last executing test programs: 51.562366865s ago: executing program 3 (id=1928): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 51.389463524s ago: executing program 3 (id=1930): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkaller%d\x00', 0xc) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000f00)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) write(r4, &(0x7f0000001000)='hello world', 0xb) 11.915081713s ago: executing program 0 (id=2351): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) close(r0) 11.828601173s ago: executing program 0 (id=2352): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) 11.721167181s ago: executing program 1 (id=2354): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 10.880873719s ago: executing program 0 (id=2361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x2, 0x0, [{0x9, 0x0, 0x7ff}, {0xfff, 0x0, 0x2}, {0x81, 0x0, 0x9}, {0x7, 0x0, 0x5d5}, {0x8, 0x0, 0x9a7}, {0x1b1b9793, 0x0, 0x4}, {0xfff, 0x0, 0x3}, {0x8000, 0x0, 0x8001}, {0x3fe80c5d, 0x0, 0x101}, {0xd, 0x0, 0x5}, {0x9, 0x0, 0x13b}, {0x6dc8, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0xfffffff9, 0x0, 0x4}, {0x6}, {0xd284, 0x0, 0x8000}]}) 10.253630898s ago: executing program 1 (id=2366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000400)) 9.922483466s ago: executing program 0 (id=2368): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 9.198341577s ago: executing program 1 (id=2373): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='2\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='2\x00', 0x1) 8.74521532s ago: executing program 1 (id=2375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 3.024202075s ago: executing program 1 (id=2401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='usbip-vudc.0\x00', 0xd) write(r2, &(0x7f0000000400)='\x00', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x200) 3.011896215s ago: executing program 2 (id=2402): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) 2.761175114s ago: executing program 0 (id=2404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r3) 2.760988407s ago: executing program 2 (id=2405): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r4, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000001c0)=[0x0], 0x800000000000002, 0x1, 0xb}) 2.727094908s ago: executing program 1 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)='\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='usbip-vudc.0\x00', 0xd) write(r2, &(0x7f0000000400)='\x00', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x200) 2.726903038s ago: executing program 4 (id=2407): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) 2.538134044s ago: executing program 0 (id=2408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) close(r1) 2.415929678s ago: executing program 2 (id=2409): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 2.34689528s ago: executing program 2 (id=2410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 2.260060119s ago: executing program 4 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f00000006c0)='3\x00', 0x1) 2.117684987s ago: executing program 2 (id=2412): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='2\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000780)='2\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r5, &(0x7f0000000840)='3\x00', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000980)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f00000009c0)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f0000000a00)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f0000000ac0)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f0000000b00)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f0000000b40)='dummy_udc.0\x00', 0xb) write(r6, &(0x7f0000000b80)='dummy_udc.0\x00', 0xb) 1.980719194s ago: executing program 2 (id=2413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(r0) symlink(0x0, &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 1.935959373s ago: executing program 4 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='2\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='2\x00', 0x1) 1.869820654s ago: executing program 3 (id=1932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4, 0x0, 0x0, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x3, '\x00', 0x79}, {0xfc, 0x12, 0x4}, {0x13, 0x5, 0xff}, {0x0, 0x1, 0x3, '\x00', 0xfd}, {0xfe, 0x0, 0x5, '\x00', 0x4}, {0xf5, 0x4, 0x26, '\x00', 0x40}, {0x6f, 0x0, 0x3}, {0x40, 0x93, 0xf5, '\x00', 0x5}, {0xb8, 0x6, 0x0, '\x00', 0x21}, {0xee, 0x0, 0x9, '\x00', 0xd}, {0x0, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0xb, '\x00', 0x3}, {0x2, 0x0, 0x8, '\x00', 0xd4}, {0xc3, 0x0, 0x0, '\x00', 0x5}, {0x0, 0xb4, 0x2, '\x00', 0xff}, {0x3, 0x0, 0xeb}, {0x0, 0x6, 0x4, '\x00', 0x10}, {0x2, 0x0, 0x1}, {0x9, 0x7d, 0xfd, '\x00', 0x1}, {0x4a, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0xa0, 0x2, 0x5, '\x00', 0x2}, {0x4a, 0xff, 0x3}]}}) 1.560187169s ago: executing program 4 (id=2416): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) 1.194244553s ago: executing program 4 (id=2417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) 856.888971ms ago: executing program 4 (id=2418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) 433.326595ms ago: executing program 3 (id=2419): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 180.068092ms ago: executing program 3 (id=2420): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) 0s ago: executing program 3 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): nvalid wMaxPacketSize 0 [ 371.165983][ T5867] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 371.166008][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.230917][ T5867] usb 2-1: config 0 descriptor?? [ 371.529347][ T8352] program syz.1.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.663008][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.790'. [ 371.663036][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.790'. [ 371.763667][ T5867] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 371.763706][ T5867] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 371.828475][ T5867] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 372.003752][ T5734] usb 1-1: USB disconnect, device number 27 [ 372.024680][ T37] kauditd_printk_skb: 87 callbacks suppressed [ 372.024699][ T37] audit: type=1326 audit(1784900681.934:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.024749][ T37] audit: type=1326 audit(1784900681.934:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.024795][ T37] audit: type=1326 audit(1784900681.934:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.026736][ T37] audit: type=1326 audit(1784900681.934:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.027182][ T37] audit: type=1326 audit(1784900681.934:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.029114][ T37] audit: type=1326 audit(1784900681.934:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.035447][ T37] audit: type=1326 audit(1784900681.934:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.035634][ T37] audit: type=1326 audit(1784900681.934:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.044189][ T37] audit: type=1326 audit(1784900681.954:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.044338][ T37] audit: type=1326 audit(1784900681.954:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.4.802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 372.349309][ T5867] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 372.442748][ T5867] usb 2-1: USB disconnect, device number 28 [ 372.577862][ T8366] fido_id[8366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 373.540981][ T5867] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 373.706948][ T5867] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 373.706987][ T5867] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 373.707009][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 373.707062][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.775063][ T5867] usb 1-1: string descriptor 0 read error: -22 [ 373.775209][ T5867] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 373.775234][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.827164][ T5867] usb 1-1: config 0 descriptor?? [ 373.859664][ T5867] hub 1-1:0.0: bad descriptor, ignoring hub [ 373.859707][ T5867] hub 1-1:0.0: probe with driver hub failed with error -5 [ 374.645031][ T5715] usb 1-1: USB disconnect, device number 28 [ 376.283702][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.484234][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.825'. [ 378.945590][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.945668][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.314556][ T8515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.856'. [ 383.440852][ T5588] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 383.590818][ T5588] usb 5-1: device descriptor read/64, error -71 [ 383.840962][ T5588] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 383.970936][ T5588] usb 5-1: device descriptor read/64, error -71 [ 384.081611][ T5588] usb usb5-port1: attempt power cycle [ 384.153003][ T8545] FAULT_INJECTION: forcing a failure. [ 384.153003][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.153045][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.153076][ T8545] Tainted: [L]=SOFTLOCKUP [ 384.153083][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 384.153097][ T8545] Call Trace: [ 384.153105][ T8545] [ 384.153114][ T8545] dump_stack_lvl+0xe8/0x150 [ 384.153154][ T8545] should_fail_ex+0x467/0x600 [ 384.153193][ T8545] _copy_from_user+0x2d/0xb0 [ 384.153219][ T8545] ___sys_sendmsg+0x1c6/0x360 [ 384.153245][ T8545] ? __lock_acquire+0x683/0x2ce0 [ 384.153272][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.153333][ T8545] ? __fget_files+0x2a/0x420 [ 384.153354][ T8545] ? __fget_files+0x3a8/0x420 [ 384.153385][ T8545] __x64_sys_sendmsg+0x1b7/0x290 [ 384.153415][ T8545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.153460][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.153484][ T8545] do_syscall_64+0x174/0x580 [ 384.153517][ T8545] ? trace_irq_disable+0x3b/0x140 [ 384.153552][ T8545] ? clear_bhb_loop+0x40/0x90 [ 384.153579][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.153601][ T8545] RIP: 0033:0x7f80d514de99 [ 384.153622][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.153640][ T8545] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.153662][ T8545] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 384.153676][ T8545] RDX: 0000000004020800 RSI: 0000200000000380 RDI: 0000000000000003 [ 384.153689][ T8545] RBP: 00007f80d33a6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.153702][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.153713][ T8545] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 384.153746][ T8545] [ 384.430887][ T5588] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 384.454781][ T5588] usb 5-1: device descriptor read/8, error -71 [ 384.460100][ T37] kauditd_printk_skb: 173 callbacks suppressed [ 384.460119][ T37] audit: type=1326 audit(1784900694.364:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.460177][ T37] audit: type=1326 audit(1784900694.364:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.469172][ T37] audit: type=1326 audit(1784900694.314:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.477348][ T37] audit: type=1326 audit(1784900694.384:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.501411][ T37] audit: type=1326 audit(1784900694.414:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.501738][ T37] audit: type=1326 audit(1784900694.414:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.502125][ T37] audit: type=1326 audit(1784900694.414:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.502397][ T37] audit: type=1326 audit(1784900694.414:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.525270][ T37] audit: type=1326 audit(1784900694.434:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.525451][ T37] audit: type=1326 audit(1784900694.434:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8542 comm="syz.0.872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x7ffc0000 [ 384.736278][ T5588] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 384.751900][ T5588] usb 5-1: device descriptor read/8, error -71 [ 384.898577][ T5588] usb usb5-port1: unable to enumerate USB device [ 385.441532][ T5588] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 385.590815][ T5588] usb 2-1: Using ep0 maxpacket: 16 [ 385.593898][ T5588] usb 2-1: unable to get BOS descriptor or descriptor too short [ 385.595682][ T5588] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 385.595780][ T5588] usb 2-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.613496][ T5588] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 385.613622][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.613682][ T5588] usb 2-1: Product: syz [ 385.613718][ T5588] usb 2-1: Manufacturer: syz [ 385.613752][ T5588] usb 2-1: SerialNumber: syz [ 385.934863][ T5588] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 385.946396][ T5588] snd-usb-audio 2-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 386.022964][ T8581] openvswitch: netlink: Key type 34 is out of range max 32 [ 386.061131][ T8584] openvswitch: netlink: Key type 34 is out of range max 32 [ 386.558611][ T5588] usb 2-1: USB disconnect, device number 29 [ 387.368410][ T8621] FAULT_INJECTION: forcing a failure. [ 387.368410][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 387.368461][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.4.905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.368493][ T8621] Tainted: [L]=SOFTLOCKUP [ 387.368501][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 387.368515][ T8621] Call Trace: [ 387.368523][ T8621] [ 387.368533][ T8621] dump_stack_lvl+0xe8/0x150 [ 387.368577][ T8621] should_fail_ex+0x467/0x600 [ 387.368617][ T8621] should_failslab+0xa8/0x100 [ 387.368645][ T8621] kmem_cache_alloc_noprof+0xa4/0x650 [ 387.368682][ T8621] ? vm_area_dup+0x28/0x670 [ 387.368706][ T8621] ? vm_area_dup+0x28/0x670 [ 387.368739][ T8621] vm_area_dup+0x28/0x670 [ 387.368763][ T8621] ? __split_vma+0x1ce/0xa40 [ 387.368806][ T8621] __split_vma+0x1e4/0xa40 [ 387.368843][ T8621] ? mas_next_slot+0xc94/0xd70 [ 387.368874][ T8621] ? __pfx___split_vma+0x10/0x10 [ 387.368916][ T8621] ? mas_find+0xab1/0xcf0 [ 387.368947][ T8621] vms_gather_munmap_vmas+0x4e3/0x1370 [ 387.368994][ T8621] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 387.369035][ T8621] ? mas_find+0xa23/0xcf0 [ 387.369067][ T8621] mmap_region+0x914/0x2310 [ 387.369115][ T8621] ? __lock_acquire+0x683/0x2ce0 [ 387.369137][ T8621] ? __pfx_mmap_region+0x10/0x10 [ 387.369167][ T8621] ? __lock_acquire+0x683/0x2ce0 [ 387.369199][ T8621] ? __lock_acquire+0x683/0x2ce0 [ 387.369294][ T8621] ? __lock_acquire+0x683/0x2ce0 [ 387.369342][ T8621] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 387.369534][ T8621] ? cap_mmap_addr+0xaf/0x100 [ 387.369589][ T8621] ? bpf_lsm_mmap_addr+0x9/0x50 [ 387.369685][ T8621] ? security_mmap_addr+0x71/0x240 [ 387.369711][ T8621] ? shmem_mapping+0xd/0x50 [ 387.369789][ T8621] ? memfd_check_seals_mmap+0xcb/0x210 [ 387.369839][ T8621] do_mmap+0xc1e/0x10b0 [ 387.369883][ T8621] ? __pfx_do_mmap+0x10/0x10 [ 387.369916][ T8621] ? rwbase_write_lock+0x550/0x720 [ 387.369956][ T8621] vm_mmap_pgoff+0x275/0x4e0 [ 387.370028][ T8621] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 387.370069][ T8621] ? __fget_files+0x2a/0x420 [ 387.370091][ T8621] ? __fget_files+0x3a8/0x420 [ 387.370111][ T8621] ? __fget_files+0x2a/0x420 [ 387.370137][ T8621] ksys_mmap_pgoff+0x4a6/0x720 [ 387.370172][ T8621] ? __x64_sys_mmap+0x7f/0x140 [ 387.370207][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.370233][ T8621] do_syscall_64+0x174/0x580 [ 387.370257][ T8621] ? trace_irq_disable+0x3b/0x140 [ 387.370314][ T8621] ? clear_bhb_loop+0x40/0x90 [ 387.370343][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.370366][ T8621] RIP: 0033:0x7efe0c4cde99 [ 387.370388][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.370407][ T8621] RSP: 002b:00007efe0a726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 387.370430][ T8621] RAX: ffffffffffffffda RBX: 00007efe0c755fa0 RCX: 00007efe0c4cde99 [ 387.370456][ T8621] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 387.370471][ T8621] RBP: 00007efe0a726090 R08: 0000000000000005 R09: 0000000000000000 [ 387.370484][ T8621] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 387.370498][ T8621] R13: 00007efe0c756038 R14: 00007efe0c755fa0 R15: 00007fff5abb56d8 [ 387.370540][ T8621] [ 388.796073][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.843086][ T8632] FAULT_INJECTION: forcing a failure. [ 388.843086][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 388.843127][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.3.907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.843157][ T8632] Tainted: [L]=SOFTLOCKUP [ 388.843165][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 388.843179][ T8632] Call Trace: [ 388.843187][ T8632] [ 388.843197][ T8632] dump_stack_lvl+0xe8/0x150 [ 388.843251][ T8632] should_fail_ex+0x467/0x600 [ 388.843291][ T8632] should_failslab+0xa8/0x100 [ 388.843320][ T8632] __kmalloc_noprof+0xfe/0x780 [ 388.843340][ T8632] ? rcu_is_watching+0x15/0xb0 [ 388.843367][ T8632] ? tomoyo_realpath_from_path+0xef/0x640 [ 388.843394][ T8632] ? tomoyo_realpath_from_path+0xef/0x640 [ 388.843432][ T8632] tomoyo_realpath_from_path+0xef/0x640 [ 388.843471][ T8632] ? tomoyo_path_number_perm+0x219/0x5f0 [ 388.843494][ T8632] tomoyo_path_number_perm+0x246/0x5f0 [ 388.843521][ T8632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.843544][ T8632] ? __lock_acquire+0x683/0x2ce0 [ 388.843581][ T8632] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 388.843605][ T8632] ? hook_file_ioctl+0x1f3/0x600 [ 388.843637][ T8632] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.843680][ T8632] ? __fget_files+0x2a/0x420 [ 388.843705][ T8632] ? __fget_files+0x2a/0x420 [ 388.843724][ T8632] ? __fget_files+0x3a8/0x420 [ 388.843745][ T8632] ? __fget_files+0x2a/0x420 [ 388.843771][ T8632] security_file_ioctl+0xc3/0x2a0 [ 388.843798][ T8632] __se_sys_ioctl+0x47/0x170 [ 388.843828][ T8632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.843853][ T8632] do_syscall_64+0x174/0x580 [ 388.843877][ T8632] ? trace_irq_disable+0x3b/0x140 [ 388.843912][ T8632] ? clear_bhb_loop+0x40/0x90 [ 388.843941][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.843962][ T8632] RIP: 0033:0x7f549c0bde99 [ 388.843983][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.844001][ T8632] RSP: 002b:00007f549a2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.844024][ T8632] RAX: ffffffffffffffda RBX: 00007f549c346090 RCX: 00007f549c0bde99 [ 388.844039][ T8632] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 388.844052][ T8632] RBP: 00007f549a2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 388.844064][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.844076][ T8632] R13: 00007f549c346128 R14: 00007f549c346090 R15: 00007ffed57da678 [ 388.844111][ T8632] [ 388.844145][ T8632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.575825][ T5867] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 389.700852][ T5867] usb 1-1: device descriptor read/64, error -71 [ 389.940853][ T5867] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 390.071305][ T5867] usb 1-1: device descriptor read/64, error -71 [ 390.183846][ T5867] usb usb1-port1: attempt power cycle [ 390.884445][ T5867] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 390.927465][ T5867] usb 1-1: device descriptor read/8, error -71 [ 391.416894][ T5867] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 391.441736][ T5867] usb 1-1: device descriptor read/8, error -71 [ 391.561829][ T5867] usb usb1-port1: unable to enumerate USB device [ 391.640889][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.784099][ T8679] FAULT_INJECTION: forcing a failure. [ 391.784099][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 391.784139][ T8679] CPU: 0 UID: 0 PID: 8679 Comm: syz.2.925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.784168][ T8679] Tainted: [L]=SOFTLOCKUP [ 391.784176][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 391.784191][ T8679] Call Trace: [ 391.784199][ T8679] [ 391.784208][ T8679] dump_stack_lvl+0xe8/0x150 [ 391.784248][ T8679] should_fail_ex+0x467/0x600 [ 391.784287][ T8679] should_failslab+0xa8/0x100 [ 391.784316][ T8679] kmem_cache_alloc_noprof+0xa4/0x650 [ 391.784353][ T8679] ? skb_clone+0x212/0x3a0 [ 391.784433][ T8679] ? skb_clone+0x212/0x3a0 [ 391.784466][ T8679] skb_clone+0x212/0x3a0 [ 391.784496][ T8679] __netlink_deliver_tap+0x413/0x860 [ 391.784536][ T8679] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.784563][ T8679] netlink_deliver_tap+0x19c/0x1b0 [ 391.784591][ T8679] netlink_unicast+0x7b8/0x990 [ 391.784626][ T8679] netlink_sendmsg+0x813/0xb40 [ 391.784662][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.784690][ T8679] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 391.784724][ T8679] ? __kernel_text_address+0xd/0x30 [ 391.784745][ T8679] ? unwind_get_return_address+0x4d/0x90 [ 391.784783][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.784808][ T8679] sock_sendmsg_nosec+0x13a/0x180 [ 391.784845][ T8679] ____sys_sendmsg+0x565/0x870 [ 391.784870][ T8679] ? __might_fault+0xaf/0x130 [ 391.784900][ T8679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.784936][ T8679] ? import_iovec+0x73/0xa0 [ 391.784965][ T8679] ___sys_sendmsg+0x2a5/0x360 [ 391.784990][ T8679] ? __lock_acquire+0x683/0x2ce0 [ 391.785034][ T8679] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.785103][ T8679] ? __fget_files+0x2a/0x420 [ 391.785125][ T8679] ? __fget_files+0x3a8/0x420 [ 391.785158][ T8679] __x64_sys_sendmsg+0x1b7/0x290 [ 391.785188][ T8679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.785234][ T8679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.785259][ T8679] do_syscall_64+0x174/0x580 [ 391.785283][ T8679] ? trace_irq_disable+0x3b/0x140 [ 391.785320][ T8679] ? clear_bhb_loop+0x40/0x90 [ 391.785347][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.785370][ T8679] RIP: 0033:0x7f80d514de99 [ 391.785392][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.785411][ T8679] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.785433][ T8679] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 391.785449][ T8679] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 391.785462][ T8679] RBP: 00007f80d33a6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.785475][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.785488][ T8679] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 391.785519][ T8679] [ 392.987612][ T8693] FAULT_INJECTION: forcing a failure. [ 392.987612][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 392.987655][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.2.932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.987686][ T8693] Tainted: [L]=SOFTLOCKUP [ 392.987694][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 392.987708][ T8693] Call Trace: [ 392.987717][ T8693] [ 392.987726][ T8693] dump_stack_lvl+0xe8/0x150 [ 392.987767][ T8693] should_fail_ex+0x467/0x600 [ 392.987808][ T8693] should_failslab+0xa8/0x100 [ 392.987835][ T8693] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 392.987860][ T8693] ? __pfx_netlink_table_grab+0x10/0x10 [ 392.987979][ T8693] ? netlink_realloc_groups+0x126/0x350 [ 392.988005][ T8693] ? netlink_realloc_groups+0x126/0x350 [ 392.988037][ T8693] ? netlink_realloc_groups+0x126/0x350 [ 392.988066][ T8693] krealloc_node_align_noprof+0x19a/0x390 [ 392.988092][ T8693] ? safesetid_security_capable+0xa9/0x1a0 [ 392.988121][ T8693] netlink_realloc_groups+0x126/0x350 [ 392.988157][ T8693] netlink_setsockopt+0x367/0x710 [ 392.988191][ T8693] ? __pfx_netlink_setsockopt+0x10/0x10 [ 392.988223][ T8693] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 392.988287][ T8693] ? __pfx_netlink_setsockopt+0x10/0x10 [ 392.988316][ T8693] do_sock_setsockopt+0x17c/0x1b0 [ 392.988348][ T8693] __x64_sys_setsockopt+0x143/0x1b0 [ 392.988376][ T8693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.988401][ T8693] do_syscall_64+0x174/0x580 [ 392.988425][ T8693] ? trace_irq_disable+0x3b/0x140 [ 392.988461][ T8693] ? clear_bhb_loop+0x40/0x90 [ 392.988490][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.988513][ T8693] RIP: 0033:0x7f80d514de99 [ 392.988545][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.988565][ T8693] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.988587][ T8693] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 392.988604][ T8693] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000004 [ 392.988617][ T8693] RBP: 00007f80d33a6090 R08: 0000000000000004 R09: 0000000000000000 [ 392.988630][ T8693] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 392.988643][ T8693] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 392.988679][ T8693] [ 393.822019][ T8703] netlink: 180 bytes leftover after parsing attributes in process `syz.4.936'. [ 393.840824][ T5867] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 393.998957][ T5867] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 393.998992][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 393.999013][ T5867] usb 1-1: Product: syz [ 393.999028][ T5867] usb 1-1: SerialNumber: syz [ 394.042990][ T5867] usb 1-1: config 0 descriptor?? [ 394.136771][ T8715] FAULT_INJECTION: forcing a failure. [ 394.136771][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.136914][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: syz.3.944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.136945][ T8715] Tainted: [L]=SOFTLOCKUP [ 394.136953][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 394.136970][ T8715] Call Trace: [ 394.136986][ T8715] [ 394.136996][ T8715] dump_stack_lvl+0xe8/0x150 [ 394.137038][ T8715] should_fail_ex+0x467/0x600 [ 394.137091][ T8715] _copy_from_user+0x2d/0xb0 [ 394.137118][ T8715] __sys_bpf+0x2e7/0xd90 [ 394.137240][ T8715] ? __pfx___sys_bpf+0x10/0x10 [ 394.137265][ T8715] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.137304][ T8715] ? rt_mutex_slowunlock+0x219/0x460 [ 394.137354][ T8715] ? ksys_write+0x248/0x270 [ 394.137396][ T8715] ? __pfx_ksys_write+0x10/0x10 [ 394.137428][ T8715] __x64_sys_bpf+0xba/0xd0 [ 394.137496][ T8715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.137520][ T8715] do_syscall_64+0x174/0x580 [ 394.137544][ T8715] ? trace_irq_disable+0x3b/0x140 [ 394.137580][ T8715] ? clear_bhb_loop+0x40/0x90 [ 394.137608][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.137630][ T8715] RIP: 0033:0x7f549c0bde99 [ 394.137651][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.137670][ T8715] RSP: 002b:00007f549a316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.137693][ T8715] RAX: ffffffffffffffda RBX: 00007f549c345fa0 RCX: 00007f549c0bde99 [ 394.137707][ T8715] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 394.137721][ T8715] RBP: 00007f549a316090 R08: 0000000000000000 R09: 0000000000000000 [ 394.137734][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.137745][ T8715] R13: 00007f549c346038 R14: 00007f549c345fa0 R15: 00007ffed57da678 [ 394.137780][ T8715] [ 394.319071][ T5867] hso 1-1:0.0: Failed to find INT IN ep [ 394.328039][ T5734] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 394.490824][ T5734] usb 2-1: device descriptor read/64, error -71 [ 394.575839][ T36] usb 1-1: USB disconnect, device number 33 [ 394.733979][ T5734] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 394.872245][ T5734] usb 2-1: device descriptor read/64, error -71 [ 394.981519][ T5734] usb usb2-port1: attempt power cycle [ 395.113558][ T8730] FAULT_INJECTION: forcing a failure. [ 395.113558][ T8730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.113587][ T8730] CPU: 0 UID: 0 PID: 8730 Comm: syz.2.950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.113608][ T8730] Tainted: [L]=SOFTLOCKUP [ 395.113614][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 395.113624][ T8730] Call Trace: [ 395.113629][ T8730] [ 395.113636][ T8730] dump_stack_lvl+0xe8/0x150 [ 395.113672][ T8730] should_fail_ex+0x467/0x600 [ 395.113703][ T8730] _copy_from_user+0x2d/0xb0 [ 395.113722][ T8730] __sys_bpf+0x2e7/0xd90 [ 395.113751][ T8730] ? __pfx___sys_bpf+0x10/0x10 [ 395.113768][ T8730] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.113791][ T8730] ? rt_mutex_slowunlock+0x219/0x460 [ 395.113827][ T8730] ? ksys_write+0x248/0x270 [ 395.113849][ T8730] ? __pfx_ksys_write+0x10/0x10 [ 395.113872][ T8730] __x64_sys_bpf+0xba/0xd0 [ 395.113896][ T8730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.113913][ T8730] do_syscall_64+0x174/0x580 [ 395.113930][ T8730] ? trace_irq_disable+0x3b/0x140 [ 395.113955][ T8730] ? clear_bhb_loop+0x40/0x90 [ 395.113974][ T8730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.113990][ T8730] RIP: 0033:0x7f80d514de99 [ 395.114004][ T8730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.114018][ T8730] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.114035][ T8730] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 395.114046][ T8730] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 395.114056][ T8730] RBP: 00007f80d33a6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.114066][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.114075][ T8730] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 395.114100][ T8730] [ 395.360861][ T5734] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 395.392295][ T5734] usb 2-1: device descriptor read/8, error -71 [ 396.558268][ T8717] FAULT_INJECTION: forcing a failure. [ 396.558268][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.558301][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.4.941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 396.558323][ T8717] Tainted: [L]=SOFTLOCKUP [ 396.558329][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 396.558339][ T8717] Call Trace: [ 396.558344][ T8717] [ 396.558351][ T8717] dump_stack_lvl+0xe8/0x150 [ 396.558382][ T8717] should_fail_ex+0x467/0x600 [ 396.558411][ T8717] _copy_from_user+0x2d/0xb0 [ 396.558429][ T8717] sctp_getsockopt_local_addrs+0x113/0xce0 [ 396.558554][ T8717] ? __pfx_sched_clock_cpu+0x10/0x10 [ 396.558594][ T8717] ? sched_balance_domains+0x770/0x880 [ 396.558640][ T8717] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 396.558673][ T8717] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 396.558707][ T8717] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.558728][ T8717] sctp_getsockopt+0x68f/0xb90 [ 396.558744][ T8717] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 396.558770][ T8717] do_sock_getsockopt+0x51d/0x7e0 [ 396.558792][ T8717] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 396.558821][ T8717] ? __fget_files+0x3a8/0x420 [ 396.558837][ T8717] ? __fget_files+0x2a/0x420 [ 396.558858][ T8717] __x64_sys_getsockopt+0x1aa/0x250 [ 396.558879][ T8717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.558897][ T8717] do_syscall_64+0x174/0x580 [ 396.558913][ T8717] ? trace_irq_disable+0x3b/0x140 [ 396.558939][ T8717] ? clear_bhb_loop+0x40/0x90 [ 396.558958][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.558974][ T8717] RIP: 0033:0x7efe0c4cde99 [ 396.558990][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.559003][ T8717] RSP: 002b:00007efe0a705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 396.559020][ T8717] RAX: ffffffffffffffda RBX: 00007efe0c756090 RCX: 00007efe0c4cde99 [ 396.559032][ T8717] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 396.559041][ T8717] RBP: 00007efe0a705090 R08: 0000200000000700 R09: 0000000000000000 [ 396.559051][ T8717] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 396.559062][ T8717] R13: 00007efe0c756128 R14: 00007efe0c756090 R15: 00007fff5abb56d8 [ 396.559086][ T8717] [ 396.730917][ T5734] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 396.794198][ T5734] usb 2-1: device descriptor read/8, error -71 [ 396.911200][ T5734] usb usb2-port1: unable to enumerate USB device [ 397.438009][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 398.589448][ T8774] FAULT_INJECTION: forcing a failure. [ 398.589448][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.590510][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.2.970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.590543][ T8774] Tainted: [L]=SOFTLOCKUP [ 398.590551][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 398.590564][ T8774] Call Trace: [ 398.590573][ T8774] [ 398.590583][ T8774] dump_stack_lvl+0xe8/0x150 [ 398.590629][ T8774] should_fail_ex+0x467/0x600 [ 398.590668][ T8774] _copy_from_iter+0x1d3/0x1660 [ 398.590707][ T8774] ? rcu_is_watching+0x15/0xb0 [ 398.590734][ T8774] ? trace_kmem_cache_alloc+0x29/0xe0 [ 398.590774][ T8774] ? __pfx__copy_from_iter+0x10/0x10 [ 398.590807][ T8774] ? __alloc_skb+0x276/0x7a0 [ 398.590827][ T8774] ? __alloc_skb+0x276/0x7a0 [ 398.590851][ T8774] ? netlink_sendmsg+0x650/0xb40 [ 398.590876][ T8774] ? skb_put+0x112/0x210 [ 398.590900][ T8774] netlink_sendmsg+0x6c0/0xb40 [ 398.590935][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.590963][ T8774] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 398.590997][ T8774] ? __kernel_text_address+0xd/0x30 [ 398.591016][ T8774] ? unwind_get_return_address+0x4d/0x90 [ 398.591040][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.591060][ T8774] sock_sendmsg_nosec+0x13a/0x180 [ 398.591096][ T8774] ____sys_sendmsg+0x565/0x870 [ 398.591121][ T8774] ? __might_fault+0xaf/0x130 [ 398.591150][ T8774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.591183][ T8774] ? import_iovec+0x73/0xa0 [ 398.591210][ T8774] ___sys_sendmsg+0x2a5/0x360 [ 398.591233][ T8774] ? __lock_acquire+0x683/0x2ce0 [ 398.591259][ T8774] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.591322][ T8774] ? __fget_files+0x2a/0x420 [ 398.591344][ T8774] ? __fget_files+0x3a8/0x420 [ 398.591375][ T8774] __x64_sys_sendmsg+0x1b7/0x290 [ 398.591404][ T8774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.591446][ T8774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.591471][ T8774] do_syscall_64+0x174/0x580 [ 398.591496][ T8774] ? trace_irq_disable+0x3b/0x140 [ 398.591543][ T8774] ? clear_bhb_loop+0x40/0x90 [ 398.591569][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.591590][ T8774] RIP: 0033:0x7f80d514de99 [ 398.591610][ T8774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.591630][ T8774] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.591652][ T8774] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 398.591667][ T8774] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 398.591679][ T8774] RBP: 00007f80d33a6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.591690][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.591703][ T8774] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 398.591736][ T8774] [ 400.106239][ T8776] FAULT_INJECTION: forcing a failure. [ 400.106239][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 400.106280][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 400.106311][ T8776] Tainted: [L]=SOFTLOCKUP [ 400.106319][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 400.106333][ T8776] Call Trace: [ 400.106341][ T8776] [ 400.106351][ T8776] dump_stack_lvl+0xe8/0x150 [ 400.106392][ T8776] should_fail_ex+0x467/0x600 [ 400.106432][ T8776] should_failslab+0xa8/0x100 [ 400.106460][ T8776] __kmalloc_noprof+0xfe/0x780 [ 400.106484][ T8776] ? copy_splice_read+0x16f/0xab0 [ 400.106506][ T8776] ? copy_splice_read+0x16f/0xab0 [ 400.106536][ T8776] copy_splice_read+0x16f/0xab0 [ 400.106571][ T8776] ? rcu_is_watching+0x15/0xb0 [ 400.106599][ T8776] ? __pfx_copy_splice_read+0x10/0x10 [ 400.106622][ T8776] ? trace_kmalloc+0x2a/0xf0 [ 400.106645][ T8776] ? look_up_lock_class+0x57/0x110 [ 400.106671][ T8776] ? register_lock_class+0x31/0x2e0 [ 400.106696][ T8776] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 400.106731][ T8776] ? alloc_pipe_info+0x35d/0x4c0 [ 400.106762][ T8776] ? __pfx_copy_splice_read+0x10/0x10 [ 400.106784][ T8776] splice_direct_to_actor+0x496/0xcc0 [ 400.106816][ T8776] ? kstrtouint+0x6e/0xe0 [ 400.106857][ T8776] ? __pfx_direct_splice_actor+0x10/0x10 [ 400.106882][ T8776] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 400.106919][ T8776] do_splice_direct+0x19b/0x2a0 [ 400.106948][ T8776] ? __pfx_do_splice_direct+0x10/0x10 [ 400.106982][ T8776] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 400.107015][ T8776] ? rw_verify_area+0x209/0x4d0 [ 400.107046][ T8776] do_sendfile+0x540/0x7e0 [ 400.107089][ T8776] ? __pfx_do_sendfile+0x10/0x10 [ 400.107137][ T8776] __se_sys_sendfile64+0xdf/0x1a0 [ 400.107176][ T8776] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 400.107218][ T8776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.107243][ T8776] do_syscall_64+0x174/0x580 [ 400.107269][ T8776] ? clear_bhb_loop+0x40/0x90 [ 400.107298][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.107321][ T8776] RIP: 0033:0x7f5f7784de99 [ 400.107341][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.107361][ T8776] RSP: 002b:00007f5f75aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 400.107384][ T8776] RAX: ffffffffffffffda RBX: 00007f5f77ad5fa0 RCX: 00007f5f7784de99 [ 400.107399][ T8776] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 400.107412][ T8776] RBP: 00007f5f75aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.107424][ T8776] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 400.107436][ T8776] R13: 00007f5f77ad6038 R14: 00007f5f77ad5fa0 R15: 00007fffa4cbff38 [ 400.107469][ T8776] [ 401.260206][ T1008] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 401.414790][ T1008] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 401.414823][ T1008] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 401.414844][ T1008] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 401.414895][ T1008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.415662][ T1008] usb 2-1: string descriptor 0 read error: -22 [ 401.415804][ T1008] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 401.415828][ T1008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.542609][ T1008] usb 2-1: config 0 descriptor?? [ 401.567992][ T1008] hub 2-1:0.0: bad descriptor, ignoring hub [ 401.568028][ T1008] hub 2-1:0.0: probe with driver hub failed with error -5 [ 401.589021][ T8827] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 401.589043][ T8827] netlink: 224 bytes leftover after parsing attributes in process `syz.4.987'. [ 401.939580][ T1008] usb 2-1: USB disconnect, device number 34 [ 402.707454][ T8858] tipc: Can't bind to reserved service type 0 [ 402.748760][ T8859] binder_alloc: 8857: binder_alloc_buf, no vma [ 403.231171][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 403.644393][ T8871] vlan2: entered promiscuous mode [ 403.644419][ T8871] gretap0: entered promiscuous mode [ 404.371820][ T8891] FAULT_INJECTION: forcing a failure. [ 404.371820][ T8891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.371868][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.3.1014 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 404.371898][ T8891] Tainted: [L]=SOFTLOCKUP [ 404.371905][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 404.371918][ T8891] Call Trace: [ 404.371926][ T8891] [ 404.371935][ T8891] dump_stack_lvl+0xe8/0x150 [ 404.371977][ T8891] should_fail_ex+0x467/0x600 [ 404.372021][ T8891] _copy_from_iter+0x1d3/0x1660 [ 404.372059][ T8891] ? rcu_is_watching+0x15/0xb0 [ 404.372085][ T8891] ? trace_kmem_cache_alloc+0x29/0xe0 [ 404.372118][ T8891] ? __pfx__copy_from_iter+0x10/0x10 [ 404.372149][ T8891] ? __alloc_skb+0x276/0x7a0 [ 404.372168][ T8891] ? __alloc_skb+0x276/0x7a0 [ 404.372195][ T8891] ? netlink_sendmsg+0x650/0xb40 [ 404.372219][ T8891] ? skb_put+0x112/0x210 [ 404.372238][ T8891] netlink_sendmsg+0x6c0/0xb40 [ 404.372264][ T8891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.372286][ T8891] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 404.372313][ T8891] ? __kernel_text_address+0xd/0x30 [ 404.372330][ T8891] ? unwind_get_return_address+0x4d/0x90 [ 404.372351][ T8891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.372369][ T8891] sock_sendmsg_nosec+0x13a/0x180 [ 404.372395][ T8891] ____sys_sendmsg+0x565/0x870 [ 404.372413][ T8891] ? __might_fault+0xaf/0x130 [ 404.372435][ T8891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.372460][ T8891] ? import_iovec+0x73/0xa0 [ 404.372481][ T8891] ___sys_sendmsg+0x2a5/0x360 [ 404.372498][ T8891] ? __lock_acquire+0x683/0x2ce0 [ 404.372519][ T8891] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.372567][ T8891] ? __fget_files+0x2a/0x420 [ 404.372584][ T8891] ? __fget_files+0x3a8/0x420 [ 404.372609][ T8891] __x64_sys_sendmsg+0x1b7/0x290 [ 404.372631][ T8891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.372665][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.372682][ T8891] do_syscall_64+0x174/0x580 [ 404.372701][ T8891] ? trace_irq_disable+0x3b/0x140 [ 404.372728][ T8891] ? clear_bhb_loop+0x40/0x90 [ 404.372749][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.372767][ T8891] RIP: 0033:0x7f549c0bde99 [ 404.372784][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.372798][ T8891] RSP: 002b:00007f549a2f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.372818][ T8891] RAX: ffffffffffffffda RBX: 00007f549c346090 RCX: 00007f549c0bde99 [ 404.372840][ T8891] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 404.372851][ T8891] RBP: 00007f549a2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 404.372862][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.372872][ T8891] R13: 00007f549c346128 R14: 00007f549c346090 R15: 00007ffed57da678 [ 404.372900][ T8891] [ 405.210851][ T5588] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 405.363361][ T5588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.363422][ T5588] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 405.363446][ T5588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.403040][ T5588] usb 1-1: config 0 descriptor?? [ 405.426788][ T5588] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 405.426904][ T5588] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 405.643459][ T5892] usb 1-1: USB disconnect, device number 34 [ 405.728147][ T8907] FAULT_INJECTION: forcing a failure. [ 405.728147][ T8907] name failslab, interval 1, probability 0, space 0, times 0 [ 405.728187][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.1.1020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.728218][ T8907] Tainted: [L]=SOFTLOCKUP [ 405.728227][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 405.728240][ T8907] Call Trace: [ 405.728248][ T8907] [ 405.728258][ T8907] dump_stack_lvl+0xe8/0x150 [ 405.728299][ T8907] should_fail_ex+0x467/0x600 [ 405.728339][ T8907] should_failslab+0xa8/0x100 [ 405.728367][ T8907] __kmalloc_noprof+0xfe/0x780 [ 405.728388][ T8907] ? rcu_is_watching+0x15/0xb0 [ 405.728415][ T8907] ? tomoyo_realpath_from_path+0xef/0x640 [ 405.728443][ T8907] ? tomoyo_realpath_from_path+0xef/0x640 [ 405.728480][ T8907] tomoyo_realpath_from_path+0xef/0x640 [ 405.728520][ T8907] ? tomoyo_path_number_perm+0x219/0x5f0 [ 405.728543][ T8907] tomoyo_path_number_perm+0x246/0x5f0 [ 405.728569][ T8907] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.728591][ T8907] ? __lock_acquire+0x683/0x2ce0 [ 405.728631][ T8907] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 405.728656][ T8907] ? hook_file_ioctl+0x1f3/0x600 [ 405.728687][ T8907] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.728731][ T8907] ? __fget_files+0x2a/0x420 [ 405.728757][ T8907] ? __fget_files+0x2a/0x420 [ 405.728778][ T8907] ? __fget_files+0x3a8/0x420 [ 405.728798][ T8907] ? __fget_files+0x2a/0x420 [ 405.728827][ T8907] security_file_ioctl+0xc3/0x2a0 [ 405.728854][ T8907] __se_sys_ioctl+0x47/0x170 [ 405.728883][ T8907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.728908][ T8907] do_syscall_64+0x174/0x580 [ 405.728930][ T8907] ? trace_irq_disable+0x3b/0x140 [ 405.728966][ T8907] ? clear_bhb_loop+0x40/0x90 [ 405.728993][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.729016][ T8907] RIP: 0033:0x7f5f7784de99 [ 405.729036][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.729055][ T8907] RSP: 002b:00007f5f75a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.729086][ T8907] RAX: ffffffffffffffda RBX: 00007f5f77ad6090 RCX: 00007f5f7784de99 [ 405.729102][ T8907] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 405.729114][ T8907] RBP: 00007f5f75a85090 R08: 0000000000000000 R09: 0000000000000000 [ 405.729127][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.729139][ T8907] R13: 00007f5f77ad6128 R14: 00007f5f77ad6090 R15: 00007fffa4cbff38 [ 405.729193][ T8907] [ 405.744649][ T8907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.340909][ T5588] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 406.711950][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.716849][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.809666][ T8944] FAULT_INJECTION: forcing a failure. [ 406.809666][ T8944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.809701][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.2.1035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.809727][ T8944] Tainted: [L]=SOFTLOCKUP [ 406.809733][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 406.809743][ T8944] Call Trace: [ 406.809749][ T8944] [ 406.809756][ T8944] dump_stack_lvl+0xe8/0x150 [ 406.809788][ T8944] should_fail_ex+0x467/0x600 [ 406.809828][ T8944] _copy_from_user+0x2d/0xb0 [ 406.809848][ T8944] ___sys_recvmsg+0x173/0x5a0 [ 406.809874][ T8944] ? __pfx____sys_recvmsg+0x10/0x10 [ 406.809897][ T8944] ? __fget_files+0x2a/0x420 [ 406.809928][ T8944] ? __fget_files+0x3a8/0x420 [ 406.809952][ T8944] do_recvmmsg+0x320/0x7f0 [ 406.809988][ T8944] ? __pfx_do_recvmmsg+0x10/0x10 [ 406.810007][ T8944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 406.810035][ T8944] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 406.810070][ T8944] __x64_sys_recvmmsg+0x198/0x250 [ 406.810092][ T8944] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 406.810121][ T8944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.810140][ T8944] do_syscall_64+0x174/0x580 [ 406.810158][ T8944] ? trace_irq_disable+0x3b/0x140 [ 406.810185][ T8944] ? clear_bhb_loop+0x40/0x90 [ 406.810207][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.810224][ T8944] RIP: 0033:0x7f80d514de99 [ 406.810241][ T8944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.810256][ T8944] RSP: 002b:00007f80d3385028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 406.810276][ T8944] RAX: ffffffffffffffda RBX: 00007f80d53d6090 RCX: 00007f80d514de99 [ 406.810290][ T8944] RDX: 00000000040000cb RSI: 00002000000000c0 RDI: 0000000000000003 [ 406.810301][ T8944] RBP: 00007f80d3385090 R08: 0000000000000000 R09: 0000000000000000 [ 406.810312][ T8944] R10: 0000000000012141 R11: 0000000000000246 R12: 0000000000000001 [ 406.810322][ T8944] R13: 00007f80d53d6128 R14: 00007f80d53d6090 R15: 00007ffea3da4438 [ 406.810347][ T8944] [ 407.078798][ T5588] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.079902][ T5588] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 407.079939][ T5588] usb 5-1: can't read configurations, error -71 [ 407.440821][ T8951] FAULT_INJECTION: forcing a failure. [ 407.440821][ T8951] name failslab, interval 1, probability 0, space 0, times 0 [ 407.440861][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.1.1037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.440890][ T8951] Tainted: [L]=SOFTLOCKUP [ 407.440898][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 407.440911][ T8951] Call Trace: [ 407.440919][ T8951] [ 407.440928][ T8951] dump_stack_lvl+0xe8/0x150 [ 407.440977][ T8951] should_fail_ex+0x467/0x600 [ 407.441016][ T8951] should_failslab+0xa8/0x100 [ 407.441045][ T8951] __kmalloc_noprof+0xfe/0x780 [ 407.441066][ T8951] ? rcu_is_watching+0x15/0xb0 [ 407.441093][ T8951] ? tomoyo_realpath_from_path+0xef/0x640 [ 407.441122][ T8951] ? tomoyo_realpath_from_path+0xef/0x640 [ 407.441159][ T8951] tomoyo_realpath_from_path+0xef/0x640 [ 407.441199][ T8951] ? tomoyo_path_number_perm+0x219/0x5f0 [ 407.441223][ T8951] tomoyo_path_number_perm+0x246/0x5f0 [ 407.441250][ T8951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 407.441272][ T8951] ? __lock_acquire+0x683/0x2ce0 [ 407.441312][ T8951] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.441337][ T8951] ? hook_file_ioctl+0x1f3/0x600 [ 407.441369][ T8951] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.441414][ T8951] ? __fget_files+0x2a/0x420 [ 407.441441][ T8951] ? __fget_files+0x2a/0x420 [ 407.441463][ T8951] ? __fget_files+0x3a8/0x420 [ 407.441484][ T8951] ? __fget_files+0x2a/0x420 [ 407.441511][ T8951] security_file_ioctl+0xc3/0x2a0 [ 407.441541][ T8951] __se_sys_ioctl+0x47/0x170 [ 407.441571][ T8951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.441596][ T8951] do_syscall_64+0x174/0x580 [ 407.441619][ T8951] ? trace_irq_disable+0x3b/0x140 [ 407.441654][ T8951] ? clear_bhb_loop+0x40/0x90 [ 407.441683][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.441705][ T8951] RIP: 0033:0x7f5f7784de99 [ 407.441725][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.441744][ T8951] RSP: 002b:00007f5f75a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.441767][ T8951] RAX: ffffffffffffffda RBX: 00007f5f77ad6090 RCX: 00007f5f7784de99 [ 407.441782][ T8951] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 407.441795][ T8951] RBP: 00007f5f75a85090 R08: 0000000000000000 R09: 0000000000000000 [ 407.441807][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.441819][ T8951] R13: 00007f5f77ad6128 R14: 00007f5f77ad6090 R15: 00007fffa4cbff38 [ 407.441854][ T8951] [ 407.445805][ T8951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.010811][ T5588] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 408.169140][ T5588] usb 5-1: config 32 has an invalid interface number: 255 but max is 0 [ 408.169176][ T5588] usb 5-1: config 32 has no interface number 0 [ 408.169214][ T5588] usb 5-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 408.169260][ T5588] usb 5-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 408.169292][ T5588] usb 5-1: config 32 interface 255 has no altsetting 0 [ 408.169330][ T5588] usb 5-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 408.169357][ T5588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.203304][ T8971] FAULT_INJECTION: forcing a failure. [ 408.203304][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 408.203429][ T8971] CPU: 1 UID: 0 PID: 8971 Comm: syz.2.1046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.203523][ T8971] Tainted: [L]=SOFTLOCKUP [ 408.203545][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 408.203590][ T8971] Call Trace: [ 408.203614][ T8971] [ 408.203639][ T8971] dump_stack_lvl+0xe8/0x150 [ 408.203754][ T8971] should_fail_ex+0x467/0x600 [ 408.203865][ T8971] should_failslab+0xa8/0x100 [ 408.203956][ T8971] __kmalloc_noprof+0xfe/0x780 [ 408.204026][ T8971] ? rcu_is_watching+0x15/0xb0 [ 408.204107][ T8971] ? tomoyo_realpath_from_path+0xef/0x640 [ 408.204188][ T8971] ? tomoyo_realpath_from_path+0xef/0x640 [ 408.204292][ T8971] tomoyo_realpath_from_path+0xef/0x640 [ 408.204410][ T8971] ? tomoyo_path_number_perm+0x219/0x5f0 [ 408.204479][ T8971] tomoyo_path_number_perm+0x246/0x5f0 [ 408.204553][ T8971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 408.204613][ T8971] ? __lock_acquire+0x683/0x2ce0 [ 408.204729][ T8971] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.204801][ T8971] ? hook_file_ioctl+0x1f3/0x600 [ 408.204897][ T8971] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.205033][ T8971] ? __fget_files+0x2a/0x420 [ 408.205105][ T8971] ? __fget_files+0x2a/0x420 [ 408.205174][ T8971] ? __fget_files+0x3a8/0x420 [ 408.205254][ T8971] ? __fget_files+0x2a/0x420 [ 408.205349][ T8971] security_file_ioctl+0xc3/0x2a0 [ 408.205432][ T8971] __se_sys_ioctl+0x47/0x170 [ 408.205522][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.205595][ T8971] do_syscall_64+0x174/0x580 [ 408.205664][ T8971] ? trace_irq_disable+0x3b/0x140 [ 408.205765][ T8971] ? clear_bhb_loop+0x40/0x90 [ 408.205846][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.205911][ T8971] RIP: 0033:0x7f80d514de99 [ 408.205969][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.206026][ T8971] RSP: 002b:00007f80d3385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.206084][ T8971] RAX: ffffffffffffffda RBX: 00007f80d53d6090 RCX: 00007f80d514de99 [ 408.206138][ T8971] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 408.206175][ T8971] RBP: 00007f80d3385090 R08: 0000000000000000 R09: 0000000000000000 [ 408.206211][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.206248][ T8971] R13: 00007f80d53d6128 R14: 00007f80d53d6090 R15: 00007ffea3da4438 [ 408.206353][ T8971] [ 408.219493][ T8971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.524815][ T5588] usb-storage 5-1:32.255: USB Mass Storage device detected [ 408.573266][ T5588] usb-storage 5-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 408.696355][ T8984] FAULT_INJECTION: forcing a failure. [ 408.696355][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 408.696395][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.1.1051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.696425][ T8984] Tainted: [L]=SOFTLOCKUP [ 408.696433][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 408.696447][ T8984] Call Trace: [ 408.696456][ T8984] [ 408.696466][ T8984] dump_stack_lvl+0xe8/0x150 [ 408.696507][ T8984] should_fail_ex+0x467/0x600 [ 408.696546][ T8984] should_failslab+0xa8/0x100 [ 408.696575][ T8984] __kvmalloc_node_noprof+0x17a/0x8a0 [ 408.696604][ T8984] ? file_tty_write+0x2ac/0x980 [ 408.696732][ T8984] ? file_tty_write+0x2ac/0x980 [ 408.696764][ T8984] file_tty_write+0x2ac/0x980 [ 408.696797][ T8984] ? security_file_permission+0x75/0x260 [ 408.696831][ T8984] vfs_write+0x61e/0xbb0 [ 408.696869][ T8984] ? __pfx_vfs_write+0x10/0x10 [ 408.696907][ T8984] ? __fget_files+0x2a/0x420 [ 408.696940][ T8984] ksys_write+0x156/0x270 [ 408.696973][ T8984] ? __pfx_ksys_write+0x10/0x10 [ 408.696997][ T8984] ? __task_pid_nr_ns+0x28/0x470 [ 408.697074][ T8984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.697099][ T8984] do_syscall_64+0x174/0x580 [ 408.697122][ T8984] ? trace_irq_disable+0x3b/0x140 [ 408.697159][ T8984] ? clear_bhb_loop+0x40/0x90 [ 408.697188][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.697211][ T8984] RIP: 0033:0x7f5f7784de99 [ 408.697232][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.697252][ T8984] RSP: 002b:00007f5f75aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.697276][ T8984] RAX: ffffffffffffffda RBX: 00007f5f77ad5fa0 RCX: 00007f5f7784de99 [ 408.697293][ T8984] RDX: 0000000000001060 RSI: 0000200000002080 RDI: 0000000000000004 [ 408.697308][ T8984] RBP: 00007f5f75aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.697322][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.697335][ T8984] R13: 00007f5f77ad6038 R14: 00007f5f77ad5fa0 R15: 00007fffa4cbff38 [ 408.697373][ T8984] [ 408.933362][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.953510][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.973293][ T5588] usb 5-1: USB disconnect, device number 20 [ 409.203574][ T8992] FAULT_INJECTION: forcing a failure. [ 409.203574][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 409.203655][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.3.1054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.203687][ T8992] Tainted: [L]=SOFTLOCKUP [ 409.203696][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.203710][ T8992] Call Trace: [ 409.203718][ T8992] [ 409.203728][ T8992] dump_stack_lvl+0xe8/0x150 [ 409.203780][ T8992] should_fail_ex+0x467/0x600 [ 409.203820][ T8992] should_failslab+0xa8/0x100 [ 409.203849][ T8992] kmem_cache_alloc_noprof+0xa4/0x650 [ 409.203886][ T8992] ? do_getname+0x2e/0x250 [ 409.203919][ T8992] ? do_getname+0x2e/0x250 [ 409.203958][ T8992] do_getname+0x2e/0x250 [ 409.203991][ T8992] ? getname_flags+0x11/0x20 [ 409.204027][ T8992] do_sys_openat2+0xcc/0x200 [ 409.204052][ T8992] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.204075][ T8992] ? ksys_write+0x248/0x270 [ 409.204105][ T8992] ? rcu_is_watching+0x15/0xb0 [ 409.204138][ T8992] __x64_sys_openat+0x138/0x170 [ 409.204164][ T8992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.204188][ T8992] do_syscall_64+0x174/0x580 [ 409.204215][ T8992] ? clear_bhb_loop+0x40/0x90 [ 409.204243][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.204267][ T8992] RIP: 0033:0x7f549c0bde99 [ 409.204288][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.204307][ T8992] RSP: 002b:00007f549a2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.204330][ T8992] RAX: ffffffffffffffda RBX: 00007f549c346090 RCX: 00007f549c0bde99 [ 409.204348][ T8992] RDX: 0000000000109000 RSI: 0000200000001b00 RDI: ffffffffffffff9c [ 409.204363][ T8992] RBP: 00007f549a2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 409.204376][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.204389][ T8992] R13: 00007f549c346128 R14: 00007f549c346090 R15: 00007ffed57da678 [ 409.204424][ T8992] [ 410.139640][ T9001] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 410.139695][ T9001] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 410.157956][ T9003] FAULT_INJECTION: forcing a failure. [ 410.157956][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 410.158010][ T9003] CPU: 0 UID: 0 PID: 9003 Comm: syz.2.1058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.158085][ T9003] Tainted: [L]=SOFTLOCKUP [ 410.158106][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 410.158149][ T9003] Call Trace: [ 410.158171][ T9003] [ 410.158186][ T9003] dump_stack_lvl+0xe8/0x150 [ 410.158283][ T9003] should_fail_ex+0x467/0x600 [ 410.158381][ T9003] should_failslab+0xa8/0x100 [ 410.158454][ T9003] __kmalloc_noprof+0xfe/0x780 [ 410.158508][ T9003] ? rcu_is_watching+0x15/0xb0 [ 410.158573][ T9003] ? tomoyo_realpath_from_path+0xef/0x640 [ 410.158647][ T9003] ? tomoyo_realpath_from_path+0xef/0x640 [ 410.158734][ T9003] tomoyo_realpath_from_path+0xef/0x640 [ 410.158852][ T9003] ? tomoyo_path_number_perm+0x219/0x5f0 [ 410.158909][ T9003] tomoyo_path_number_perm+0x246/0x5f0 [ 410.158936][ T9003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 410.158958][ T9003] ? __lock_acquire+0x683/0x2ce0 [ 410.159062][ T9003] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.159124][ T9003] ? hook_file_ioctl+0x1f3/0x600 [ 410.159199][ T9003] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.159312][ T9003] ? __fget_files+0x2a/0x420 [ 410.159370][ T9003] ? __fget_files+0x2a/0x420 [ 410.159417][ T9003] ? __fget_files+0x3a8/0x420 [ 410.159453][ T9003] ? __fget_files+0x2a/0x420 [ 410.159480][ T9003] security_file_ioctl+0xc3/0x2a0 [ 410.159506][ T9003] __se_sys_ioctl+0x47/0x170 [ 410.159536][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.159562][ T9003] do_syscall_64+0x174/0x580 [ 410.159586][ T9003] ? trace_irq_disable+0x3b/0x140 [ 410.159623][ T9003] ? clear_bhb_loop+0x40/0x90 [ 410.159652][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.159673][ T9003] RIP: 0033:0x7f80d514de99 [ 410.159692][ T9003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.159710][ T9003] RSP: 002b:00007f80d3385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.159733][ T9003] RAX: ffffffffffffffda RBX: 00007f80d53d6090 RCX: 00007f80d514de99 [ 410.159750][ T9003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 410.159763][ T9003] RBP: 00007f80d3385090 R08: 0000000000000000 R09: 0000000000000000 [ 410.159776][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.159789][ T9003] R13: 00007f80d53d6128 R14: 00007f80d53d6090 R15: 00007ffea3da4438 [ 410.159830][ T9003] [ 410.190320][ T9003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.458588][ T198] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 410.657323][ T198] usb 1-1: config 0 has an invalid interface number: 162 but max is 0 [ 410.657354][ T198] usb 1-1: config 0 has no interface number 0 [ 410.657386][ T198] usb 1-1: too many endpoints for config 0 interface 162 altsetting 8: 252, using maximum allowed: 30 [ 410.657422][ T198] usb 1-1: config 0 interface 162 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 410.657449][ T198] usb 1-1: config 0 interface 162 has no altsetting 0 [ 410.657483][ T198] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 410.657506][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.736564][ T198] usb 1-1: config 0 descriptor?? [ 411.609487][ T198] usb 1-1: string descriptor 0 read error: -71 [ 411.678236][ T198] usb 1-1: USB disconnect, device number 35 [ 411.700784][ T5715] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 411.837397][ T9041] FAULT_INJECTION: forcing a failure. [ 411.837397][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 411.837437][ T9041] CPU: 0 UID: 0 PID: 9041 Comm: syz.3.1071 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.837468][ T9041] Tainted: [L]=SOFTLOCKUP [ 411.837476][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.837490][ T9041] Call Trace: [ 411.837498][ T9041] [ 411.837507][ T9041] dump_stack_lvl+0xe8/0x150 [ 411.837546][ T9041] should_fail_ex+0x467/0x600 [ 411.837585][ T9041] should_failslab+0xa8/0x100 [ 411.837612][ T9041] __kmalloc_noprof+0xfe/0x780 [ 411.837633][ T9041] ? rcu_is_watching+0x15/0xb0 [ 411.837659][ T9041] ? tomoyo_realpath_from_path+0xef/0x640 [ 411.837687][ T9041] ? tomoyo_realpath_from_path+0xef/0x640 [ 411.837722][ T9041] tomoyo_realpath_from_path+0xef/0x640 [ 411.837766][ T9041] ? tomoyo_path_number_perm+0x219/0x5f0 [ 411.837790][ T9041] tomoyo_path_number_perm+0x246/0x5f0 [ 411.837815][ T9041] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.837846][ T9041] ? __lock_acquire+0x683/0x2ce0 [ 411.837884][ T9041] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.837908][ T9041] ? hook_file_ioctl+0x1f3/0x600 [ 411.837941][ T9041] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.837987][ T9041] ? __fget_files+0x2a/0x420 [ 411.838015][ T9041] ? __fget_files+0x2a/0x420 [ 411.838037][ T9041] ? __fget_files+0x3a8/0x420 [ 411.838059][ T9041] ? __fget_files+0x2a/0x420 [ 411.838085][ T9041] security_file_ioctl+0xc3/0x2a0 [ 411.838112][ T9041] __se_sys_ioctl+0x47/0x170 [ 411.838150][ T9041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.838174][ T9041] do_syscall_64+0x174/0x580 [ 411.838196][ T9041] ? trace_irq_disable+0x3b/0x140 [ 411.838232][ T9041] ? clear_bhb_loop+0x40/0x90 [ 411.838259][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.838281][ T9041] RIP: 0033:0x7f549c0bde99 [ 411.838301][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.838320][ T9041] RSP: 002b:00007f549a2f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.838342][ T9041] RAX: ffffffffffffffda RBX: 00007f549c346090 RCX: 00007f549c0bde99 [ 411.838357][ T9041] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 411.838369][ T9041] RBP: 00007f549a2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 411.838381][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.838393][ T9041] R13: 00007f549c346128 R14: 00007f549c346090 R15: 00007ffed57da678 [ 411.838426][ T9041] [ 411.838471][ T9041] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.900984][ T5588] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 411.904324][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.920762][ T5715] usb 5-1: not running at top speed; connect to a high speed hub [ 412.014844][ T5715] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 412.014874][ T5715] usb 5-1: config 1 has no interface number 0 [ 412.014924][ T5715] usb 5-1: config 1 interface 93 has no altsetting 0 [ 412.090798][ T5588] usb 3-1: Using ep0 maxpacket: 16 [ 412.090819][ T5715] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 412.090845][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.090866][ T5715] usb 5-1: Product: syz [ 412.090880][ T5715] usb 5-1: Manufacturer: syz [ 412.090895][ T5715] usb 5-1: SerialNumber: syz [ 412.194350][ T5588] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 412.194382][ T5588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.232602][ T5588] usb 3-1: config 0 descriptor?? [ 412.258773][ T5588] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 412.475730][ T5588] usb 3-1: Detected FT232A [ 412.506705][ T5588] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 412.608666][ T5715] usb 5-1: USB disconnect, device number 21 [ 412.760909][ T198] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 412.806485][ T9052] FAULT_INJECTION: forcing a failure. [ 412.806485][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 412.806524][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.3.1076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 412.806553][ T9052] Tainted: [L]=SOFTLOCKUP [ 412.806560][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.806573][ T9052] Call Trace: [ 412.806581][ T9052] [ 412.806589][ T9052] dump_stack_lvl+0xe8/0x150 [ 412.806630][ T9052] should_fail_ex+0x467/0x600 [ 412.806680][ T9052] should_failslab+0xa8/0x100 [ 412.806709][ T9052] __kmalloc_noprof+0xfe/0x780 [ 412.806731][ T9052] ? rcu_is_watching+0x15/0xb0 [ 412.806758][ T9052] ? tomoyo_realpath_from_path+0xef/0x640 [ 412.806788][ T9052] ? tomoyo_realpath_from_path+0xef/0x640 [ 412.806824][ T9052] tomoyo_realpath_from_path+0xef/0x640 [ 412.806864][ T9052] ? tomoyo_path_number_perm+0x219/0x5f0 [ 412.806887][ T9052] tomoyo_path_number_perm+0x246/0x5f0 [ 412.806913][ T9052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.806936][ T9052] ? __lock_acquire+0x683/0x2ce0 [ 412.806974][ T9052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 412.806998][ T9052] ? hook_file_ioctl+0x1f3/0x600 [ 412.807029][ T9052] ? lockdep_hardirqs_on+0x7a/0x110 [ 412.807070][ T9052] ? __fget_files+0x2a/0x420 [ 412.807095][ T9052] ? __fget_files+0x2a/0x420 [ 412.807116][ T9052] ? __fget_files+0x3a8/0x420 [ 412.807136][ T9052] ? __fget_files+0x2a/0x420 [ 412.807161][ T9052] security_file_ioctl+0xc3/0x2a0 [ 412.807188][ T9052] __se_sys_ioctl+0x47/0x170 [ 412.807217][ T9052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.807242][ T9052] do_syscall_64+0x174/0x580 [ 412.807265][ T9052] ? trace_irq_disable+0x3b/0x140 [ 412.807301][ T9052] ? clear_bhb_loop+0x40/0x90 [ 412.807329][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.807350][ T9052] RIP: 0033:0x7f549c0bde99 [ 412.807371][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.807389][ T9052] RSP: 002b:00007f549a316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.807412][ T9052] RAX: ffffffffffffffda RBX: 00007f549c345fa0 RCX: 00007f549c0bde99 [ 412.807427][ T9052] RDX: 0000000000000000 RSI: 000000004010ae68 RDI: 0000000000000004 [ 412.807439][ T9052] RBP: 00007f549a316090 R08: 0000000000000000 R09: 0000000000000000 [ 412.807453][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.807465][ T9052] R13: 00007f549c346038 R14: 00007f549c345fa0 R15: 00007ffed57da678 [ 412.807500][ T9052] [ 412.807509][ T9052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.953457][ T198] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 412.953542][ T198] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 412.953596][ T198] usb 1-1: Product: syz [ 412.953638][ T198] usb 1-1: SerialNumber: syz [ 413.047302][ T198] usb 1-1: config 0 descriptor?? [ 413.331286][ T198] hso 1-1:0.0: Failed to find INT IN ep [ 413.542146][ T5734] usb 1-1: USB disconnect, device number 36 [ 413.700896][ T5588] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 413.877866][ T5867] usb 3-1: USB disconnect, device number 32 [ 413.906073][ T5867] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 413.906869][ T5867] ftdi_sio 3-1:0.0: device disconnected [ 414.145017][ T5588] usb 5-1: unable to get BOS descriptor or descriptor too short [ 414.149168][ T5588] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 414.149209][ T5588] usb 5-1: can't read configurations, error -71 [ 414.827372][ T9100] veth1_macvtap: left promiscuous mode [ 414.827403][ T9100] macsec0: entered promiscuous mode [ 414.827419][ T9100] macsec0: entered allmulticast mode [ 414.943402][ T9106] FAULT_INJECTION: forcing a failure. [ 414.943402][ T9106] name failslab, interval 1, probability 0, space 0, times 0 [ 414.943467][ T9106] CPU: 0 UID: 0 PID: 9106 Comm: syz.0.1098 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.943497][ T9106] Tainted: [L]=SOFTLOCKUP [ 414.943504][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 414.943518][ T9106] Call Trace: [ 414.943527][ T9106] [ 414.943536][ T9106] dump_stack_lvl+0xe8/0x150 [ 414.943577][ T9106] should_fail_ex+0x467/0x600 [ 414.943616][ T9106] should_failslab+0xa8/0x100 [ 414.943645][ T9106] kmem_cache_alloc_noprof+0xa4/0x650 [ 414.943681][ T9106] ? security_file_alloc+0x34/0x310 [ 414.943702][ T9106] ? security_file_alloc+0x34/0x310 [ 414.943732][ T9106] security_file_alloc+0x34/0x310 [ 414.943757][ T9106] init_file+0x96/0x2d0 [ 414.943795][ T9106] alloc_empty_file+0x74/0x1d0 [ 414.943832][ T9106] path_openat+0x8f/0x3850 [ 414.943867][ T9106] ? kasan_save_track+0x3e/0x80 [ 414.943965][ T9106] ? __kasan_slab_alloc+0x6c/0x80 [ 414.943987][ T9106] ? kmem_cache_alloc_noprof+0x355/0x650 [ 414.944020][ T9106] ? do_getname+0x2e/0x250 [ 414.944052][ T9106] ? do_sys_openat2+0xcc/0x200 [ 414.944071][ T9106] ? __x64_sys_openat+0x138/0x170 [ 414.944091][ T9106] ? do_syscall_64+0x174/0x580 [ 414.944115][ T9106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.944160][ T9106] do_file_open+0x23e/0x4a0 [ 414.944186][ T9106] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.944215][ T9106] ? __pfx_do_file_open+0x10/0x10 [ 414.944268][ T9106] ? alloc_fd+0x654/0x6d0 [ 414.944343][ T9106] do_sys_openat2+0x115/0x200 [ 414.944369][ T9106] ? __pfx_do_sys_openat2+0x10/0x10 [ 414.944391][ T9106] ? ksys_write+0x248/0x270 [ 414.944421][ T9106] ? __pfx_ksys_write+0x10/0x10 [ 414.944452][ T9106] __x64_sys_openat+0x138/0x170 [ 414.944478][ T9106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.944503][ T9106] do_syscall_64+0x174/0x580 [ 414.944525][ T9106] ? trace_irq_disable+0x3b/0x140 [ 414.944561][ T9106] ? clear_bhb_loop+0x40/0x90 [ 414.944589][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.944612][ T9106] RIP: 0033:0x7f175818de99 [ 414.944632][ T9106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.944652][ T9106] RSP: 002b:00007f17563e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 414.944675][ T9106] RAX: ffffffffffffffda RBX: 00007f1758415fa0 RCX: 00007f175818de99 [ 414.944690][ T9106] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 414.944704][ T9106] RBP: 00007f17563e6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.944717][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.944730][ T9106] R13: 00007f1758416038 R14: 00007f1758415fa0 R15: 00007fff0a9f0ef8 [ 414.944764][ T9106] [ 415.000773][ T36] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 415.240746][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 415.260832][ T36] usb 2-1: config 3 has an invalid interface number: 81 but max is 0 [ 415.260860][ T36] usb 2-1: config 3 has no interface number 0 [ 415.260907][ T36] usb 2-1: config 3 interface 81 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 415.260930][ T36] usb 2-1: config 3 interface 81 has no altsetting 0 [ 415.266963][ T36] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=1e.89 [ 415.266995][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.267017][ T36] usb 2-1: Product: ᐌ [ 415.267031][ T36] usb 2-1: Manufacturer: ᯺ื䴊迸憅힗蘅槛ᣊ糘ꝣٙ랲瓃≖ᴏ抶处竓鍥隸઄阥쿋煟暧❀鴩氎䕔不㋲꒪ତⷶ᎔磔ⶑʍࡐ໭㗜␭聻睨ꯅ礸ࠐ垂⣏ὒ䋐 [ 415.267056][ T36] usb 2-1: SerialNumber: Н [ 415.452537][ T9105] tipc: Enabling of bearer rejected, failed to enable media [ 416.134380][ T36] peak_usb 2-1:3.81 can0: unable to request usb[type=0 value=1] err=-71 [ 416.134414][ T36] peak_usb 2-1:3.81: unable to read PCAN-USB Pro FD firmware info (err -71) [ 416.991859][ T36] peak_usb 2-1:3.81: probe with driver peak_usb failed with error -71 [ 417.052479][ T36] usb 2-1: USB disconnect, device number 35 [ 417.247669][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1126'. [ 417.249334][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1126'. [ 417.391020][ T36] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 417.733193][ T9186] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 417.735914][ T9186] veth0_vlan: left promiscuous mode [ 417.831064][ T9186] team0: Device veth0_vlan failed to register rx_handler [ 417.968453][ T9193] FAULT_INJECTION: forcing a failure. [ 417.968453][ T9193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.968556][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.2.1135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.968586][ T9193] Tainted: [L]=SOFTLOCKUP [ 417.968594][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.968607][ T9193] Call Trace: [ 417.968616][ T9193] [ 417.968625][ T9193] dump_stack_lvl+0xe8/0x150 [ 417.968672][ T9193] should_fail_ex+0x467/0x600 [ 417.968711][ T9193] _copy_from_user+0x2d/0xb0 [ 417.968738][ T9193] memdup_user+0x5e/0xd0 [ 417.968770][ T9193] strndup_user+0x68/0xd0 [ 417.968799][ T9193] __se_sys_mount+0x9d/0x420 [ 417.968896][ T9193] ? ksys_write+0x248/0x270 [ 417.968926][ T9193] ? __pfx___se_sys_mount+0x10/0x10 [ 417.968954][ T9193] ? __x64_sys_mount+0x20/0xc0 [ 417.968975][ T9193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.969000][ T9193] do_syscall_64+0x174/0x580 [ 417.969028][ T9193] ? clear_bhb_loop+0x40/0x90 [ 417.969055][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.969077][ T9193] RIP: 0033:0x7f80d514de99 [ 417.969097][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.969116][ T9193] RSP: 002b:00007f80d33a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.969149][ T9193] RAX: ffffffffffffffda RBX: 00007f80d53d5fa0 RCX: 00007f80d514de99 [ 417.969164][ T9193] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 417.969178][ T9193] RBP: 00007f80d33a6090 R08: 0000200000002140 R09: 0000000000000000 [ 417.969192][ T9193] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000001 [ 417.969204][ T9193] R13: 00007f80d53d6038 R14: 00007f80d53d5fa0 R15: 00007ffea3da4438 [ 417.969235][ T9193] [ 418.112555][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 418.162571][ T36] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 418.162610][ T36] usb 2-1: can't read configurations, error -71 [ 418.712490][ T9212] FAULT_INJECTION: forcing a failure. [ 418.712490][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.712531][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.2.1141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.712560][ T9212] Tainted: [L]=SOFTLOCKUP [ 418.712570][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 418.712583][ T9212] Call Trace: [ 418.712600][ T9212] [ 418.712610][ T9212] dump_stack_lvl+0xe8/0x150 [ 418.712649][ T9212] should_fail_ex+0x467/0x600 [ 418.712685][ T9212] _copy_from_iter+0x1d3/0x1660 [ 418.712715][ T9212] ? trace_kmem_cache_alloc+0x29/0xe0 [ 418.712753][ T9212] ? alloc_pages_mpol+0x115/0x280 [ 418.712853][ T9212] ? __pfx__copy_from_iter+0x10/0x10 [ 418.712879][ T9212] ? alloc_pages_noprof+0x161/0x2f0 [ 418.712901][ T9212] ? skb_page_frag_refill+0x119/0x460 [ 418.712930][ T9212] tcp_sendmsg_locked+0x2626/0x55c0 [ 418.713077][ T9212] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 418.713114][ T9212] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 418.713137][ T9212] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.713162][ T9212] tcp_sendmsg+0x2f/0x50 [ 418.713190][ T9212] ? __pfx_inet_sendmsg+0x10/0x10 [ 418.713266][ T9212] sock_sendmsg_nosec+0x10e/0x180 [ 418.713294][ T9212] __sys_sendto+0x41e/0x5d0 [ 418.713315][ T9212] ? __pfx___sys_sendto+0x10/0x10 [ 418.713357][ T9212] ? __pfx_ksys_write+0x10/0x10 [ 418.713385][ T9212] __x64_sys_sendto+0xde/0x100 [ 418.713405][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.713424][ T9212] do_syscall_64+0x174/0x580 [ 418.713442][ T9212] ? trace_irq_disable+0x3b/0x140 [ 418.713470][ T9212] ? clear_bhb_loop+0x40/0x90 [ 418.713490][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.713508][ T9212] RIP: 0033:0x7f80d514de99 [ 418.713525][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.713540][ T9212] RSP: 002b:00007f80d3385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 418.713561][ T9212] RAX: ffffffffffffffda RBX: 00007f80d53d6090 RCX: 00007f80d514de99 [ 418.713574][ T9212] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 418.713586][ T9212] RBP: 00007f80d3385090 R08: 0000000000000000 R09: 0000000000000000 [ 418.713608][ T9212] R10: 0000000004044880 R11: 0000000000000246 R12: 0000000000000001 [ 418.713621][ T9212] R13: 00007f80d53d6128 R14: 00007f80d53d6090 R15: 00007ffea3da4438 [ 418.713649][ T9212] [ 419.077303][ T37] kauditd_printk_skb: 142 callbacks suppressed [ 419.077323][ T37] audit: type=1326 audit(1784900728.984:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.082060][ T37] audit: type=1326 audit(1784900728.994:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.096808][ T37] audit: type=1326 audit(1784900728.994:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.101701][ T37] audit: type=1326 audit(1784900729.004:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.101852][ T37] audit: type=1326 audit(1784900729.004:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.117801][ T37] audit: type=1326 audit(1784900729.004:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.117978][ T37] audit: type=1326 audit(1784900729.024:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.118123][ T37] audit: type=1326 audit(1784900729.024:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.127920][ T37] audit: type=1326 audit(1784900729.004:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.129311][ T37] audit: type=1326 audit(1784900729.034:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5f7784de99 code=0x7ffc0000 [ 419.438101][ T9221] random: crng reseeded on system resumption [ 419.862577][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.870362][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.041367][ T5867] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 420.203619][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.205979][ T5867] usb 2-1: not running at top speed; connect to a high speed hub [ 420.207630][ T5867] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 420.207658][ T5867] usb 2-1: config 1 has no interface number 0 [ 420.207705][ T5867] usb 2-1: config 1 interface 93 has no altsetting 0 [ 420.249824][ T5867] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 420.249855][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.249875][ T5867] usb 2-1: Product: syz [ 420.249890][ T5867] usb 2-1: Manufacturer: syz [ 420.249905][ T5867] usb 2-1: SerialNumber: syz [ 420.432119][ T1008] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 420.580779][ T1008] usb 5-1: Using ep0 maxpacket: 16 [ 420.583780][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 420.583829][ T1008] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 420.583854][ T1008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.647747][ T1008] usb 5-1: config 0 descriptor?? [ 420.665575][ T5867] usb 2-1: USB disconnect, device number 38 [ 420.907512][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.942822][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.316314][ T1008] thrustmaster 0003:044F:B323.0007: unknown main item tag 0x2 [ 421.316357][ T1008] thrustmaster 0003:044F:B323.0007: unexpected long global item [ 421.317081][ T1008] thrustmaster 0003:044F:B323.0007: parse failed [ 421.317159][ T1008] thrustmaster 0003:044F:B323.0007: probe with driver thrustmaster failed with error -22 [ 422.210824][ T1008] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 422.381647][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.381700][ T1008] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 422.381724][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.473333][ T1008] usb 4-1: config 0 descriptor?? [ 422.693938][ T1008] usbhid 4-1:0.0: can't add hid device: -71 [ 422.694067][ T1008] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 422.769603][ T1008] usb 4-1: USB disconnect, device number 33 [ 423.001515][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 423.250868][ T1008] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 423.416551][ T1008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.416627][ T1008] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 423.416653][ T1008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.467089][ T1008] usb 4-1: config 0 descriptor?? [ 423.613561][ T9293] "syz.0.1176" (9293) uses obsolete ecb(arc4) skcipher [ 423.758544][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.796213][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.796271][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.796313][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.276455][ T1008] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 424.297303][ T36] usb 5-1: USB disconnect, device number 24 [ 424.334450][ T1008] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 424.545505][ T1008] usb 4-1: USB disconnect, device number 34 [ 424.545594][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 424.673121][ T198] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 424.834996][ T198] usb 2-1: Using ep0 maxpacket: 8 [ 424.849945][ T198] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.849980][ T198] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.850003][ T198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.850039][ T198] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 424.850063][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.996437][ T198] usb 2-1: config 0 descriptor?? [ 425.473617][ T198] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 425.473694][ T198] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 425.473722][ T198] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 425.473766][ T198] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 425.473795][ T198] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 425.477313][ T198] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 425.520619][ T9319] Config c/1 of g1 needs at least one function. [ 425.651273][ T9319] udc dummy_udc.0: failed to start g1: -22 [ 425.651306][ T9319] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 425.910499][ T9319] UDC core: g1: couldn't find an available UDC or it's busy [ 426.350372][ T198] usb 2-1: USB disconnect, device number 39 [ 426.569243][ T9374] netlink: 'syz.0.1205': attribute type 2 has an invalid length. [ 428.590909][ T36] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 428.790752][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 428.836642][ T36] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 428.836674][ T36] usb 1-1: config 0 has no interface number 0 [ 428.836725][ T36] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 428.836748][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.847028][ T36] usb 1-1: config 0 descriptor?? [ 429.021720][ T36] viperboard 1-1:0.143: version 0.00 found at bus 001 address 037 [ 429.267642][ T36] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 429.267678][ T36] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 429.345208][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.113269][ T5892] usb 1-1: USB disconnect, device number 37 [ 430.475154][ T9489] file system registered [ 431.178147][ T9510] syzkaller0: entered promiscuous mode [ 431.178175][ T9510] syzkaller0: entered allmulticast mode [ 432.929732][ T9578] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 433.280138][ T9600] Mass Storage Function, version: 2009/09/11 [ 433.280203][ T9600] LUN: removable file: (no medium) [ 433.292314][ T5715] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 433.450820][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 433.493337][ T5715] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 433.493370][ T5715] usb 5-1: config 179 has no interface number 0 [ 433.493419][ T5715] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 433.493446][ T5715] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 433.493476][ T5715] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.493503][ T5715] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 433.493532][ T5715] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 433.493584][ T5715] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 433.493608][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.501294][ T9596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.950179][ T5892] usb 5-1: USB disconnect, device number 25 [ 433.950269][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 433.950336][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.016254][ T5715] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 435.627626][ T9670] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 435.685921][ T43] Bluetooth: (null): Invalid header checksum [ 435.734611][ T1481] Bluetooth: (null): Invalid header checksum [ 435.844510][ T1129] Bluetooth: (null): Invalid header checksum [ 435.953823][ T1298] Bluetooth: (null): Invalid header checksum [ 438.291338][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 438.291359][ T37] audit: type=1800 audit(1784900748.174:1201): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1377" name="c_mute_present" dev="configfs" ino=26851 res=0 errno=0 [ 438.540850][ T1129] tipc: Subscription rejected, illegal request [ 439.740775][ T5588] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 439.900822][ T5588] usb 2-1: Using ep0 maxpacket: 8 [ 439.903303][ T5588] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 439.903332][ T5588] usb 2-1: config 0 has no interface number 0 [ 439.903381][ T5588] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 439.903405][ T5588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.974880][ T5588] usb 2-1: config 0 descriptor?? [ 440.151832][ T5588] viperboard 2-1:0.143: version 0.00 found at bus 002 address 040 [ 440.290925][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.496109][ T5588] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 440.496141][ T5588] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 440.683680][ T5588] usb 2-1: USB disconnect, device number 40 [ 442.367080][ T37] audit: type=1800 audit(1784900752.274:1202): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1440" name="c_chmask" dev="configfs" ino=26168 res=0 errno=0 [ 442.406249][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.406694][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.257777][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.344220][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.024842][ T9875] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 444.024878][ T9875] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 445.104078][ T1298] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.119864][ T1298] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.133296][ T1298] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.134729][ T1298] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.310063][ T37] audit: type=1326 audit(1784900755.214:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.0.1496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f175818de99 code=0x0 [ 446.007245][ T5611] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 446.226260][T10051] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 446.609266][ T5611] Bluetooth: hci3: unexpected event for opcode 0x200a [ 447.123878][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 447.123904][T10089] openvswitch: netlink: Flow key attr not present in new flow. [ 448.141325][T10082] batman_adv: batadv0: Adding interface: dummy0 [ 448.141344][T10082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.141377][T10082] batman_adv: batadv0: Interface activated: dummy0 [ 448.223638][T10087] batadv0: mtu less than device minimum [ 448.240419][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.263276][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.289766][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.309208][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.331478][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.357046][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.374847][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.395466][T10087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.844830][T10163] netlink: 'syz.0.1561': attribute type 10 has an invalid length. [ 449.931061][T10165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.010775][ T1008] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 450.054027][T10169] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 450.122558][ T12] Bluetooth: (null): Invalid header checksum [ 450.122650][ T12] Bluetooth: (null): Invalid header checksum [ 450.172152][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.172188][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.172213][ T1008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.172257][ T1008] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.172282][ T1008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.266844][ T1168] Bluetooth: (null): Invalid header checksum [ 450.311786][ T1008] usb 5-1: config 0 descriptor?? [ 450.315145][ T1168] Bluetooth: (null): Invalid header checksum [ 450.755605][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755641][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755666][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755698][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755723][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755749][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755774][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755799][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755825][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.755849][ T1008] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 450.980548][ T1008] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 451.477342][ T36] usb 5-1: USB disconnect, device number 26 [ 453.750856][ T5892] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 453.906004][ T5892] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 453.906038][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.984320][ T5892] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 027 [ 454.826773][ T5892] (null): failure reading functionality [ 455.034641][ T5892] i2c i2c-1: failure reading functionality [ 455.222880][ T5715] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 455.295153][ T5892] i2c i2c-1: connected i2c-tiny-usb device [ 455.338288][ T5892] usb 5-1: USB disconnect, device number 27 [ 455.373957][ T5715] usb 2-1: config index 0 descriptor too short (expected 36, got 18) [ 455.378734][ T5715] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 0.00 [ 455.378767][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.378790][ T5715] usb 2-1: Product: syz [ 455.378806][ T5715] usb 2-1: Manufacturer: syz [ 455.378822][ T5715] usb 2-1: SerialNumber: syz [ 458.035629][ T5715] usb 2-1: USB disconnect, device number 41 [ 459.696167][T10428] NFSD: Failed to start, no listeners configured. [ 460.464515][ T5715] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 460.644226][ T5715] usb 5-1: config 0 has no interfaces? [ 460.644268][ T5715] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 460.644295][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.703842][ T5715] usb 5-1: config 0 descriptor?? [ 461.435531][ T5892] usb 5-1: USB disconnect, device number 28 [ 462.939575][T10610] bridge0: port 4(syz_tun) entered blocking state [ 462.969586][T10610] bridge0: port 4(syz_tun) entered disabled state [ 463.005976][T10610] syz_tun: entered allmulticast mode [ 463.373405][T10610] syz_tun: entered promiscuous mode [ 463.412844][T10610] bridge0: port 4(syz_tun) entered blocking state [ 463.413046][T10610] bridge0: port 4(syz_tun) entered forwarding state [ 463.669027][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.683737][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.057923][T10685] siw: device registration error -23 [ 464.766527][T10719] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 464.775283][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.776363][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.035976][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.036159][T10719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.054991][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.055417][T10719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.090593][T10719] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 465.457517][T10746] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 465.458950][ T43] Bluetooth: (null): Invalid header checksum [ 465.462572][ T43] Bluetooth: (null): Invalid header checksum [ 465.844041][ T5611] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 466.218812][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 466.308697][T10785] syz_tun: entered promiscuous mode [ 466.688084][T10685] infiniband syz1: set active [ 466.688107][T10685] infiniband syz1: added syz_tun [ 466.926485][T10685] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 466.938579][T10685] infiniband syz1: Couldn't open port 1 [ 466.967147][T10685] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 466.967188][T10685] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 466.967231][T10685] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 467.369786][T10829] syzkaller1: entered promiscuous mode [ 467.369816][T10829] syzkaller1: entered allmulticast mode [ 467.828068][T10685] RDS/IB: syz1: added [ 467.848976][T10685] smc: adding ib device syz1 with port count 1 [ 467.849499][T10685] smc: ib device syz1 port 1 has no pnetid [ 468.244826][T10881] syz_tun: entered allmulticast mode [ 468.393236][T10881] syz_tun: left allmulticast mode [ 469.583384][T10943] bridge0: port 3(syz_tun) entered blocking state [ 469.585180][T10943] bridge0: port 3(syz_tun) entered disabled state [ 469.585385][T10943] syz_tun: entered allmulticast mode [ 469.791711][T10943] syz_tun: entered promiscuous mode [ 470.160389][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 470.185463][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.204844][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.578044][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.598777][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.038386][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.080218][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.095032][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.096535][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.098784][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.350818][ T5611] Bluetooth: hci5: command tx timeout [ 477.320364][ T37] audit: type=1804 audit(1784900787.104:1204): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1973" name="/newroot/267/file0" dev="tmpfs" ino=1437 res=1 errno=0 [ 477.342976][ T1298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.432810][ T5611] Bluetooth: hci5: command tx timeout [ 478.625663][ T1298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.633578][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.698981][ T1298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.726845][T11373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.768800][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.397746][ T1298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.510915][ T5611] Bluetooth: hci5: command tx timeout [ 481.022673][T11433] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 481.022702][T11433] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 481.839457][T11489] binder: 11488:11489 ioctl c0306201 2000000002c0 returned -14 [ 482.590866][ T5611] Bluetooth: hci5: command tx timeout [ 482.625674][ T1298] bridge_slave_1: left allmulticast mode [ 482.625936][ T1298] bridge_slave_1: left promiscuous mode [ 482.698056][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.973120][ T1298] bridge_slave_0: left allmulticast mode [ 482.973158][ T1298] bridge_slave_0: left promiscuous mode [ 483.033953][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.942793][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.051526][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.110083][ T1298] bond0 (unregistering): Released all slaves [ 485.542922][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.543617][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.038127][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 486.098429][T11744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.109674][T11744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.351030][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.658714][T11768] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 486.843288][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.843487][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.843863][T11133] bridge_slave_0: entered allmulticast mode [ 486.850315][T11133] bridge_slave_0: entered promiscuous mode [ 486.975418][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.975529][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.975753][T11133] bridge_slave_1: entered allmulticast mode [ 486.978588][T11133] bridge_slave_1: entered promiscuous mode [ 487.009278][T11762] can0: slcan on ttyS3. [ 487.461663][T11768] can0 (unregistered): slcan off ttyS3. [ 488.107168][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.209364][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.788898][T11133] team0: Port device team_slave_0 added [ 489.813414][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 489.818620][T11133] team0: Port device team_slave_1 added [ 490.389019][T11886] syz.1.2106 (11886): drop_caches: 2 [ 490.900184][T11133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.900203][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.900232][T11133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.135894][T11133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.135911][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.135936][T11133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.548611][T12009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.806018][T11133] hsr_slave_0: entered promiscuous mode [ 491.828268][T11133] hsr_slave_1: entered promiscuous mode [ 491.842140][T11133] debugfs: 'hsr0' already exists in 'hsr' [ 491.842175][T11133] Cannot create hsr debugfs directory [ 493.156588][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 493.170551][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.187480][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.015792][T12127] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 494.191228][ T1298] hsr_slave_0: left promiscuous mode [ 494.233538][ T1298] hsr_slave_1: left promiscuous mode [ 494.234848][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.274540][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.367673][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.367701][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.489723][ T1298] veth0_macvtap: left promiscuous mode [ 494.512109][ T1298] veth1_vlan: left promiscuous mode [ 494.512705][ T1298] veth0_vlan: left promiscuous mode [ 494.974998][T12237] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 495.523914][T12251] UDC core: g1: couldn't find an available UDC or it's busy [ 495.552861][T12257] UDC core: g1: couldn't find an available UDC or it's busy [ 495.586371][T12262] UDC core: g1: couldn't find an available UDC or it's busy [ 495.634502][T12251] UDC core: g1: couldn't find an available UDC or it's busy [ 495.774042][T12257] UDC core: g1: couldn't find an available UDC or it's busy [ 495.837119][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.837839][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.869215][T12262] UDC core: g1: couldn't find an available UDC or it's busy [ 495.899601][T12251] UDC core: g1: couldn't find an available UDC or it's busy [ 495.950158][T12277] i2c i2c-0: Failed to register i2c client tps6598x at 0x38 (-16) [ 496.808678][T12327] UDC core: g1: couldn't find an available UDC or it's busy [ 496.865691][T12337] UDC core: g1: couldn't find an available UDC or it's busy [ 496.998204][T12327] UDC core: g1: couldn't find an available UDC or it's busy [ 497.036587][T12342] UDC core: g1: couldn't find an available UDC or it's busy [ 497.063384][T12327] UDC core: g1: couldn't find an available UDC or it's busy [ 497.088023][T12327] UDC core: g1: couldn't find an available UDC or it's busy [ 497.222619][T12337] UDC core: g1: couldn't find an available UDC or it's busy [ 497.739752][T12373] UDC core: g1: couldn't find an available UDC or it's busy [ 498.094268][ T1298] team0 (unregistering): Port device team_slave_1 removed [ 498.241882][ T1298] team0 (unregistering): Port device team_slave_0 removed [ 498.609832][T12418] UDC core: g1: couldn't find an available UDC or it's busy [ 499.039090][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 499.054105][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2198'. [ 499.922126][T12475] UDC core: g1: couldn't find an available UDC or it's busy [ 500.587273][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.587512][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.714329][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.857266][T12467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.902442][T12467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.576470][T12580] UDC core: g1: couldn't find an available UDC or it's busy [ 502.603467][T12583] UDC core: g1: couldn't find an available UDC or it's busy [ 502.752033][T12580] UDC core: g1: couldn't find an available UDC or it's busy [ 502.754006][T12588] UDC core: g1: couldn't find an available UDC or it's busy [ 502.795947][T12580] UDC core: g1: couldn't find an available UDC or it's busy [ 502.817537][T12580] UDC core: g1: couldn't find an available UDC or it's busy [ 502.834128][T12580] UDC core: g1: couldn't find an available UDC or it's busy [ 503.157202][T12611] UDC core: g1: couldn't find an available UDC or it's busy [ 503.548410][T12628] UDC core: g1: couldn't find an available UDC or it's busy [ 503.933271][T12648] UDC core: g1: couldn't find an available UDC or it's busy [ 503.956256][T12648] UDC core: g1: couldn't find an available UDC or it's busy [ 503.978780][T12648] UDC core: g1: couldn't find an available UDC or it's busy [ 504.047010][T12648] UDC core: g1: couldn't find an available UDC or it's busy [ 504.065758][T12660] UDC core: g1: couldn't find an available UDC or it's busy [ 504.074024][T12648] UDC core: g1: couldn't find an available UDC or it's busy [ 504.183765][T12467] syz_tun: left promiscuous mode [ 504.187728][T12660] UDC core: g1: couldn't find an available UDC or it's busy [ 504.233391][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 504.234098][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.235947][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.236027][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.236059][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.620973][T12682] UDC core: g1: couldn't find an available UDC or it's busy [ 505.043238][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 505.476668][T12706] bridge_slave_1: left allmulticast mode [ 505.476707][T12706] bridge_slave_1: left promiscuous mode [ 505.477028][T12706] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.803290][T12706] bridge_slave_0: left allmulticast mode [ 505.803327][T12706] bridge_slave_0: left promiscuous mode [ 505.803609][T12706] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.415228][T12706] bond0: (slave bridge0): Releasing backup interface [ 506.782298][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 506.848012][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 506.860054][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 506.903299][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 506.946781][T12785] UDC core: g1: couldn't find an available UDC or it's busy [ 506.970122][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 507.003579][T12769] UDC core: g1: couldn't find an available UDC or it's busy [ 507.122648][T12798] netlink: 'syz.4.2285': attribute type 10 has an invalid length. [ 507.482495][T12794] syz_tun: left allmulticast mode [ 507.482529][T12794] syz_tun: left promiscuous mode [ 507.482834][T12794] bridge0: port 3(syz_tun) entered disabled state [ 507.673577][T12794] batman_adv: batadv0: Interface deactivated: dummy0 [ 507.673609][T12794] batman_adv: batadv0: Removing interface: dummy0 [ 507.732573][T12794] bridge_slave_0: left allmulticast mode [ 507.732609][T12794] bridge_slave_0: left promiscuous mode [ 507.732893][T12794] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.917374][T12794] bridge_slave_1: left allmulticast mode [ 507.917417][T12794] bridge_slave_1: left promiscuous mode [ 507.917686][T12794] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.040380][T12841] UDC core: g1: couldn't find an available UDC or it's busy [ 508.122674][T12794] bond0: (slave bond_slave_0): Releasing backup interface [ 508.205647][T12794] bond0: (slave bond_slave_1): Releasing backup interface [ 508.281849][T12794] team0: Port device team_slave_0 removed [ 508.323005][T12794] team0: Port device team_slave_1 removed [ 508.323453][T12794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.371872][T12794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.414727][T12794] net_ratelimit: 11 callbacks suppressed [ 508.414818][T12794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.447395][T12798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.453793][T12798] team0: Port device netdevsim1 added [ 508.658447][ T13] Bluetooth: (null): Invalid header checksum [ 508.761206][ T1168] Bluetooth: (null): Invalid header checksum [ 508.772737][T12877] UDC core: g1: couldn't find an available UDC or it's busy [ 508.980299][T12884] UDC core: g1: couldn't find an available UDC or it's busy [ 509.008698][T12886] UDC core: g1: couldn't find an available UDC or it's busy [ 509.031803][T12877] UDC core: g1: couldn't find an available UDC or it's busy [ 509.085526][T12896] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 509.220036][T12884] UDC core: g1: couldn't find an available UDC or it's busy [ 509.337314][T12886] UDC core: g1: couldn't find an available UDC or it's busy [ 509.356368][T12877] UDC core: g1: couldn't find an available UDC or it's busy [ 510.093079][ T1168] Bluetooth: (null): Invalid header checksum [ 510.714647][T12985] UDC core: g1: couldn't find an available UDC or it's busy [ 510.788713][T12983] UDC core: g1: couldn't find an available UDC or it's busy [ 510.812536][T12985] UDC core: g1: couldn't find an available UDC or it's busy [ 510.872378][T12983] UDC core: g1: couldn't find an available UDC or it's busy [ 510.914912][T12985] UDC core: g1: couldn't find an available UDC or it's busy [ 510.945362][T12983] UDC core: g1: couldn't find an available UDC or it's busy [ 510.956516][T12983] UDC core: g1: couldn't find an available UDC or it's busy [ 511.582898][ T1129] Bluetooth: (null): Invalid header checksum [ 511.608179][T13033] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 511.608802][ T49] Bluetooth: (null): Invalid header checksum [ 511.691095][ T147] Bluetooth: (null): Invalid header checksum [ 512.429344][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 512.456883][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 512.486566][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 512.572326][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 512.574292][T13081] UDC core: g1: couldn't find an available UDC or it's busy [ 512.603633][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 512.633504][T13067] UDC core: g1: couldn't find an available UDC or it's busy [ 513.895857][T11133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 514.098596][T11133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.115997][T11133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 514.184176][ T37] audit: type=1326 audit(1784900824.094:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 514.184441][ T37] audit: type=1326 audit(1784900824.094:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 514.253787][ T37] audit: type=1326 audit(1784900824.154:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 514.256938][ T37] audit: type=1326 audit(1784900824.164:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 514.264263][ T37] audit: type=1326 audit(1784900824.174:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0c4cde99 code=0x7ffc0000 [ 514.322161][ T37] audit: type=1326 audit(1784900824.234:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe0c48e6ce code=0x7ffc0000 [ 514.330568][ T37] audit: type=1326 audit(1784900824.234:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe0c48e6ce code=0x7ffc0000 [ 514.349509][ T37] audit: type=1326 audit(1784900824.254:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe0c48e6ce code=0x7ffc0000 [ 514.349668][ T37] audit: type=1326 audit(1784900824.254:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe0c48e6ce code=0x7ffc0000 [ 514.382100][ T37] audit: type=1326 audit(1784900824.274:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe0c48e6ce code=0x7ffc0000 [ 514.486572][T11133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.489283][T11133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 514.751993][T11133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.759435][T11133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.806710][T11133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.190493][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.295708][T13199] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 515.471953][T11133] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.545884][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.546030][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.721455][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.721582][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.865681][T13199] sound umpC3D1: No UMP Group is found in FB [ 518.791247][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.149104][T11133] veth0_vlan: entered promiscuous mode [ 519.325767][T11133] veth1_vlan: entered promiscuous mode [ 519.487914][T11133] veth0_macvtap: entered promiscuous mode [ 519.551239][T11133] veth1_macvtap: entered promiscuous mode [ 519.695937][T11133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.720574][T11133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.909527][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.909854][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.909914][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.909953][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.264716][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.264737][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.866230][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.866254][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.529223][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.570046][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.579879][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.667040][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.669488][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 525.053896][T13511] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ee: 0000 [#1] SMP KASAN PTI [ 525.053993][T13511] KASAN: null-ptr-deref in range [0x0000000000000770-0x0000000000000777] [ 525.054025][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.1.2406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 525.054058][T13511] Tainted: [L]=SOFTLOCKUP [ 525.054067][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.054088][T13511] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 525.054210][T13511] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 93 d6 e7 fa 41 bc 70 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 35 [ 525.054230][T13511] RSP: 0018:ffffc9000721fa30 EFLAGS: 00010206 [ 525.054251][T13511] RAX: 00000000000000ee RBX: ffff88803a858000 RCX: 0000000000080000 [ 525.054268][T13511] RDX: ffffc90004aa9000 RSI: 0000000000033b7c RDI: 0000000000033b7d [ 525.054284][T13511] RBP: dffffc0000000000 R08: ffffffff8faf90f7 R09: 1ffffffff1f5f21e [ 525.054303][T13511] R10: dffffc0000000000 R11: fffffbfff1f5f21f R12: 0000000000000770 [ 525.054319][T13511] R13: dffffc0000000000 R14: ffff88803a858128 R15: dffffc0000000000 [ 525.054338][T13511] FS: 00007f5f75aa66c0(0000) GS:ffff888125d45000(0000) knlGS:0000000000000000 [ 525.054359][T13511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.054374][T13511] CR2: 00007f4e8f2cb580 CR3: 0000000034d24000 CR4: 00000000003526f0 [ 525.054395][T13511] Call Trace: [ 525.054405][T13511] [ 525.054422][T13511] f_midi2_unbind+0x9b/0x340 [ 525.054457][T13511] purge_configs_funcs+0x248/0x3d0 [ 525.054552][T13511] configfs_composite_unbind+0xa0/0x1b0 [ 525.054578][T13511] gadget_unbind_driver+0x1cb/0x410 [ 525.054612][T13511] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 525.054643][T13511] device_release_driver_internal+0x48b/0x880 [ 525.054735][T13511] driver_detach+0x1f3/0x2d0 [ 525.054765][T13511] bus_remove_driver+0x229/0x320 [ 525.054789][T13511] usb_gadget_unregister_driver+0x4e/0x70 [ 525.054819][T13511] config_usb_cfg_unlink+0x84/0x260 [ 525.054876][T13511] ? __pfx_config_usb_cfg_unlink+0x10/0x10 [ 525.054908][T13511] configfs_unlink+0x44f/0x6b0 [ 525.055007][T13511] vfs_unlink+0x27b/0x6e0 [ 525.055043][T13511] filename_unlinkat+0x3d3/0x610 [ 525.055077][T13511] ? __pfx_filename_unlinkat+0x10/0x10 [ 525.055112][T13511] ? do_getname+0x151/0x250 [ 525.055145][T13511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.055170][T13511] __se_sys_unlinkat+0x83/0x1a0 [ 525.055209][T13511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.055232][T13511] do_syscall_64+0x174/0x580 [ 525.055259][T13511] ? trace_irq_disable+0x3b/0x140 [ 525.055295][T13511] ? clear_bhb_loop+0x40/0x90 [ 525.055322][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.055344][T13511] RIP: 0033:0x7f5f7784de99 [ 525.055365][T13511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.055384][T13511] RSP: 002b:00007f5f75aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 525.055407][T13511] RAX: ffffffffffffffda RBX: 00007f5f77ad5fa0 RCX: 00007f5f7784de99 [ 525.055422][T13511] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 525.055438][T13511] RBP: 00007f5f778e3eaf R08: 0000000000000000 R09: 0000000000000000 [ 525.055452][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.055465][T13511] R13: 00007f5f77ad6038 R14: 00007f5f77ad5fa0 R15: 00007fffa4cbff38 [ 525.055492][T13511] [ 525.055508][T13511] Modules linked in: [ 525.055549][T13511] ---[ end trace 0000000000000000 ]--- [ 525.055572][T13511] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 525.055614][T13511] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 93 d6 e7 fa 41 bc 70 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 35 [ 525.055634][T13511] RSP: 0018:ffffc9000721fa30 EFLAGS: 00010206 [ 525.055653][T13511] RAX: 00000000000000ee RBX: ffff88803a858000 RCX: 0000000000080000 [ 525.055673][T13511] RDX: ffffc90004aa9000 RSI: 0000000000033b7c RDI: 0000000000033b7d [ 525.055689][T13511] RBP: dffffc0000000000 R08: ffffffff8faf90f7 R09: 1ffffffff1f5f21e [ 525.055707][T13511] R10: dffffc0000000000 R11: fffffbfff1f5f21f R12: 0000000000000770 [ 525.055724][T13511] R13: dffffc0000000000 R14: ffff88803a858128 R15: dffffc0000000000 [ 525.055742][T13511] FS: 00007f5f75aa66c0(0000) GS:ffff888125d45000(0000) knlGS:0000000000000000 [ 525.055762][T13511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.055778][T13511] CR2: 00007f4e8f2cb580 CR3: 0000000034d24000 CR4: 00000000003526f0 [ 525.055839][T13511] Kernel panic - not syncing: Fatal exception [ 525.056445][T13511] Kernel Offset: disabled