.558540][ T9631] overlayfs: missing 'lowerdir' [ 259.669049][ T9636] tipc: Enabled bearer , priority 0 [ 259.673031][ T9634] tipc: Disabling bearer [ 260.635806][ T9665] tipc: Enabling of bearer rejected, failed to enable media [ 260.842309][ T9673] overlayfs: failed to clone upperpath [ 260.895937][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1290'. [ 260.895966][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1290'. [ 261.162342][ T9691] Set syz1 is full, maxelem 65536 reached [ 261.254220][ T9685] syzkaller0: entered promiscuous mode [ 261.254251][ T9685] syzkaller0: entered allmulticast mode [ 261.987096][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 262.393138][ T9725] overlayfs: failed to clone upperpath [ 262.804427][ T9739] overlayfs: failed to clone upperpath [ 262.991322][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 262.991353][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 262.991370][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 262.993715][ T9745] overlayfs: failed to clone upperpath [ 263.087592][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 263.087624][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 263.087644][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 263.296484][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 263.296515][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 263.296532][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 264.459606][ T9770] overlayfs: overlapping lowerdir path [ 265.212490][ T9791] overlayfs: overlapping lowerdir path [ 265.340246][ T9796] overlayfs: failed to clone upperpath [ 265.794978][ T9811] overlayfs: overlapping lowerdir path [ 266.258867][ T9822] syzkaller0: entered promiscuous mode [ 266.258897][ T9822] syzkaller0: entered allmulticast mode [ 266.378139][ T9835] overlayfs: overlapping lowerdir path [ 267.559629][ T9853] overlayfs: failed to clone upperpath [ 268.197961][ T9871] overlayfs: failed to clone upperpath [ 269.514802][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1385'. [ 270.252143][ T56] IPVS: starting estimator thread 0... [ 270.336680][ T9916] IPVS: using max 26 ests per chain, 62400 per kthread [ 270.798836][ T9935] Set syz1 is full, maxelem 65536 reached [ 271.094518][ T9945] 9p: Bad value for 'rfdno' [ 272.201043][ T9980] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1426'. [ 272.323945][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.453864][ T25] usb 2-1: device descriptor read/64, error -71 [ 272.552602][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 272.693923][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.823865][ T25] usb 2-1: device descriptor read/64, error -71 [ 272.935026][ T25] usb usb2-port1: attempt power cycle [ 272.982346][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'. [ 273.273921][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.294684][ T25] usb 2-1: device descriptor read/8, error -71 [ 273.537140][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.556443][ T25] usb 2-1: device descriptor read/8, error -71 [ 273.664720][ T25] usb usb2-port1: unable to enumerate USB device [ 274.680062][ T989] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 274.682204][ T989] wiimote 0005:057E:0306.0002: New device registered [ 274.732980][T10057] wiimote 0005:057E:0306.0002: Device removed [ 274.879708][T10061] fido_id[10061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.528060][T10069] FAULT_INJECTION: forcing a failure. [ 275.528060][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 275.528097][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.0.1463 Not tainted syzkaller #0 PREEMPT(full) [ 275.528124][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.528139][T10069] Call Trace: [ 275.528148][T10069] [ 275.528159][T10069] dump_stack_lvl+0xe8/0x150 [ 275.528196][T10069] should_fail_ex+0x3eb/0x540 [ 275.528228][T10069] should_failslab+0xa8/0x100 [ 275.528255][T10069] ? radix_tree_node_alloc+0x82/0x3a0 [ 275.528302][T10069] kmem_cache_alloc_noprof+0x9c/0x600 [ 275.528335][T10069] ? radix_tree_node_alloc+0x82/0x3a0 [ 275.528367][T10069] ? kmem_cache_alloc_noprof+0x151/0x600 [ 275.528399][T10069] ? radix_tree_node_alloc+0x82/0x3a0 [ 275.528443][T10069] radix_tree_node_alloc+0x82/0x3a0 [ 275.528484][T10069] idr_get_free+0x28f/0xa10 [ 275.528533][T10069] idr_alloc_u32+0x18a/0x330 [ 275.528576][T10069] ? __pfx_idr_alloc_u32+0x10/0x10 [ 275.528622][T10069] ? l2tp_session_register+0xd7/0x11a0 [ 275.528659][T10069] l2tp_session_register+0x258/0x11a0 [ 275.528692][T10069] ? __pfx___mutex_lock+0x10/0x10 [ 275.528723][T10069] ? __pfx_l2tp_session_register+0x10/0x10 [ 275.528768][T10069] pppol2tp_connect+0xda1/0x18b0 [ 275.528805][T10069] ? __pfx_pppol2tp_connect+0x10/0x10 [ 275.528825][T10069] ? lock_acquire+0x115/0x350 [ 275.528858][T10069] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.528882][T10069] ? apparmor_socket_connect+0x13e/0x210 [ 275.528904][T10069] ? bpf_lsm_socket_connect+0x9/0x20 [ 275.528928][T10069] __sys_connect+0x316/0x450 [ 275.528959][T10069] ? __pfx___sys_connect+0x10/0x10 [ 275.528999][T10069] ? rcu_is_watching+0x16/0xb0 [ 275.529025][T10069] __x64_sys_connect+0x7a/0x90 [ 275.529060][T10069] do_syscall_64+0x166/0x520 [ 275.529077][T10069] ? trace_irq_disable+0x3b/0x140 [ 275.529104][T10069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.529124][T10069] ? clear_bhb_loop+0x70/0xc0 [ 275.529148][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.529167][T10069] RIP: 0033:0x7fad4a79e159 [ 275.529185][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.529201][T10069] RSP: 002b:00007fad4b730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 275.529221][T10069] RAX: ffffffffffffffda RBX: 00007fad4aa25fa0 RCX: 00007fad4a79e159 [ 275.529235][T10069] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000004 [ 275.529247][T10069] RBP: 00007fad4a835024 R08: 0000000000000000 R09: 0000000000000000 [ 275.529259][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.529269][T10069] R13: 00007fad4aa26038 R14: 00007fad4aa25fa0 R15: 00007ffeac38dad8 [ 275.529304][T10069] [ 275.766925][ T5703] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 276.187930][ T5703] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input27 [ 276.360562][ T5703] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input28 [ 276.385152][ T5703] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input26 [ 277.747946][T10109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1479'. [ 278.961975][T10132] FAULT_INJECTION: forcing a failure. [ 278.961975][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 278.962089][T10132] CPU: 0 UID: 0 PID: 10132 Comm: syz.1.1488 Not tainted syzkaller #0 PREEMPT(full) [ 278.962117][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.962131][T10132] Call Trace: [ 278.962140][T10132] [ 278.962150][T10132] dump_stack_lvl+0xe8/0x150 [ 278.962185][T10132] should_fail_ex+0x3eb/0x540 [ 278.962217][T10132] should_failslab+0xa8/0x100 [ 278.962245][T10132] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 278.962281][T10132] ? __d_alloc+0x37/0x6f0 [ 278.962311][T10132] ? __d_alloc+0x37/0x6f0 [ 278.962349][T10132] __d_alloc+0x37/0x6f0 [ 278.962386][T10132] d_alloc_parallel+0xde/0x16b0 [ 278.962423][T10132] ? lock_acquire+0x115/0x350 [ 278.962466][T10132] ? __d_lookup+0x66/0x790 [ 278.962500][T10132] ? __d_lookup+0x66/0x790 [ 278.962534][T10132] ? __pfx_d_alloc_parallel+0x10/0x10 [ 278.962568][T10132] ? d_lookup+0x1f/0xa0 [ 278.962604][T10132] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 278.962643][T10132] lookup_open+0x26b/0x1380 [ 278.962687][T10132] ? lookup_fast+0x1a8/0x5d0 [ 278.962726][T10132] path_openat+0x696/0x1e40 [ 278.962781][T10132] do_file_open+0x23e/0x4a0 [ 278.962831][T10132] ? __pfx_do_file_open+0x10/0x10 [ 278.962875][T10132] ? __pfx_kfree_link+0x10/0x10 [ 278.962916][T10132] ? _raw_spin_unlock+0x28/0x50 [ 278.962948][T10132] ? alloc_fd+0x651/0x6c0 [ 278.962987][T10132] do_sys_openat2+0x115/0x200 [ 278.963014][T10132] ? __se_sys_futex+0x3a8/0x450 [ 278.963040][T10132] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.963073][T10132] ? rcu_is_watching+0x16/0xb0 [ 278.963102][T10132] __x64_sys_openat+0x138/0x170 [ 278.963134][T10132] do_syscall_64+0x166/0x520 [ 278.963155][T10132] ? trace_irq_disable+0x3b/0x140 [ 278.963188][T10132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.963213][T10132] ? clear_bhb_loop+0x70/0xc0 [ 278.963241][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.963265][T10132] RIP: 0033:0x7f22a975e98e [ 278.963286][T10132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.963306][T10132] RSP: 002b:00007f22aa5ceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.963332][T10132] RAX: ffffffffffffffda RBX: 00007f22aa5cf6c0 RCX: 00007f22a975e98e [ 278.963349][T10132] RDX: 0000000000000000 RSI: 00007f22aa5cef90 RDI: ffffffffffffff9c [ 278.963366][T10132] RBP: 00007f22a9835024 R08: 0000000000000000 R09: 0000000000000000 [ 278.963380][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.963393][T10132] R13: 00007f22a9a26038 R14: 00007f22a9a25fa0 R15: 00007fff14bc0be8 [ 278.963429][T10132] [ 279.607697][T10137] netlink: 'syz.0.1491': attribute type 3 has an invalid length. [ 280.524910][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 283.686859][ T9884] udevd[9884]: setting mode of /dev/input/event5 to 020660 failed: No such file or directory [ 283.687003][ T9884] udevd[9884]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 284.240847][T10247] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1540'. [ 284.240879][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 284.240895][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 284.360814][ T5604] kernel read not supported for file /894/task (pid: 5604 comm: kworker/0:3) [ 284.543911][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 284.693839][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 284.694612][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 284.695956][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.695985][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.700616][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.700657][ T43] usb 2-1: Product: syz [ 284.700676][ T43] usb 2-1: Manufacturer: syz [ 284.700695][ T43] usb 2-1: SerialNumber: syz [ 284.772337][ T43] usb 2-1: config 0 descriptor?? [ 285.017895][ T43] usb 2-1: USB disconnect, device number 22 [ 285.023033][ T9882] udevd[9882]: setting mode of /dev/bus/usb/002/022 to 020664 failed: No such file or directory [ 285.023161][ T9882] udevd[9882]: setting owner of /dev/bus/usb/002/022 to uid=0, gid=0 failed: No such file or directory [ 286.094879][ T31] INFO: task kworker/1:3:5716 blocked for more than 143 seconds. [ 286.094957][ T31] Not tainted syzkaller #0 [ 286.095001][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.095037][ T31] task:kworker/1:3 state:D stack:23848 pid:5716 tgid:5716 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 286.095324][ T31] Workqueue: usb_hub_wq hub_event [ 286.095407][ T31] Call Trace: [ 286.095569][ T31] [ 286.095635][ T31] __schedule+0x17dd/0x5940 [ 286.095830][ T31] ? __pfx___schedule+0x10/0x10 [ 286.095970][ T31] ? __pfx___schedule+0x10/0x10 [ 286.096118][ T31] ? schedule+0x90/0x2b0 [ 286.096228][ T31] schedule+0x164/0x2b0 [ 286.096315][ T31] schedule_timeout+0xc0/0x2c0 [ 286.096395][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.096641][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 286.096778][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.096863][ ** replaying previous printk message ** [ 286.096863][ T31] ? wait_for_completion+0x26d/0x5d0 [ 286.096951][ T31] wait_for_completion+0x2c5/0x5d0 [ 286.097128][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 286.097243][ T31] ? kobject_put+0x50f/0x550 [ 286.097363][ T31] i2c_del_adapter+0x292/0x440 [ 286.097476][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 286.097561][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 286.097723][ T31] ? kernfs_put+0x7b9/0x820 [ 286.097815][ T31] ? sysfs_remove_group+0x238/0x2e0 [ 286.097904][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 286.097961][ T31] ft260_remove+0x5d/0x80 [ 286.098044][ T31] hid_device_remove+0xc5/0x1c0 [ 286.098149][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 286.098208][ T31] device_release_driver_internal+0x48b/0x880 [ 286.098354][ T31] bus_remove_device+0x444/0x560 [ 286.098459][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 286.098605][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 286.098859][ T31] device_del+0x524/0x8f0 [ 286.099030][ T31] ? __pfx_device_del+0x10/0x10 [ 286.099216][ T31] hid_destroy_device+0x6b/0x1b0 [ 286.099393][ T31] usbhid_disconnect+0x9f/0xc0 [ 286.099494][ T31] usb_unbind_interface+0x295/0x9f0 [ 286.099548][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 286.099653][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 286.099731][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 286.099886][ T31] device_release_driver_internal+0x4f5/0x880 [ 286.099999][ T31] bus_remove_device+0x444/0x560 [ 286.100131][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 286.100232][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 286.100314][ T31] device_del+0x524/0x8f0 [ 286.100482][ T31] ? __pfx_device_del+0x10/0x10 [ 286.100574][ T31] ? kobject_put+0x516/0x550 [ 286.100706][ T31] usb_disable_device+0x3d4/0x8d0 [ 286.100952][ T31] usb_disconnect+0x346/0x9a0 [ 286.101105][ T31] hub_event+0x1bbb/0x4d30 [ 286.101262][ T31] ? register_lock_class+0x31/0x2e0 [ 286.101593][ T31] ? __pfx_hub_event+0x10/0x10 [ 286.101721][ T31] ? rcu_is_watching+0x16/0xb0 [ 286.101796][ T31] ? process_scheduled_works+0x97a/0x1630 [ 286.101873][ T31] process_scheduled_works+0xc3d/0x1630 [ 286.102258][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.102368][ T31] ? assign_work+0x3cf/0x5d0 [ 286.102473][ T31] worker_thread+0xa47/0xfb0 [ 286.102613][ T31] ? __kthread_parkme+0x71/0x1f0 [ 286.102786][ T31] kthread+0x38b/0x480 [ 286.102872][ T31] ? __pfx_worker_thread+0x10/0x10 [ 286.102932][ T31] ? __pfx_kthread+0x10/0x10 [ 286.103132][ T31] ret_from_fork+0x514/0xb70 [ 286.103223][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.103306][ T31] ? __switch_to+0xc89/0x1420 [ 286.103388][ T31] ? __pfx_kthread+0x10/0x10 [ 286.103474][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.103654][ T31] [ 286.104041][ T31] [ 286.104041][ T31] Showing all locks held in the system: [ 286.104214][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 286.104259][ T31] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.104508][ T31] locks held by kworker/1:1/43: 2, last CPU#1: [ 286.104567][ T31] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.104832][ T31] #1: ffffc90000b37c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.105483][ T31] locks held by getty/5371: 2, on CPU#1: [ 286.105526][ T31] #0: ffff8880355c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.105747][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 286.105993][ T31] locks held by kworker/1:3/5716: 6, on CPU#1: [ 286.106035][ T31] #0: ffff8880222c5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.106378][ T31] #1: ffffc90004b07c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.106588][ T31] #2: ffff8880299cd1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 286.106790][ T31] #3: ffff888029d901d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 286.107010][ T31] #4: ffff8880227b31a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 286.107233][ T31] #5: ffff8880759dda58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 286.107601][ T31] locks held by kworker/u8:12/7078: 5, last CPU#1: [ 286.107645][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.107852][ T31] #1: ffffc900072dfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.108079][ T31] #2: ffffffff8ede9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 286.108315][ T31] #3: ffffffff8f038d60 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 286.108665][ T31] #4: ffffffff8edff7a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 286.108901][ T31] locks held by syz.4.1546/10260: 4, last CPU#0: [ 286.108945][ T31] #0: ffff88802c32e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 286.109215][ T31] #1: ffff8880348ca718 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 286.109595][ T31] #2: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 286.109801][ T31] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 286.110041][ T31] locks held by syz.3.1553/10278: 4, last CPU#0: [ 286.110093][ T31] #0: ffff888030a4c170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 286.110340][ T31] #1: ffff888030a4c298 (&u->peer_wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x30/0x1f0 [ 286.110668][ T31] #2: ffff88801fbd4918 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0 [ 286.110903][ T31] #3: ffff8880b853bd60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 286.137276][ T31] locks held by syz.0.1554/10277: 2, last CPU#1: [ 286.137325][ T31] #0: ffff88807b06b6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 286.137552][ T31] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 286.137748][ T31] [ 286.137778][ T31] ============================================= [ 286.137778][ T31] [ 286.137812][ T31] NMI backtrace for cpu 1 [ 286.137830][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.137858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.137874][ T31] Call Trace: [ 286.137884][ T31] [ 286.137895][ T31] dump_stack_lvl+0xe8/0x150 [ 286.137931][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 286.137965][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.138005][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 286.138042][ T31] sys_info+0x135/0x170 [ 286.138081][ T31] watchdog+0x1058/0x10d0 [ 286.138127][ T31] ? watchdog+0x209/0x10d0 [ 286.138171][ T31] kthread+0x38b/0x480 [ 286.138211][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.138245][ T31] ? __pfx_kthread+0x10/0x10 [ 286.138283][ T31] ret_from_fork+0x514/0xb70 [ 286.138321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.138357][ T31] ? __switch_to+0xc89/0x1420 [ 286.138392][ T31] ? __pfx_kthread+0x10/0x10 [ 286.138430][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.138484][ T31] [ 286.138516][ T31] Sending NMI from CPU 1 to CPUs 0: [ 286.138568][ C0] NMI backtrace for cpu 0 [ 286.138583][ C0] CPU: 0 UID: 0 PID: 10278 Comm: syz.3.1553 Not tainted syzkaller #0 PREEMPT(full) [ 286.138608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.138620][ C0] RIP: 0010:__might_fault+0xa8/0x130 [ 286.138650][ C0] Code: 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 0c 2d 19 00 4c 8b 3b 4d 85 ff 74 5d e8 df 03 a9 ff 49 81 c7 b8 03 00 00 <4c> 8d 35 00 00 00 00 4c 89 ff 31 f6 31 d2 b9 01 00 00 00 41 b8 01 [ 286.138668][ C0] RSP: 0018:ffffc90003d2fc28 EFLAGS: 00000282 [ 286.138687][ C0] RAX: ffffffff821f0111 RBX: ffff88802a33c440 RCX: 0000000000080000 [ 286.138703][ C0] RDX: ffffc9000f8c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 286.138718][ C0] RBP: 0000000000000c04 R08: ffffc90003d2f6a7 R09: 1ffff920007a5ed4 [ 286.138733][ C0] R10: dffffc0000000000 R11: fffff520007a5ed5 R12: dffffc0000000000 [ 286.138750][ C0] R13: 1ffff11005467888 R14: ffffffff8d23e2e0 R15: ffff88807b061d38 [ 286.138766][ C0] FS: 00007ff5116d66c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 286.138786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.138801][ C0] CR2: 000000110c241ecf CR3: 0000000078c02000 CR4: 00000000003526f0 [ 286.138820][ C0] Call Trace: [ 286.138829][ C0] [ 286.138840][ C0] do_recvmmsg+0x346/0x7f0 [ 286.138872][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 286.138897][ C0] ? do_futex+0x3e7/0x4e0 [ 286.138935][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 286.138963][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 286.138996][ C0] do_syscall_64+0x166/0x520 [ 286.139015][ C0] ? trace_irq_disable+0x3b/0x140 [ 286.139046][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.139069][ C0] ? clear_bhb_loop+0x70/0xc0 [ 286.139094][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.139118][ C0] RIP: 0033:0x7ff51079e159 [ 286.139137][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.139156][ C0] RSP: 002b:00007ff5116d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 286.139177][ C0] RAX: ffffffffffffffda RBX: 00007ff510a26090 RCX: 00007ff51079e159 [ 286.139192][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 286.139207][ C0] RBP: 00007ff510835024 R08: 0000000000000000 R09: 0000000000000000 [ 286.139220][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 286.139233][ C0] R13: 00007ff510a26128 R14: 00007ff510a26090 R15: 00007ffd81189218 [ 286.139260][ C0] [ 286.335109][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.310348][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.319505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.329601][ T31] Call Trace: [ 287.332916][ T31] [ 287.335882][ T31] vpanic+0x56d/0xa70 [ 287.339919][ T31] ? __pfx___schedule+0x10/0x10 [ 287.344823][ T31] ? __pfx_vpanic+0x10/0x10 [ 287.349397][ T31] panic+0xc5/0xd0 [ 287.353483][ T31] ? __pfx_panic+0x10/0x10 [ 287.358014][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 287.363531][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 287.368964][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 287.375219][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 287.381436][ T31] watchdog+0x10cc/0x10d0 [ 287.386143][ T31] ? watchdog+0x209/0x10d0 [ 287.390659][ T31] kthread+0x38b/0x480 [ 287.394787][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.399524][ T31] ? __pfx_kthread+0x10/0x10 [ 287.404243][ T31] ret_from_fork+0x514/0xb70 [ 287.408897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.414072][ T31] ? __switch_to+0xc89/0x1420 [ 287.418796][ T31] ? __pfx_kthread+0x10/0x10 [ 287.423436][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.428264][ T31] [ 287.431967][ T31] Kernel Offset: disabled [ 287.436748][ T31] Rebooting in 86400 seconds..