last executing test programs: 6m5.937123315s ago: executing program 0 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000017c0)={0x2, 0x0, @ioapic={0x30000, 0x9, 0x10004, 0xfffffffe, 0xc000, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x7c, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xc, 0x4, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 6m5.775082059s ago: executing program 0 (id=1044): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000001800)=0x1, 0x4) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e20, 0x0, @local, 0x5}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000001880)) 6m5.644211458s ago: executing program 0 (id=1045): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 6m5.310921245s ago: executing program 0 (id=1047): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 6m5.111555168s ago: executing program 0 (id=1053): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 6m5.016819995s ago: executing program 0 (id=1054): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 5m49.896018115s ago: executing program 32 (id=1054): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 5m32.431310331s ago: executing program 2 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x9) 5m32.353762157s ago: executing program 2 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write$P9_RCREATE(r0, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x0, 0x0, 0x8}, 0x5}}, 0x18) 5m32.268791215s ago: executing program 2 (id=1428): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x100000003) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) 5m32.131857011s ago: executing program 2 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dir0\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f00000003c0)='./dir0\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dir0/file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000140)="01b6d2ee7cfc9d3ebe3c39bd4ee3009e014567", 0x13) 5m31.71508602s ago: executing program 2 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e001d46"], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 5m31.564376017s ago: executing program 2 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc_mnt\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/161, 0xfdef}, {0x0, 0x4000}], 0x2) 5m16.500795074s ago: executing program 33 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc_mnt\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/161, 0xfdef}, {0x0, 0x4000}], 0x2) 5m2.381590932s ago: executing program 3 (id=1746): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0xfffffffc, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x3, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x10000, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0x20000000ffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 5m1.963496648s ago: executing program 3 (id=1750): chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m1.52813273s ago: executing program 3 (id=1753): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x48) fallocate(r1, 0x0, 0x4, 0x1000f4) lseek(r0, 0x7, 0x4) 5m1.274689001s ago: executing program 3 (id=1755): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x183001, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000900)={0x30000019}) close(0x3) 5m1.078666012s ago: executing program 3 (id=1758): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') 5m0.984708773s ago: executing program 3 (id=1760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000140)='0\x00', 0x2) 4m45.722707337s ago: executing program 34 (id=1760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000140)='0\x00', 0x2) 31.086122156s ago: executing program 5 (id=4287): renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bc", 0x6, 0xfffffffffffffffe) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe8b, 0x0) 30.656378047s ago: executing program 5 (id=4293): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x7, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000640)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000680)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000006c0)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) 30.306336896s ago: executing program 5 (id=4295): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xe000000000000000) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 27.0078287s ago: executing program 5 (id=4313): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/../file0\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000010980)=""/198, 0xc6) 26.738565697s ago: executing program 5 (id=4316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003440)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 26.158815196s ago: executing program 5 (id=4320): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000540)='-1\x00', 0x3) write$binfmt_format(r0, &(0x7f0000000580)='1\x00', 0x2) 10.995358374s ago: executing program 35 (id=4320): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000540)='-1\x00', 0x3) write$binfmt_format(r0, &(0x7f0000000580)='1\x00', 0x2) 2.402536001s ago: executing program 6 (id=4464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r1, 0xf3, &(0x7f00000003c0)=[&(0x7f0000000400)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000440)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x5, &(0x7f0000006840)=0x272) 1.980272167s ago: executing program 4 (id=4466): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.907898468s ago: executing program 1 (id=4467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x9200}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00\r\x00', 0x9f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x58, 0xfffe, 0x3, 0x7fffffff, [{0x4, 0x11, "526e623a846567c649ddc696d4e88e821e3b04a12bb6adfdf10a383662f777f347729494e78738fd008c3a14e903c3992fa8efd1214ba74221b26c2e8a691289feeb0dafdecc2005e2bbfb1670af9bc65947301d229d5a5363035b0235b5de656910426e31a5a6df1490fe046b35fc337d5db64517ce45e694d70cae5c781f84d59941b18168dca5171798"}, {0x3}]}}}}}}}, 0xd9) 1.692037864s ago: executing program 4 (id=4468): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000400000000000000fc00000000000000000000000000000100"/56, @ANYBLOB="00000000000000000100000000000000030000000000000000000000000000000000000000000000000000000000000009"], 0xb8}}, 0x4000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.630170093s ago: executing program 6 (id=4469): prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0", 0x18, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1.502432545s ago: executing program 1 (id=4470): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.471544588s ago: executing program 4 (id=4471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0060000180c2000002aaaabcaaaa2086dd694fd2cd001011fffc000000000000000000000000000001ff0200000000000000000000000000018b0090780006"], 0x4a) 1.386590819s ago: executing program 6 (id=4472): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) 1.215544389s ago: executing program 1 (id=4473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000000100)={r1, 0x1}, 0x8) 1.091155124s ago: executing program 6 (id=4474): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/net/ipv4/ping_group_range\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000ac0)=[{&(0x7f0000001080)="d2", 0x1}], 0x1, 0x80, 0x2) 935.203504ms ago: executing program 4 (id=4475): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 862.40437ms ago: executing program 1 (id=4476): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x1, 0x0, 0x84000, 0x0, 0x0, @by_dev={r2}, [@multipath={0x0, 0x2820, 0x0, 0xb0, 'multipath\x00', {'2 queue_mode rq', 0x20, '1 rdac', 0x20, 0x1, 0x20, 0x1, [{0x20, 'queue-length 0', 0x20, 0x1, 0x20, '1', [{0x20, @ram_num={'1:', 0x0}, ' 1000 100'}]}]}}]}) 686.05071ms ago: executing program 6 (id=4477): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x8002) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r1, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 439.316266ms ago: executing program 4 (id=4478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 313.840253ms ago: executing program 1 (id=4479): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x32, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) 204.283023ms ago: executing program 6 (id=4480): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="3995", 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) 95.156273ms ago: executing program 4 (id=4481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 1 (id=4482): unshare(0x28000600) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): ltsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.136557][ T5792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.170052][ T5792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.170090][ T5792] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.170110][ T5792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.347744][ T5792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.348635][ T5792] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.348657][ T5792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.422200][ T5792] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 414.422224][ T5792] usb 2-1: Product: syz [ 414.422235][ T5792] usb 2-1: Manufacturer: syz [ 414.422246][ T5792] usb 2-1: SerialNumber: syz [ 414.463799][ T33] audit: type=1800 audit(1793722334.051:2301): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199034 res=0 errno=-22 [ 414.465678][ T5792] usb 2-1: config 0 descriptor?? [ 414.510496][ T33] audit: type=1800 audit(1793722334.101:2302): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199066 res=0 errno=-22 [ 414.517633][ T33] audit: type=1800 audit(1793722334.101:2303): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199041 res=0 errno=-22 [ 414.566831][ T33] audit: type=1800 audit(1793722334.151:2304): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199042 res=0 errno=-22 [ 414.594589][ T5792] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 414.620244][ T33] audit: type=1800 audit(1793722334.211:2305): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=199063 res=0 errno=-22 [ 414.626752][ T5730] usb 7-1: 2:1 : can't get Cluster Descriptor [ 414.932404][ T5730] usb 7-1: USB disconnect, device number 20 [ 415.174955][T12605] udevd[12605]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.744121][ T5730] usb 2-1: USB disconnect, device number 39 [ 416.746573][ T5730] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 421.075825][ T5787] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 421.275346][ T5787] usb 5-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.00 [ 421.277490][ T5787] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.277544][ T5787] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.277563][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 421.277587][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.330707][ T5787] usb 5-1: config 0 descriptor?? [ 421.335830][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 421.335844][ T33] audit: type=1800 audit(1793722340.921:2317): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199269 res=0 errno=-22 [ 421.337927][ T33] audit: type=1800 audit(1793722340.921:2318): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199298 res=0 errno=-22 [ 421.402153][ T33] audit: type=1800 audit(1793722340.991:2319): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199276 res=0 errno=-22 [ 421.404995][ T33] audit: type=1800 audit(1793722340.991:2320): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199277 res=0 errno=-22 [ 421.405036][ T33] audit: type=1800 audit(1793722340.991:2321): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=199278 res=0 errno=-22 [ 421.893306][ T33] audit: type=1800 audit(1793722341.481:2322): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199327 res=0 errno=-22 [ 421.996462][ T5787] usbhid 5-1:0.0: can't add hid device: -71 [ 421.996545][ T5787] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 422.029193][ T5787] usb 5-1: USB disconnect, device number 27 [ 422.395101][T13862] Zero length message leads to an empty skb [ 422.600856][T13865] kernel read not supported for file bus/pci/00/00.0 (pid: 13865 comm: syz.1.3530) [ 422.601015][ T33] audit: type=1800 audit(1793722342.191:2323): pid=13865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3530" name="00.0" dev="proc" ino=4026532203 res=0 errno=-22 [ 422.890283][T13868] MTRR 3 not used [ 423.724591][T13887] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 423.932514][T13706] Set syz1 is full, maxelem 65536 reached [ 424.217974][ T5730] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 424.273331][ T33] audit: type=1800 audit(1793722343.861:2324): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3547" name="rescan" dev="sysfs" ino=2659 res=0 errno=-13 [ 424.380824][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 424.385027][ T5730] usb 2-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 424.411280][ T5730] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.411301][ T5730] usb 2-1: config 0 has no interface number 0 [ 424.439013][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.439034][ T5730] usb 2-1: Product: syz [ 424.439045][ T5730] usb 2-1: Manufacturer: syz [ 424.439055][ T5730] usb 2-1: SerialNumber: syz [ 424.461737][ T5730] usb 2-1: config 0 descriptor?? [ 424.490518][ T33] audit: type=1800 audit(1793722344.081:2325): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199394 res=0 errno=-22 [ 424.520421][ T33] audit: type=1800 audit(1793722344.111:2326): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199426 res=0 errno=-22 [ 424.569978][ T5730] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 425.083950][T13914] program syz.4.3554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.117924][ T996] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 425.279983][ T996] usb 6-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 425.281144][ T996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.281174][ T996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.281246][ T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.288492][ T996] usb 6-1: config 0 descriptor?? [ 425.354308][ T5730] gspca_spca1528: reg_w err -71 [ 425.367985][ T5730] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 425.381881][ T5730] usb 2-1: USB disconnect, device number 40 [ 425.807140][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807173][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807193][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807211][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807229][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807248][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807266][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807284][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807302][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.807320][ T996] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 425.891365][ T996] asus 0003:0B05:1ABE.001D: unexpected long global item [ 425.891925][ T996] asus 0003:0B05:1ABE.001D: Asus hid parse failed: -22 [ 425.892078][ T996] asus 0003:0B05:1ABE.001D: probe with driver asus failed with error -22 [ 425.896033][T13927] ima: rule for LSM 'u' is undefined [ 425.896253][T13925] ima: policy update completed [ 426.082256][ T996] usb 6-1: USB disconnect, device number 21 [ 426.183511][T13930] netlink: 'syz.4.3561': attribute type 27 has an invalid length. [ 426.238749][T13933] sd 0:0:1:0: PR command failed: 1026 [ 426.238786][T13933] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 426.238817][T13933] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 426.376069][ T33] kauditd_printk_skb: 17 callbacks suppressed [ 426.376095][ T33] audit: type=1800 audit(1793722345.961:2344): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36339 res=0 errno=-22 [ 426.833646][T13947] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.833847][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.834090][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.834244][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.834390][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.834530][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.834681][T13943] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 426.836176][T13945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.903569][ T33] audit: type=1800 audit(1793722346.491:2345): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199624 res=0 errno=-22 [ 427.156981][ T33] audit: type=1800 audit(1793722346.741:2346): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36905 res=0 errno=-22 [ 427.202350][ T33] audit: type=1800 audit(1793722346.791:2347): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189454 res=0 errno=-22 [ 427.360023][T13953] device-mapper: table: 248:3: flakey: Device lookup failed (-ENOENT) [ 427.360043][T13953] device-mapper: ioctl: error adding target to table [ 427.496335][ T33] audit: type=1800 audit(1793722347.081:2348): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3573" name="attach" dev="sysfs" ino=33009 res=0 errno=-13 [ 427.995983][T13971] netlink: 'syz.4.3578': attribute type 9 has an invalid length. [ 429.008252][ T5787] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 429.166406][ T5787] usb 2-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 429.178943][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.178964][ T5787] usb 2-1: config 0 has no interfaces? [ 429.203761][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.203783][ T5787] usb 2-1: Product: syz [ 429.203798][ T5787] usb 2-1: Manufacturer: syz [ 429.203809][ T5787] usb 2-1: SerialNumber: syz [ 429.236416][ T5787] usb 2-1: config 0 descriptor?? [ 429.244777][ T33] audit: type=1800 audit(1793722348.831:2349): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199651 res=0 errno=-22 [ 429.277476][ T33] audit: type=1800 audit(1793722348.861:2350): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199683 res=0 errno=-22 [ 429.306728][ T33] audit: type=1800 audit(1793722348.891:2351): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199658 res=0 errno=-22 [ 429.330784][ T33] audit: type=1800 audit(1793722348.921:2352): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199659 res=0 errno=-22 [ 429.363030][ T33] audit: type=1800 audit(1793722348.951:2353): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=199680 res=0 errno=-22 [ 429.552039][ T996] usb 2-1: USB disconnect, device number 41 [ 429.664243][T14005] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3593'. [ 430.088626][ T996] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 430.246221][ T996] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 430.260536][ T996] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.260562][ T996] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 430.260581][ T996] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.260597][ T996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.279890][ T996] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 430.279912][ T996] usb 5-1: Product: syz [ 430.279922][ T996] usb 5-1: Manufacturer: syz [ 430.279933][ T996] usb 5-1: SerialNumber: syz [ 430.342136][ T996] usb 5-1: config 0 descriptor?? [ 430.381580][ T996] usb 5-1: selecting invalid altsetting 0 [ 430.388014][ T8033] Bluetooth: hci5: command 0x0c1a tx timeout [ 430.666863][ T996] usb 5-1: USB disconnect, device number 28 [ 430.728404][T14023] io-wq is not configured for unbound workers [ 431.000429][T14029] tmpfs: Too few inodes for current use [ 431.191531][T14032] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3606'. [ 432.242092][ T33] kauditd_printk_skb: 20 callbacks suppressed [ 432.242108][ T33] audit: type=1800 audit(1793722351.831:2374): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3619" name="nr_requests" dev="sysfs" ino=21254 res=0 errno=-22 [ 432.338414][ T8818] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 432.489807][ T8818] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 432.490982][ T8818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.520684][ T8818] usb 2-1: config 0 descriptor?? [ 432.521667][ T33] audit: type=1800 audit(1793722352.111:2375): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199949 res=0 errno=-22 [ 432.562228][ T33] audit: type=1800 audit(1793722352.151:2376): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199978 res=0 errno=-22 [ 432.591066][ T33] audit: type=1800 audit(1793722352.181:2377): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199956 res=0 errno=-22 [ 432.617299][ T33] audit: type=1800 audit(1793722352.201:2378): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199957 res=0 errno=-22 [ 432.643985][ T33] audit: type=1800 audit(1793722352.231:2379): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=199958 res=0 errno=-22 [ 432.689662][ T33] audit: type=1800 audit(1793722352.281:2380): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199998 res=0 errno=-22 [ 432.753588][ T8818] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 433.018387][ T33] audit: type=1800 audit(1793722352.611:2381): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200015 res=0 errno=-22 [ 433.125778][ T33] audit: type=1800 audit(1793722352.711:2382): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200029 res=0 errno=-22 [ 433.262960][ T8818] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 433.262982][ T8818] [drm] Initialized udl on minor 1 [ 433.389060][ T8818] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 433.445078][ T8818] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 433.532176][ T33] audit: type=1800 audit(1793722353.121:2383): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3629" name="new_array" dev="sysfs" ino=62082 res=0 errno=-13 [ 433.587966][ T8818] usb 2-1: USB disconnect, device number 42 [ 433.818703][T14087] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3631'. [ 434.396584][T14099] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 434.751619][T14108] blkio.reset_stats is deprecated [ 434.831786][T14112] phram: illegal start address [ 435.305094][ T996] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 435.305410][ T996] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 435.305707][ T996] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 435.306013][ T996] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 435.306026][ T996] rtc rtc0: __rtc_set_alarm: err=-22 [ 435.324408][ T5787] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 435.478103][ T5787] usb 6-1: Using ep0 maxpacket: 8 [ 435.479429][ T5787] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 435.480296][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.480329][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.482383][ T5787] usb 6-1: config 0 descriptor?? [ 435.714817][ T5787] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 436.170938][T14134] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 436.174040][ T996] usb 6-1: USB disconnect, device number 22 [ 436.310521][T14136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.313967][T14136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 436.314088][T14136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.347604][T14136] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 436.635848][T14144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.478841][ T996] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 437.565874][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 437.628092][ T996] usb 6-1: Using ep0 maxpacket: 32 [ 437.629857][ T996] usb 6-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 437.630713][ T996] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 437.630731][ T996] usb 6-1: config 0 has no interface number 0 [ 437.630760][ T996] usb 6-1: config 0 interface 184 has no altsetting 0 [ 437.632637][ T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.632655][ T996] usb 6-1: Product: syz [ 437.632665][ T996] usb 6-1: Manufacturer: syz [ 437.632676][ T996] usb 6-1: SerialNumber: syz [ 437.671018][ T996] usb 6-1: config 0 descriptor?? [ 437.700929][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 437.700943][ T33] audit: type=1800 audit(1793722357.291:2398): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200193 res=0 errno=-22 [ 437.761910][ T33] audit: type=1800 audit(1793722357.351:2399): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=200225 res=0 errno=-22 [ 437.762836][ T33] audit: type=1800 audit(1793722357.351:2400): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=200200 res=0 errno=-22 [ 437.813154][ T33] audit: type=1800 audit(1793722357.401:2401): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=200201 res=0 errno=-22 [ 438.326892][ T996] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 438.326917][ T996] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 438.326931][ T996] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 438.327127][ T996] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 438.376713][ T8818] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 438.388029][ T5639] Bluetooth: hci5: command 0x0c1a tx timeout [ 438.388058][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.388078][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout [ 438.388098][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 438.392557][ T33] audit: type=1800 audit(1793722357.981:2402): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=200222 res=0 errno=-22 [ 438.393414][ T33] audit: type=1800 audit(1793722357.981:2403): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=200223 res=0 errno=-22 [ 438.395214][ T996] usb 6-1: USB disconnect, device number 23 [ 438.505160][ T33] audit: type=1800 audit(1793722358.091:2404): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=200202 res=0 errno=-22 [ 438.537007][ T33] audit: type=1800 audit(1793722358.121:2405): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=200224 res=0 errno=-22 [ 438.580059][ T8818] usb 2-1: Using ep0 maxpacket: 16 [ 438.586303][ T8818] usb 2-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 438.604908][ T8818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.604950][ T8818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.633935][ T8818] usb 2-1: config 0 descriptor?? [ 438.648165][ T33] audit: type=1800 audit(1793722358.241:2406): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200321 res=0 errno=-22 [ 438.690064][ T33] audit: type=1800 audit(1793722358.281:2407): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=200350 res=0 errno=-22 [ 438.734058][ T8818] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input71 [ 438.966533][ T4991] bcm5974 2-1:0.0: could not read from device [ 439.003839][ T8818] usb 2-1: USB disconnect, device number 43 [ 439.019996][ T4991] bcm5974 2-1:0.0: could not read from device [ 439.056204][ T4991] bcm5974 2-1:0.0: could not read from device [ 439.702757][T14201] tipc: Started in network mode [ 439.702782][T14201] tipc: Node identity ac14140f, cluster identity 4711 [ 439.703821][T14201] tipc: New replicast peer: 255.255.255.255 [ 439.737656][T14201] tipc: Enabled bearer , priority 10 [ 439.840812][ T5730] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 439.988693][ T5730] usb 5-1: Using ep0 maxpacket: 16 [ 439.991822][ T5730] usb 5-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 439.994870][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 439.994906][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.038363][ T5730] usb 5-1: config 0 descriptor?? [ 440.040302][T14197] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.310833][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.491010][ T5730] hid (null): nested delimiters [ 440.543297][ T5730] hid_parser_main: 173 callbacks suppressed [ 440.543317][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543340][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543359][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543378][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543397][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543416][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543435][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543454][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543472][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543491][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 440.543888][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: nested delimiters [ 440.543899][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: item 0 2 2 10 parsing failed [ 440.630422][ T5730] aquacomputer_d5next 0003:0C70:F00D.001E: probe with driver aquacomputer_d5next failed with error -22 [ 440.721342][ T5730] usb 5-1: USB disconnect, device number 29 [ 440.821824][ T8818] tipc: Node number set to 2886997007 [ 441.522330][T14242] sg_write: data in/out 344028/136 bytes for SCSI command 0x0-- guessing data in; [ 441.522330][T14242] program syz.6.3701 not setting count and/or reply_len properly [ 441.852885][T14249] Falling back ldisc for ttyS3. [ 444.274643][ T33] kauditd_printk_skb: 27 callbacks suppressed [ 444.274658][ T33] audit: type=1800 audit(1793722363.861:2435): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3733" name="soft" dev="sysfs" ino=21460 res=0 errno=-22 [ 444.703097][ T33] audit: type=1800 audit(1793722364.291:2436): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200692 res=0 errno=-22 [ 445.715833][ T33] audit: type=1800 audit(1793722365.301:2437): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3749" name="xps_cpus" dev="sysfs" ino=165202 res=0 errno=-22 [ 445.931228][T14355] size and base must be multiples of 4 kiB [ 445.931263][T14355] CPU: 0 UID: 0 PID: 14355 Comm: syz.4.3751 Tainted: G S L syzkaller #0 PREEMPT(full) [ 445.931288][T14355] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 445.931295][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 445.931308][T14355] Call Trace: [ 445.931332][T14355] [ 445.931399][T14355] dump_stack_lvl+0xe8/0x150 [ 445.931488][T14355] mtrr_del+0xc8/0xf0 [ 445.931516][T14355] mtrr_ioctl+0xcb8/0x13b0 [ 445.931545][T14355] ? __pfx_mtrr_ioctl+0x10/0x10 [ 445.931599][T14355] ? __fget_files+0x2a/0x420 [ 445.931657][T14355] ? __fget_files+0x2a/0x420 [ 445.931677][T14355] ? __pfx_mtrr_ioctl+0x10/0x10 [ 445.931703][T14355] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 445.931752][T14355] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 445.931771][T14355] __se_sys_ioctl+0xfc/0x170 [ 445.931814][T14355] do_syscall_64+0x166/0x520 [ 445.931897][T14355] ? trace_irq_disable+0x3b/0x140 [ 445.931932][T14355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.931962][T14355] ? clear_bhb_loop+0x70/0xc0 [ 445.931982][T14355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.932007][T14355] RIP: 0033:0x7f1b4099fb19 [ 445.932052][T14355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.932071][T14355] RSP: 002b:00007f1b41853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.932111][T14355] RAX: ffffffffffffffda RBX: 00007f1b40c25fa0 RCX: 00007f1b4099fb19 [ 445.932122][T14355] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 445.932133][T14355] RBP: 00007f1b40a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 445.932143][T14355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.932152][T14355] R13: 00007f1b40c26038 R14: 00007f1b40c25fa0 R15: 00007ffd473a4928 [ 445.932177][T14355] [ 446.444679][ T33] audit: type=1800 audit(1793722366.031:2438): pid=14365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3756" name="pm_trace" dev="sysfs" ino=1409 res=0 errno=-22 [ 446.968721][T14378] kAFS: bad VL server IP address [ 447.627470][T14391] cramfs: checking physical address 0x000000002a1e0000 for linear cramfs image [ 447.644027][T14391] cramfs: wrong magic [ 447.784485][T14391] cramfs: wrong magic [ 448.485298][T14414] vxcan0: tx address claim with dest, not broadcast [ 448.750829][ T33] audit: type=1800 audit(1793722368.341:2439): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3782" name="add_remote_port" dev="sysfs" ino=21908 res=0 errno=-13 [ 449.274287][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3788'. [ 449.542119][ T33] audit: type=1400 audit(1793722369.131:2440): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=14440 comm="syz.5.3790" name="//o" offset=35 [ 450.327905][ T8818] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 450.477920][ T8818] usb 6-1: Using ep0 maxpacket: 16 [ 450.479668][ T8818] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 450.485198][ T8818] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.485234][ T8818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.485254][ T8818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.485269][ T8818] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 450.485286][ T8818] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.514691][ T8818] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.514711][ T8818] usb 6-1: Manufacturer: syz [ 450.587157][ T8818] usb 6-1: config 0 descriptor?? [ 450.608423][ T33] audit: type=1800 audit(1793722370.201:2441): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200719 res=0 errno=-22 [ 450.643474][ T33] audit: type=1800 audit(1793722370.231:2442): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=200749 res=0 errno=-22 [ 450.675867][ T33] audit: type=1800 audit(1793722370.261:2443): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=200726 res=0 errno=-22 [ 450.708121][ T33] audit: type=1800 audit(1793722370.301:2444): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=200727 res=0 errno=-22 [ 450.863220][T14466] sctp: [Deprecated]: syz.4.3801 (pid 14466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.863220][T14466] Use struct sctp_sack_info instead [ 451.039800][ T8818] rc_core: IR keymap rc-hauppauge not found [ 451.039816][ T8818] Registered IR keymap rc-empty [ 451.040236][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.070589][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.089211][ T8818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 451.111127][ T8818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input72 [ 451.140684][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.158243][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.178265][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.198178][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.222573][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.239836][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.259552][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.278065][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.297912][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.318128][ T8818] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 451.319462][ T33] audit: type=1800 audit(1793722370.911:2445): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36339 res=0 errno=-22 [ 451.371108][ T8818] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 451.371128][ T8818] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 451.410117][ T33] audit: type=1800 audit(1793722371.001:2446): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=200748 res=0 errno=-22 [ 451.411162][ T33] audit: type=1800 audit(1793722371.001:2447): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=200728 res=0 errno=-22 [ 451.520346][ T33] audit: type=1800 audit(1793722371.111:2448): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200769 res=0 errno=-22 [ 451.570355][ T33] audit: type=1800 audit(1793722371.161:2449): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200788 res=0 errno=-22 [ 451.604842][ T8818] usb 6-1: USB disconnect, device number 24 [ 451.884933][T14483] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3808'. [ 452.145100][T14488] loop6: detected capacity change from 0 to 524288000 [ 452.228301][T14488] loop6: detected capacity change from 524288000 to 1 [ 452.273045][T14488] Dev loop6: unable to read RDB block 1 [ 452.273083][T14488] loop6: unable to read partition table [ 452.273230][T14488] loop6: partition table beyond EOD, truncated [ 452.273243][T14488] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 452.917997][ T8818] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 453.069127][ T8818] usb 2-1: Using ep0 maxpacket: 8 [ 453.073061][ T8818] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.097223][ T8818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.097262][ T8818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.137290][ T8818] usb 2-1: config 0 descriptor?? [ 453.417243][ T8818] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 453.682731][ T5787] usb 2-1: USB disconnect, device number 44 [ 455.575189][T14560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3842'. [ 456.014784][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 456.014799][ T33] audit: type=1800 audit(1793722375.601:2465): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36339 res=0 errno=-22 [ 456.210913][ T33] audit: type=1800 audit(1793722375.801:2466): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3845" name="offline" dev="sysfs" ino=1311 res=0 errno=-22 [ 456.284117][T14571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.284185][T14571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.674256][T14577] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 456.905759][ T33] audit: type=1800 audit(1793722376.491:2467): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36905 res=0 errno=-22 [ 456.907215][ T33] audit: type=1800 audit(1793722376.491:2468): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189454 res=0 errno=-22 [ 457.183888][T14586] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 457.538806][ T33] audit: type=1800 audit(1793722377.131:2469): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3858" name="pm_test" dev="sysfs" ino=1415 res=0 errno=-22 [ 457.608786][T14595] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3857'. [ 458.473359][ T33] audit: type=1400 audit(1793722378.061:2470): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=14610 comm="syz.1.3866" name="foo" offset=35 [ 458.692778][ T33] audit: type=1800 audit(1793722378.281:2471): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3870" name="drvctl" dev="sysfs" ino=41955 res=0 errno=-13 [ 460.086710][ T33] audit: type=1800 audit(1793722379.671:2472): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3881" name="rescan" dev="sysfs" ino=1652 res=0 errno=-13 [ 460.959834][ T33] audit: type=1800 audit(1793722380.541:2473): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3890" name="rx_trig_bytes" dev="sysfs" ino=12318 res=0 errno=-22 [ 461.410125][ T33] audit: type=1800 audit(1793722381.001:2474): pid=14675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3894" name="discard_max_bytes" dev="sysfs" ino=13259 res=0 errno=-22 [ 461.927218][ T33] audit: type=1800 audit(1793722381.511:2475): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15971 res=0 errno=-22 [ 462.153898][ T33] audit: type=1326 audit(1793722381.741:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.5.3901" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f600319fb19 code=0x0 [ 462.847896][ T8818] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 463.002802][ T8818] usb 5-1: New USB device found: idVendor=1b1c, idProduct=0a55, bcdDevice=0.00 [ 463.003831][ T8818] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.003854][ T8818] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.003874][ T8818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 463.003899][ T8818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.066554][ T8818] usb 5-1: config 0 descriptor?? [ 463.081546][ T33] audit: type=1800 audit(1793722382.671:2477): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201064 res=0 errno=-22 [ 463.115414][ T33] audit: type=1800 audit(1793722382.701:2478): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201093 res=0 errno=-22 [ 463.147355][ T33] audit: type=1800 audit(1793722382.731:2479): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201071 res=0 errno=-22 [ 463.175707][ T33] audit: type=1800 audit(1793722382.761:2480): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201072 res=0 errno=-22 [ 463.176831][ T33] audit: type=1800 audit(1793722382.761:2481): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=201073 res=0 errno=-22 [ 463.244107][ T33] audit: type=1800 audit(1793722382.831:2482): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201113 res=0 errno=-22 [ 463.539694][ T8818] hid-corsair-void 0003:1B1C:0A55.001F: collection stack underflow [ 463.539720][ T8818] hid-corsair-void 0003:1B1C:0A55.001F: item 0 4 0 12 parsing failed [ 463.542320][ T33] audit: type=1800 audit(1793722383.131:2483): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201131 res=0 errno=-22 [ 463.546303][ T8818] hid-corsair-void 0003:1B1C:0A55.001F: parse failed (reason: -22) [ 463.546383][ T8818] hid-corsair-void 0003:1B1C:0A55.001F: probe with driver hid-corsair-void failed with error -22 [ 463.786081][ T5792] usb 5-1: USB disconnect, device number 30 [ 464.855640][T14736] phram: not enough arguments [ 465.222910][T14746] device-mapper: ioctl: device name cannot contain '/' [ 465.662097][T14760] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 466.702670][T14789] netlink: 'syz.6.3949': attribute type 3 has an invalid length. [ 466.985243][T14793] base or size exceeds the MTRR width [ 468.579500][T14828] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 468.579658][T14828] overlayfs: overlapping lowerdir path [ 468.891815][T14834] GUP no longer grows the stack in syz.6.3969 (14834): 200000001000-200000c01000 (200000000040) [ 468.891848][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.6.3969 Tainted: G S L syzkaller #0 PREEMPT(full) [ 468.891872][T14834] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 468.891879][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 468.891888][T14834] Call Trace: [ 468.891894][T14834] [ 468.891902][T14834] dump_stack_lvl+0xe8/0x150 [ 468.891932][T14834] fixup_user_fault+0x637/0x6f0 [ 468.892042][T14834] fault_in_user_writeable+0x71/0xd0 [ 468.892075][T14834] futex_lock_pi+0x7b3/0xab0 [ 468.892107][T14834] ? __pfx_futex_lock_pi+0x10/0x10 [ 468.892146][T14834] ? __pfx_futex_wake_mark+0x10/0x10 [ 468.892183][T14834] do_futex+0x330/0x4e0 [ 468.892212][T14834] ? __pfx_do_futex+0x10/0x10 [ 468.892243][T14834] __se_sys_futex+0x3a8/0x450 [ 468.892274][T14834] ? __pfx___se_sys_futex+0x10/0x10 [ 468.892298][T14834] ? rcu_is_watching+0x16/0xb0 [ 468.892331][T14834] ? __x64_sys_futex+0x21/0xf0 [ 468.892358][T14834] do_syscall_64+0x166/0x520 [ 468.892379][T14834] ? trace_irq_disable+0x3b/0x140 [ 468.892400][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.892424][T14834] ? clear_bhb_loop+0x70/0xc0 [ 468.892445][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.892463][T14834] RIP: 0033:0x7f698859fb19 [ 468.892477][T14834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.892491][T14834] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.892508][T14834] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 468.892520][T14834] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000040 [ 468.892530][T14834] RBP: 00007f6988637b70 R08: 0000200000000040 R09: 00000000fffffffc [ 468.892547][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.892557][T14834] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 468.892583][T14834] [ 469.879266][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 469.879281][ T33] audit: type=1800 audit(1793722389.471:2489): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201280 res=0 errno=-22 [ 469.895190][ T33] audit: type=1800 audit(1793722389.481:2490): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201295 res=0 errno=-22 [ 470.232440][T14864] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3983'. [ 471.471088][ T33] audit: type=1400 audit(1793722391.061:2491): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=14890 comm="syz.4.3996" [ 471.921383][ T33] audit: type=1800 audit(1793722391.501:2492): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4001" name="group_addr" dev="sysfs" ino=179969 res=0 errno=-22 [ 472.085782][ T33] audit: type=1800 audit(1793722391.671:2493): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4002" name="new_array" dev="sysfs" ino=62082 res=0 errno=-13 [ 472.908907][ T5792] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 473.063468][ T5792] usb 7-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=1.00 [ 473.064450][ T5792] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.064486][ T5792] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 473.102858][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.102878][ T5792] usb 7-1: Product: syz [ 473.102889][ T5792] usb 7-1: Manufacturer: syz [ 473.102899][ T5792] usb 7-1: SerialNumber: syz [ 473.136797][ T33] audit: type=1800 audit(1793722392.721:2494): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201392 res=0 errno=-22 [ 473.175081][ T33] audit: type=1800 audit(1793722392.761:2495): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201424 res=0 errno=-22 [ 473.176123][ T5792] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 473.176191][ T5792] usb 7-1: setting power ON [ 473.222511][ T33] audit: type=1800 audit(1793722392.811:2496): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201399 res=0 errno=-22 [ 473.223276][ T33] audit: type=1800 audit(1793722392.811:2497): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201400 res=0 errno=-22 [ 473.379168][ T5792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.382927][ T5792] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 473.382970][ T5792] usb 7-1: media controller created [ 473.470158][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.553340][ T5792] usb 7-1: selecting invalid altsetting 6 [ 473.553362][ T5792] usb 7-1: digital interface selection failed (-22) [ 473.553374][ T5792] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 473.580619][ T5792] usb 7-1: setting power OFF [ 473.625174][ T5792] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 473.625197][ T5792] (NULL device *): no alternate interface [ 473.751308][ T5792] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 473.783231][ T33] audit: type=1800 audit(1793722393.371:2498): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=201421 res=0 errno=-22 [ 473.950075][T14940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4019'. [ 473.954579][T14940] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4019'. [ 474.338903][T14950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.595290][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4027'. [ 474.595314][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4027'. [ 474.841803][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 475.257608][ T33] kauditd_printk_skb: 6 callbacks suppressed [ 475.257624][ T33] audit: type=1800 audit(1793722394.841:2505): pid=14974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4035" name="unbind_device" dev="sysfs" ino=5029 res=0 errno=-13 [ 475.627959][ T5787] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 475.687940][ T996] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 475.742215][ T5792] usb 7-1: USB disconnect, device number 21 [ 475.788055][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 475.795210][ T5787] usb 2-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 475.814113][ T5787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.814134][ T5787] usb 2-1: config 0 has no interface number 0 [ 475.814164][ T5787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.814182][ T5787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.814211][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.871418][ T996] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 475.872297][ T5787] usb 2-1: config 0 descriptor?? [ 475.895692][ T33] audit: type=1800 audit(1793722395.481:2506): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201600 res=0 errno=-22 [ 475.928889][ T996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 475.928917][ T996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.928954][ T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.963489][ T996] usb 6-1: config 0 descriptor?? [ 475.986253][ T33] audit: type=1800 audit(1793722395.571:2507): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201629 res=0 errno=-22 [ 475.986294][ T33] audit: type=1800 audit(1793722395.571:2508): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201607 res=0 errno=-22 [ 476.011028][ T33] audit: type=1800 audit(1793722395.601:2509): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201663 res=0 errno=-22 [ 476.066407][ T33] audit: type=1800 audit(1793722395.651:2510): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201608 res=0 errno=-22 [ 476.066448][ T33] audit: type=1800 audit(1793722395.651:2511): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=201609 res=0 errno=-22 [ 476.090653][ T33] audit: type=1800 audit(1793722395.681:2512): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201692 res=0 errno=-22 [ 476.146636][ T33] audit: type=1800 audit(1793722395.731:2513): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201670 res=0 errno=-22 [ 476.186195][ T33] audit: type=1800 audit(1793722395.771:2514): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201671 res=0 errno=-22 [ 476.501217][ T996] hid_parser_main: 51 callbacks suppressed [ 476.501238][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501278][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501298][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501317][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501335][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501353][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501385][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501420][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501439][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.501458][ T996] kovaplus 0003:1E7D:2D50.0021: unknown main item tag 0x0 [ 476.507678][ T996] kovaplus 0003:1E7D:2D50.0021: item fetching failed at offset 127/235 [ 476.577203][ T996] kovaplus 0003:1E7D:2D50.0021: parse failed [ 476.617642][ T996] kovaplus 0003:1E7D:2D50.0021: probe with driver kovaplus failed with error -22 [ 476.661783][ T5787] uclogic 0003:28BD:0071.0020: pen parameters not found [ 476.661862][ T5787] uclogic 0003:28BD:0071.0020: interface is invalid, ignoring [ 476.717567][ T5787] usb 2-1: USB disconnect, device number 45 [ 476.822700][ T996] usb 6-1: USB disconnect, device number 25 [ 476.863225][T14988] rxe_eth0 speed is unknown, defaulting to 1000 [ 477.481126][T14995] netlink: 'syz.5.4045': attribute type 2 has an invalid length. [ 478.475395][T15012] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4053'. [ 478.789933][ T5639] Bluetooth: hci3: command 0x1003 tx timeout [ 478.790624][ T8033] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 479.154732][T15020] kernel read not supported for file bus/pci/00/00.0 (pid: 15020 comm: syz.6.4057) [ 479.234240][T15026] tipc: Started in network mode [ 479.234265][T15026] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 479.234804][T15026] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 479.235398][T15026] tipc: Enabled bearer , priority 10 [ 479.609594][T15034] Attempt to restore checkpoint with obsolete wellknown handles [ 480.148117][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.151601][ T8033] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 480.253180][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4072'. [ 480.338769][ T996] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 480.348318][ T5787] tipc: Node number set to 1 [ 480.489603][ T996] usb 5-1: Using ep0 maxpacket: 16 [ 480.490703][ T996] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.495910][ T996] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.495934][ T996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.497893][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.497915][ T996] usb 5-1: Product: syz [ 480.497925][ T996] usb 5-1: Manufacturer: syz [ 480.497935][ T996] usb 5-1: SerialNumber: syz [ 480.571382][ T996] usb 5-1: config 0 descriptor?? [ 480.576460][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 480.576476][ T33] audit: type=1800 audit(1793722400.161:2527): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205750 res=0 errno=-22 [ 480.631733][ T33] audit: type=1800 audit(1793722400.221:2528): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=205782 res=0 errno=-22 [ 480.659932][ T996] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.659964][ T996] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 480.662302][ T33] audit: type=1800 audit(1793722400.251:2529): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=205757 res=0 errno=-22 [ 480.662358][ T33] audit: type=1800 audit(1793722400.251:2530): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=205758 res=0 errno=-22 [ 481.244668][ T996] em28xx 5-1:0.0: chip ID is em2874 [ 481.258433][ T33] audit: type=1800 audit(1793722400.841:2531): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=205779 res=0 errno=-22 [ 481.258472][ T33] audit: type=1800 audit(1793722400.841:2532): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=205780 res=0 errno=-22 [ 481.265682][ T33] audit: type=1800 audit(1793722400.851:2533): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=205759 res=0 errno=-22 [ 481.265721][ T33] audit: type=1800 audit(1793722400.851:2534): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=205781 res=0 errno=-22 [ 481.376187][ T33] audit: type=1800 audit(1793722400.961:2535): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205820 res=0 errno=-22 [ 481.377207][ T33] audit: type=1800 audit(1793722400.961:2536): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205802 res=0 errno=-22 [ 481.481351][ T996] usb 5-1: USB disconnect, device number 31 [ 481.482620][ T996] em28xx 5-1:0.0: Disconnecting em28xx [ 481.607626][ T996] em28xx: Freeing device [ 482.228454][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 483.451964][T15099] ALSA: mixer_oss: invalid OSS volume '' [ 483.451980][T15099] ALSA: mixer_oss: invalid OSS volume '' [ 483.451989][T15099] ALSA: mixer_oss: invalid OSS volume '' [ 483.452760][T15099] ALSA: mixer_oss: invalid OSS volume '' [ 483.782807][T15104] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.4097'. [ 483.782845][T15104] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.4097'. [ 484.789818][ T5730] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 484.943602][ T5730] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 484.947676][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.947696][ T5730] usb 6-1: Product: syz [ 484.947706][ T5730] usb 6-1: Manufacturer: syz [ 484.947717][ T5730] usb 6-1: SerialNumber: syz [ 485.064334][ T5730] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 485.064455][ T5730] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 485.065796][ T5730] usb 6-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 485.135342][ T5730] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 485.135368][ T5730] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 485.135513][ T5730] usb 6-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 485.135586][ T5730] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 485.135604][ T5730] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 485.135717][ T5730] usb 6-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 485.135782][ T5730] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 485.135799][ T5730] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 485.135910][ T5730] usb 6-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 485.135940][ T5730] usb 6-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 485.135955][ T5730] usb 6-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 485.270805][ T996] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 485.438390][ T996] usb 2-1: Using ep0 maxpacket: 32 [ 485.439110][ T996] usb 2-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 485.440115][ T996] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 485.440133][ T996] usb 2-1: config 0 has no interface number 0 [ 485.440161][ T996] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 485.440179][ T996] usb 2-1: config 0 interface 196 has no altsetting 0 [ 485.444024][ T996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.444043][ T996] usb 2-1: Product: syz [ 485.444053][ T996] usb 2-1: Manufacturer: syz [ 485.444064][ T996] usb 2-1: SerialNumber: syz [ 485.523407][ T996] usb 2-1: config 0 descriptor?? [ 485.524199][T15142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 486.470481][ T996] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 486.520402][ T996] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 486.540450][ T33] kauditd_printk_skb: 16 callbacks suppressed [ 486.540465][ T33] audit: type=1800 audit(1793722406.131:2553): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=206111 res=0 errno=-22 [ 486.543125][ T33] audit: type=1800 audit(1793722406.131:2554): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=206112 res=0 errno=-22 [ 486.599641][ T33] audit: type=1800 audit(1793722406.191:2555): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206091 res=0 errno=-22 [ 486.630697][ T33] audit: type=1800 audit(1793722406.221:2556): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=206113 res=0 errno=-22 [ 486.711138][ T33] audit: type=1800 audit(1793722406.301:2557): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206143 res=0 errno=-22 [ 486.755499][ T33] audit: type=1800 audit(1793722406.341:2558): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206237 res=0 errno=-22 [ 486.798457][ T33] audit: type=1800 audit(1793722406.381:2559): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=206242 res=0 errno=-22 [ 486.800177][ T33] audit: type=1800 audit(1793722406.381:2560): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=206246 res=0 errno=-22 [ 486.802825][ T33] audit: type=1800 audit(1793722406.391:2561): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=206245 res=0 errno=-22 [ 486.877009][ T33] audit: type=1800 audit(1793722406.461:2562): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=206248 res=0 errno=-22 [ 487.162618][T15172] loop6: detected capacity change from 0 to 2640 [ 487.195930][T14455] buffer_io_error: 5 callbacks suppressed [ 487.196010][T14455] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.196645][T14455] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.223306][T14455] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.223759][T14455] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.224193][T14455] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.576718][ T996] usb 2-1: USB disconnect, device number 46 [ 487.653141][ T8818] usb 6-1: USB disconnect, device number 26 [ 487.979838][ T996] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 488.323068][T15190] syz.4.4134 (15190) used greatest stack depth: 16840 bytes left [ 488.751619][T15206] FAULT_INJECTION: forcing a failure. [ 488.751619][T15206] name failslab, interval 1, probability 0, space 0, times 1 [ 488.751646][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.1.4141 Tainted: G S L syzkaller #0 PREEMPT(full) [ 488.751669][T15206] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 488.751676][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 488.751686][T15206] Call Trace: [ 488.751692][T15206] [ 488.751699][T15206] dump_stack_lvl+0xe8/0x150 [ 488.751730][T15206] should_fail_ex+0x3eb/0x540 [ 488.751848][T15206] should_failslab+0xa8/0x100 [ 488.751901][T15206] ? __kernfs_new_node+0xe6/0x980 [ 488.751952][T15206] kmem_cache_alloc_noprof+0x9c/0x600 [ 488.751990][T15206] ? __kernfs_new_node+0xe6/0x980 [ 488.752012][T15206] ? kernfs_add_one+0xfc/0x510 [ 488.752033][T15206] __kernfs_new_node+0xe6/0x980 [ 488.752049][T15206] ? up_write+0x19d/0x4a0 [ 488.752081][T15206] ? kernfs_activate_one+0x22d/0x340 [ 488.752102][T15206] ? __pfx___kernfs_new_node+0x10/0x10 [ 488.752120][T15206] ? kernfs_root+0x1c/0x230 [ 488.752140][T15206] ? kernfs_root+0x1c/0x230 [ 488.752155][T15206] ? kernfs_root+0x1c/0x230 [ 488.752169][T15206] ? kernfs_root+0x1c/0x230 [ 488.752202][T15206] kernfs_new_node+0xea/0x140 [ 488.752223][T15206] __kernfs_create_file+0x4b/0x2e0 [ 488.752246][T15206] sysfs_add_file_mode_ns+0x237/0x300 [ 488.752276][T15206] sysfs_create_file_ns+0x12b/0x1b0 [ 488.752301][T15206] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 488.752330][T15206] ? device_create_file+0xf4/0x1b0 [ 488.752380][T15206] device_add+0x432/0xb80 [ 488.752398][T15206] device_create+0x269/0x300 [ 488.752423][T15206] ? __pfx_device_create+0x10/0x10 [ 488.752453][T15206] bdi_register_va+0x9c/0x740 [ 488.752509][T15206] super_setup_bdi_name+0xf8/0x210 [ 488.752533][T15206] ? __pfx_afs_set_super+0x10/0x10 [ 488.752588][T15206] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 488.752611][T15206] ? __kasan_kmalloc+0x93/0xb0 [ 488.752650][T15206] ? __kmalloc_cache_noprof+0x31c/0x600 [ 488.752685][T15206] ? __kmalloc_cache_noprof+0x148/0x600 [ 488.752703][T15206] ? afs_get_tree+0x3b9/0x12c0 [ 488.752725][T15206] afs_get_tree+0xa49/0x12c0 [ 488.752741][T15206] ? apparmor_capable+0x126/0x170 [ 488.752810][T15206] vfs_get_tree+0x92/0x2a0 [ 488.752834][T15206] do_new_mount+0x325/0xb00 [ 488.752858][T15206] ? __pfx_do_new_mount+0x10/0x10 [ 488.752879][T15206] ? ns_capable+0x84/0xe0 [ 488.752906][T15206] ? path_mount+0x647/0x1050 [ 488.752927][T15206] ? user_path_at+0xd4/0x160 [ 488.752950][T15206] __se_sys_mount+0x31d/0x420 [ 488.752975][T15206] ? __pfx___se_sys_mount+0x10/0x10 [ 488.753002][T15206] ? __x64_sys_mount+0x20/0xc0 [ 488.753023][T15206] do_syscall_64+0x166/0x520 [ 488.753046][T15206] ? trace_irq_disable+0x3b/0x140 [ 488.753074][T15206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.753091][T15206] ? clear_bhb_loop+0x70/0xc0 [ 488.753111][T15206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.753127][T15206] RIP: 0033:0x7fb6b1b9fb19 [ 488.753143][T15206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.753156][T15206] RSP: 002b:00007fb6b2a53028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.753173][T15206] RAX: ffffffffffffffda RBX: 00007fb6b1e25fa0 RCX: 00007fb6b1b9fb19 [ 488.753185][T15206] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 488.753195][T15206] RBP: 00007fb6b1c37b70 R08: 00002000000000c0 R09: 0000000000000000 [ 488.753205][T15206] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 488.753215][T15206] R13: 00007fb6b1e26038 R14: 00007fb6b1e25fa0 R15: 00007ffc32b74a68 [ 488.753239][T15206] [ 490.234184][ T5647] svc: failed to register nfsdv3 RPC service (errno 5). [ 490.234202][ T5647] failed to unregister udp with rpcbind [ 490.255026][T15228] FAULT_INJECTION: forcing a failure. [ 490.255026][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 490.255053][T15228] CPU: 0 UID: 0 PID: 15228 Comm: syz.4.4151 Tainted: G S L syzkaller #0 PREEMPT(full) [ 490.255078][T15228] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 490.255085][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 490.255095][T15228] Call Trace: [ 490.255101][T15228] [ 490.255108][T15228] dump_stack_lvl+0xe8/0x150 [ 490.255138][T15228] should_fail_ex+0x3eb/0x540 [ 490.255160][T15228] should_failslab+0xa8/0x100 [ 490.255187][T15228] __kmalloc_node_noprof+0xfb/0x720 [ 490.255206][T15228] ? __pfx___up_read+0x10/0x10 [ 490.255229][T15228] ? crypto_create_tfm_node+0x81/0x3c0 [ 490.255342][T15228] ? crypto_create_tfm_node+0x81/0x3c0 [ 490.255368][T15228] ? crypto_spawn_alg+0x8b/0x1a0 [ 490.255396][T15228] crypto_create_tfm_node+0x81/0x3c0 [ 490.255425][T15228] crypto_spawn_tfm2+0x5c/0x90 [ 490.255445][T15228] rsassa_pkcs1_init_tfm+0x42/0x90 [ 490.255499][T15228] crypto_create_tfm_node+0x143/0x3c0 [ 490.255527][T15228] crypto_alloc_tfm_node+0x169/0x3e0 [ 490.255559][T15228] public_key_verify_signature+0x242/0x9e0 [ 490.255625][T15228] ? __pfx_public_key_verify_signature+0x10/0x10 [ 490.255662][T15228] ? asymmetric_key_generate_id+0x60/0x170 [ 490.255684][T15228] ? asymmetric_key_id_same+0x67/0xe0 [ 490.255711][T15228] x509_check_for_self_signed+0x326/0x430 [ 490.255731][T15228] x509_cert_parse+0x622/0x7a0 [ 490.255760][T15228] x509_key_preparse+0x64/0x6d0 [ 490.255775][T15228] ? down_read+0x2b9/0x320 [ 490.255842][T15228] asymmetric_key_preparse+0xb9/0x1b0 [ 490.255866][T15228] __key_create_or_update+0x360/0xab0 [ 490.255937][T15228] ? __pfx___key_create_or_update+0x10/0x10 [ 490.255962][T15228] ? lookup_user_key+0x112c/0x12c0 [ 490.255999][T15228] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 490.256033][T15228] key_create_or_update+0x42/0x60 [ 490.256062][T15228] __se_sys_add_key+0x349/0x420 [ 490.256085][T15228] ? __pfx___se_sys_add_key+0x10/0x10 [ 490.256111][T15228] ? __x64_sys_add_key+0x20/0xc0 [ 490.256131][T15228] do_syscall_64+0x166/0x520 [ 490.256151][T15228] ? trace_irq_disable+0x3b/0x140 [ 490.256172][T15228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.256189][T15228] ? clear_bhb_loop+0x70/0xc0 [ 490.256208][T15228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.256224][T15228] RIP: 0033:0x7f1b4099fb19 [ 490.256241][T15228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.256254][T15228] RSP: 002b:00007f1b41853028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 490.256271][T15228] RAX: ffffffffffffffda RBX: 00007f1b40c25fa0 RCX: 00007f1b4099fb19 [ 490.256282][T15228] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000980 [ 490.256293][T15228] RBP: 00007f1b40a37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 490.256304][T15228] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 490.256313][T15228] R13: 00007f1b40c26038 R14: 00007f1b40c25fa0 R15: 00007ffd473a4928 [ 490.256339][T15228] [ 491.080152][ T996] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 491.231119][ T996] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 491.248543][ T996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.248563][ T996] usb 2-1: Product: syz [ 491.248574][ T996] usb 2-1: Manufacturer: syz [ 491.248585][ T996] usb 2-1: SerialNumber: syz [ 491.278905][T15246] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 491.577644][ T33] kauditd_printk_skb: 16 callbacks suppressed [ 491.577659][ T33] audit: type=1800 audit(1793722411.161:2579): pid=15254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4163" name="enabled" dev="sysfs" ino=64215 res=0 errno=-22 [ 491.757889][ T33] audit: type=1800 audit(1793722411.341:2580): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4164" name="drivers_probe" dev="sysfs" ino=53318 res=0 errno=-13 [ 493.636433][T15279] FAULT_INJECTION: forcing a failure. [ 493.636433][T15279] name fail_futex, interval 1, probability 0, space 0, times 1 [ 493.636461][T15279] CPU: 0 UID: 0 PID: 15279 Comm: syz.6.4175 Tainted: G S L syzkaller #0 PREEMPT(full) [ 493.636485][T15279] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 493.636492][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 493.636502][T15279] Call Trace: [ 493.636509][T15279] [ 493.636515][T15279] dump_stack_lvl+0xe8/0x150 [ 493.636546][T15279] should_fail_ex+0x3eb/0x540 [ 493.636567][T15279] __se_sys_futex+0x180/0x450 [ 493.636598][T15279] ? __pfx___se_sys_futex+0x10/0x10 [ 493.636624][T15279] ? rcu_is_watching+0x16/0xb0 [ 493.636651][T15279] ? __x64_sys_futex+0x21/0xf0 [ 493.636678][T15279] do_syscall_64+0x166/0x520 [ 493.636699][T15279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.636716][T15279] ? clear_bhb_loop+0x70/0xc0 [ 493.636737][T15279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.636753][T15279] RIP: 0033:0x7f698859fb19 [ 493.636768][T15279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.636781][T15279] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.636798][T15279] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 493.636811][T15279] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 493.636820][T15279] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 493.636830][T15279] R10: 0000200000001380 R11: 0000000000000246 R12: 0000000000000000 [ 493.636840][T15279] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 493.636865][T15279] [ 493.916446][ T996] usb 2-1: USB disconnect, device number 47 [ 494.086800][T15284] lo: entered allmulticast mode [ 494.101718][T15282] lo: left allmulticast mode [ 494.711763][T15301] xt_hashlimit: max too large, truncated to 1048576 [ 495.454141][ T33] audit: type=1326 audit(1793722415.041:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.1.4193" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6b1b9fb19 code=0x0 [ 496.888462][T15359] FAULT_INJECTION: forcing a failure. [ 496.888462][T15359] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 496.888490][T15359] CPU: 0 UID: 0 PID: 15359 Comm: syz.4.4212 Tainted: G S L syzkaller #0 PREEMPT(full) [ 496.888514][T15359] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 496.888521][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 496.888530][T15359] Call Trace: [ 496.888536][T15359] [ 496.888543][T15359] dump_stack_lvl+0xe8/0x150 [ 496.888573][T15359] should_fail_ex+0x3eb/0x540 [ 496.888595][T15359] prepare_alloc_pages+0x21e/0x5f0 [ 496.888705][T15359] __alloc_frozen_pages_noprof+0x189/0x450 [ 496.888732][T15359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.888764][T15359] ? __pfx_do_futex+0x10/0x10 [ 496.888789][T15359] ? __fget_files+0x3a2/0x420 [ 496.888817][T15359] alloc_pages_mpol+0x21e/0x390 [ 496.888914][T15359] ___kmalloc_large_node+0x7b/0x170 [ 496.888935][T15359] __kmalloc_large_noprof+0x1a/0x90 [ 496.888955][T15359] ksys_ioperm+0x15e/0x670 [ 496.888992][T15359] do_syscall_64+0x166/0x520 [ 496.889013][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.889030][T15359] ? clear_bhb_loop+0x70/0xc0 [ 496.889050][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.889066][T15359] RIP: 0033:0x7f1b4099fb19 [ 496.889081][T15359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.889094][T15359] RSP: 002b:00007f1b41853028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 496.889112][T15359] RAX: ffffffffffffffda RBX: 00007f1b40c25fa0 RCX: 00007f1b4099fb19 [ 496.889123][T15359] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 496.889133][T15359] RBP: 00007f1b40a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 496.889142][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.889152][T15359] R13: 00007f1b40c26038 R14: 00007f1b40c25fa0 R15: 00007ffd473a4928 [ 496.889176][T15359] [ 497.325482][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4214'. [ 497.376524][ T33] audit: type=1804 audit(1793722416.961:2582): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4216" name="/newroot/1064/test_file" dev="tmpfs" ino=5596 res=1 errno=0 [ 497.406980][T15366] FAULT_INJECTION: forcing a failure. [ 497.406980][T15366] name failslab, interval 1, probability 0, space 0, times 0 [ 497.407007][T15366] CPU: 0 UID: 0 PID: 15366 Comm: syz.6.4215 Tainted: G S L syzkaller #0 PREEMPT(full) [ 497.407031][T15366] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 497.407037][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 497.407047][T15366] Call Trace: [ 497.407053][T15366] [ 497.407060][T15366] dump_stack_lvl+0xe8/0x150 [ 497.407090][T15366] should_fail_ex+0x3eb/0x540 [ 497.407118][T15366] should_failslab+0xa8/0x100 [ 497.407178][T15366] __kmalloc_noprof+0xf9/0x710 [ 497.407199][T15366] ? ops_init+0x7b/0x5d0 [ 497.407284][T15366] ? ops_init+0x7b/0x5d0 [ 497.407304][T15366] ops_init+0x7b/0x5d0 [ 497.407326][T15366] setup_net+0x118/0x350 [ 497.407353][T15366] ? __pfx_setup_net+0x10/0x10 [ 497.407378][T15366] ? down_read_killable+0x1b6/0x3b0 [ 497.407406][T15366] ? __ns_common_init+0x384/0x590 [ 497.407440][T15366] copy_net_ns+0x536/0x770 [ 497.407468][T15366] create_new_namespaces+0x3f0/0x6b0 [ 497.407494][T15366] ? security_capable+0x7e/0x2c0 [ 497.407547][T15366] unshare_nsproxy_namespaces+0x144/0x190 [ 497.407574][T15366] ksys_unshare+0x532/0x890 [ 497.407605][T15366] ? __pfx_ksys_unshare+0x10/0x10 [ 497.407630][T15366] ? rcu_is_watching+0x16/0xb0 [ 497.407665][T15366] __x64_sys_unshare+0x38/0x50 [ 497.407688][T15366] do_syscall_64+0x166/0x520 [ 497.407707][T15366] ? trace_irq_disable+0x3b/0x140 [ 497.407728][T15366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.407745][T15366] ? clear_bhb_loop+0x70/0xc0 [ 497.407765][T15366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.407781][T15366] RIP: 0033:0x7f698859fb19 [ 497.407797][T15366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.407811][T15366] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.407828][T15366] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 497.407840][T15366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 497.407850][T15366] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 497.407860][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.407869][T15366] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 497.407895][T15366] [ 498.237981][T15362] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 498.389200][T15362] usb 5-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 498.390862][T15362] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.390898][T15362] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 498.390916][T15362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 498.390935][T15362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 498.390951][T15362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 498.393050][T15362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 498.393069][T15362] usb 5-1: Product: syz [ 498.393079][T15362] usb 5-1: Manufacturer: syz [ 498.393090][T15362] usb 5-1: SerialNumber: syz [ 498.397655][T15362] usb 5-1: config 0 descriptor?? [ 498.482958][ T33] audit: type=1800 audit(1793722418.071:2583): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206968 res=0 errno=-22 [ 498.533017][ T33] audit: type=1800 audit(1793722418.121:2584): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=207000 res=0 errno=-22 [ 498.569507][ T33] audit: type=1800 audit(1793722418.161:2585): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206975 res=0 errno=-22 [ 498.569546][ T33] audit: type=1800 audit(1793722418.161:2586): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206976 res=0 errno=-22 [ 498.746927][T15362] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 498.746949][T15362] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 498.957963][T15362] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 498.957998][T15362] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 498.958013][T15362] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 499.155304][T15362] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 499.176794][T15394] syz.6.4228 (15394) used greatest stack depth: 12224 bytes left [ 499.583231][T15362] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 499.583493][T15362] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 499.611749][ T33] audit: type=1800 audit(1793722419.201:2587): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=206997 res=0 errno=-22 [ 499.611787][ T33] audit: type=1800 audit(1793722419.201:2588): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=206998 res=0 errno=-22 [ 499.662635][ T33] audit: type=1800 audit(1793722419.251:2589): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206977 res=0 errno=-22 [ 499.662680][ T33] audit: type=1800 audit(1793722419.251:2590): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=206999 res=0 errno=-22 [ 499.711169][T15362] usb 5-1: USB disconnect, device number 32 [ 500.593399][T15417] vxcan0: tx address claim with different name [ 500.704744][ T33] audit: type=1800 audit(1793722420.291:2591): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207151 res=0 errno=-22 [ 500.810327][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4241'. [ 500.810350][T15424] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4241'. [ 501.291053][T15435] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 501.759074][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.840604][T15451] FAULT_INJECTION: forcing a failure. [ 501.840604][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 501.840630][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.5.4253 Tainted: G S L syzkaller #0 PREEMPT(full) [ 501.840655][T15451] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 501.840662][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 501.840671][T15451] Call Trace: [ 501.840678][T15451] [ 501.840685][T15451] dump_stack_lvl+0xe8/0x150 [ 501.840716][T15451] should_fail_ex+0x3eb/0x540 [ 501.840738][T15451] should_failslab+0xa8/0x100 [ 501.840766][T15451] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 501.840787][T15451] ? __lock_acquire+0x747/0x2de0 [ 501.840806][T15451] ? __kernfs_new_node+0xa9/0x980 [ 501.840821][T15451] ? __kernfs_new_node+0xa9/0x980 [ 501.840843][T15451] kstrdup+0x42/0x100 [ 501.840926][T15451] __kernfs_new_node+0xa9/0x980 [ 501.840951][T15451] ? __pfx___kernfs_new_node+0x10/0x10 [ 501.840968][T15451] ? kernfs_root+0x1c/0x230 [ 501.840989][T15451] ? kernfs_root+0x1c/0x230 [ 501.841004][T15451] ? kernfs_root+0x1c/0x230 [ 501.841021][T15451] ? kernfs_root+0x1c/0x230 [ 501.841040][T15451] kernfs_create_dir_ns+0xfe/0x230 [ 501.841063][T15451] cgroup_mkdir+0x3ee/0x14b0 [ 501.841091][T15451] ? kernfs_root+0x1c/0x230 [ 501.841109][T15451] ? __pfx_cgroup_mkdir+0x10/0x10 [ 501.841132][T15451] kernfs_iop_mkdir+0x213/0x360 [ 501.841154][T15451] vfs_mkdir+0x411/0x660 [ 501.841195][T15451] filename_mkdirat+0x284/0x550 [ 501.841219][T15451] ? __might_fault+0xaf/0x130 [ 501.841267][T15451] ? __pfx_filename_mkdirat+0x10/0x10 [ 501.841296][T15451] ? do_getname+0x151/0x250 [ 501.841316][T15451] __se_sys_mkdirat+0x35/0x150 [ 501.841344][T15451] do_syscall_64+0x166/0x520 [ 501.841364][T15451] ? trace_irq_disable+0x3b/0x140 [ 501.841384][T15451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.841401][T15451] ? clear_bhb_loop+0x70/0xc0 [ 501.841422][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.841438][T15451] RIP: 0033:0x7f600319fb19 [ 501.841455][T15451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.841468][T15451] RSP: 002b:00007f600405a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 501.841486][T15451] RAX: ffffffffffffffda RBX: 00007f6003425fa0 RCX: 00007f600319fb19 [ 501.841498][T15451] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 501.841510][T15451] RBP: 00007f6003237b70 R08: 0000000000000000 R09: 0000000000000000 [ 501.841520][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.841529][T15451] R13: 00007f6003426038 R14: 00007f6003425fa0 R15: 00007ffe343dac08 [ 501.841555][T15451] [ 502.593102][T15465] FAULT_INJECTION: forcing a failure. [ 502.593102][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 502.593134][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.6.4259 Tainted: G S L syzkaller #0 PREEMPT(full) [ 502.593162][T15465] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 502.593169][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 502.593179][T15465] Call Trace: [ 502.593185][T15465] [ 502.593192][T15465] dump_stack_lvl+0xe8/0x150 [ 502.593223][T15465] should_fail_ex+0x3eb/0x540 [ 502.593244][T15465] should_failslab+0xa8/0x100 [ 502.593272][T15465] __kmalloc_cache_noprof+0x9e/0x600 [ 502.593294][T15465] ? cgroup_init_fs_context+0x57/0x860 [ 502.593314][T15465] ? cgroup_init_fs_context+0x57/0x860 [ 502.593337][T15465] cgroup_init_fs_context+0x57/0x860 [ 502.593358][T15465] ? mutex_init_lockdep+0xdf/0x110 [ 502.593382][T15465] alloc_fs_context+0x99e/0xd00 [ 502.593447][T15465] __se_sys_fsopen+0x118/0x370 [ 502.593511][T15465] do_syscall_64+0x166/0x520 [ 502.593533][T15465] ? trace_irq_disable+0x3b/0x140 [ 502.593554][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.593571][T15465] ? clear_bhb_loop+0x70/0xc0 [ 502.593591][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.593607][T15465] RIP: 0033:0x7f698859fb19 [ 502.593623][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.593637][T15465] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 502.593654][T15465] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 502.593666][T15465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 502.593676][T15465] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 502.593686][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.593695][T15465] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 502.593720][T15465] [ 502.994252][T15469] jffs2: notice: (15469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 503.719299][T15478] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4264'. [ 503.932621][T15484] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4268'. [ 504.635442][T15498] FAULT_INJECTION: forcing a failure. [ 504.635442][T15498] name failslab, interval 1, probability 0, space 0, times 0 [ 504.635469][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.6.4275 Tainted: G S L syzkaller #0 PREEMPT(full) [ 504.635493][T15498] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 504.635500][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 504.635510][T15498] Call Trace: [ 504.635516][T15498] [ 504.635523][T15498] dump_stack_lvl+0xe8/0x150 [ 504.635553][T15498] should_fail_ex+0x3eb/0x540 [ 504.635574][T15498] should_failslab+0xa8/0x100 [ 504.635601][T15498] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 504.635624][T15498] ? kasprintf+0xe2/0x140 [ 504.635685][T15498] ? kasprintf+0xe2/0x140 [ 504.635708][T15498] kvasprintf+0xeb/0x1a0 [ 504.635729][T15498] ? __pfx_kvasprintf+0x10/0x10 [ 504.635749][T15498] ? hook_capable+0x1c3/0x5e0 [ 504.635790][T15498] kasprintf+0xe2/0x140 [ 504.635819][T15498] ? __pfx_kasprintf+0x10/0x10 [ 504.635847][T15498] drm_debugfs_clients_add+0x4e/0x1a0 [ 504.635920][T15498] drm_file_alloc+0x564/0x9c0 [ 504.635964][T15498] drm_open_helper+0x1bf/0x470 [ 504.635982][T15498] drm_open+0x1c8/0x340 [ 504.635996][T15498] ? __pfx_drm_open+0x10/0x10 [ 504.636011][T15498] drm_stub_open+0x207/0x250 [ 504.636032][T15498] chrdev_open+0x4d9/0x600 [ 504.636060][T15498] ? __pfx_chrdev_open+0x10/0x10 [ 504.636085][T15498] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 504.636128][T15498] ? devcgroup_check_permission+0x31/0x8f0 [ 504.636165][T15498] ? __pfx_chrdev_open+0x10/0x10 [ 504.636191][T15498] do_dentry_open+0x80e/0x1360 [ 504.636216][T15498] vfs_open_consume+0x4a/0x350 [ 504.636231][T15498] ? path_openat+0x16e1/0x20f0 [ 504.636256][T15498] path_openat+0x16fc/0x20f0 [ 504.636293][T15498] do_file_open+0x23e/0x4a0 [ 504.636321][T15498] ? __pfx_do_file_open+0x10/0x10 [ 504.636360][T15498] ? _raw_spin_unlock+0x28/0x50 [ 504.636377][T15498] ? alloc_fd+0x6af/0x760 [ 504.636404][T15498] do_sys_openat2+0x115/0x200 [ 504.636424][T15498] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.636446][T15498] ? do_user_addr_fault+0xd3f/0x1480 [ 504.636468][T15498] __x64_sys_openat+0x138/0x170 [ 504.636490][T15498] do_syscall_64+0x166/0x520 [ 504.636510][T15498] ? trace_irq_disable+0x3b/0x140 [ 504.636530][T15498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.636547][T15498] ? clear_bhb_loop+0x70/0xc0 [ 504.636567][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.636583][T15498] RIP: 0033:0x7f698856034e [ 504.636598][T15498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.636611][T15498] RSP: 002b:00007f69894e7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.636628][T15498] RAX: ffffffffffffffda RBX: 00007f69894e86c0 RCX: 00007f698856034e [ 504.636640][T15498] RDX: 0000000000000000 RSI: 00007f69894e7c00 RDI: ffffffffffffff9c [ 504.636651][T15498] RBP: 00007f69894e7c00 R08: 0000000000000000 R09: 0000000000000000 [ 504.636661][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 504.636672][T15498] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 504.636696][T15498] [ 505.073604][T15500] loop8: detected capacity change from 0 to 7 [ 505.135823][T15500] Dev loop8: unable to read RDB block 7 [ 505.135855][T15500] loop8: unable to read partition table [ 505.136007][T15500] loop8: partition table beyond EOD, truncated [ 505.136031][T15500] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 506.792311][ T8033] Bluetooth: hci0: command 0x0c1a tx timeout [ 509.664448][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4308'. [ 509.664501][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4308'. [ 510.393079][T15584] vivid-000: disconnect [ 510.406013][T15584] vivid-000: reconnect [ 510.839362][T15596] FAULT_INJECTION: forcing a failure. [ 510.839362][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 510.839390][T15596] CPU: 0 UID: 0 PID: 15596 Comm: syz.6.4317 Tainted: G S L syzkaller #0 PREEMPT(full) [ 510.839414][T15596] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 510.839421][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 510.839430][T15596] Call Trace: [ 510.839436][T15596] [ 510.839443][T15596] dump_stack_lvl+0xe8/0x150 [ 510.839473][T15596] should_fail_ex+0x3eb/0x540 [ 510.839495][T15596] should_failslab+0xa8/0x100 [ 510.839522][T15596] __kmalloc_cache_noprof+0x9e/0x600 [ 510.839543][T15596] ? proc_self_get_link+0xe5/0x180 [ 510.839559][T15596] ? proc_self_get_link+0xe5/0x180 [ 510.839575][T15596] ? __task_pid_nr_ns+0x399/0x470 [ 510.839595][T15596] proc_self_get_link+0xe5/0x180 [ 510.839611][T15596] ? __pfx_proc_self_get_link+0x10/0x10 [ 510.839628][T15596] pick_link+0x77d/0xfd0 [ 510.839656][T15596] step_into_slowpath+0x58a/0x820 [ 510.839679][T15596] ? __pfx_step_into_slowpath+0x10/0x10 [ 510.839701][T15596] ? inode_permission+0x2b8/0x600 [ 510.839723][T15596] link_path_walk+0xdb1/0x19a0 [ 510.839758][T15596] path_openat+0x1b7/0x20f0 [ 510.839801][T15596] do_file_open+0x23e/0x4a0 [ 510.839829][T15596] ? __pfx_do_file_open+0x10/0x10 [ 510.839868][T15596] ? _raw_spin_unlock+0x28/0x50 [ 510.839886][T15596] ? alloc_fd+0x6af/0x760 [ 510.839912][T15596] do_sys_openat2+0x115/0x200 [ 510.839930][T15596] ? __se_sys_futex+0x3a8/0x450 [ 510.839956][T15596] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.839978][T15596] ? rcu_is_watching+0x16/0xb0 [ 510.840004][T15596] __x64_sys_openat+0x138/0x170 [ 510.840026][T15596] do_syscall_64+0x166/0x520 [ 510.840046][T15596] ? trace_irq_disable+0x3b/0x140 [ 510.840066][T15596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.840083][T15596] ? clear_bhb_loop+0x70/0xc0 [ 510.840103][T15596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.840119][T15596] RIP: 0033:0x7f698856034e [ 510.840136][T15596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.840150][T15596] RSP: 002b:00007f69894e7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.840167][T15596] RAX: ffffffffffffffda RBX: 00007f69894e86c0 RCX: 00007f698856034e [ 510.840179][T15596] RDX: 0000000000000002 RSI: 00007f69894e7f90 RDI: ffffffffffffff9c [ 510.840190][T15596] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 510.840200][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.840209][T15596] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 510.840234][T15596] [ 511.340527][ T33] audit: type=1800 audit(1793722430.931:2592): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4320" name="autosuspend_delay_ms" dev="sysfs" ino=26513 res=0 errno=-22 [ 511.475158][T15606] FAULT_INJECTION: forcing a failure. [ 511.475158][T15606] name failslab, interval 1, probability 0, space 0, times 0 [ 511.475188][T15606] CPU: 0 UID: 0 PID: 15606 Comm: syz.1.4322 Tainted: G S L syzkaller #0 PREEMPT(full) [ 511.475223][T15606] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 511.475232][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 511.475245][T15606] Call Trace: [ 511.475251][T15606] [ 511.475258][T15606] dump_stack_lvl+0xe8/0x150 [ 511.475289][T15606] should_fail_ex+0x3eb/0x540 [ 511.475311][T15606] should_failslab+0xa8/0x100 [ 511.475338][T15606] __kmalloc_cache_noprof+0x9e/0x600 [ 511.475360][T15606] ? alloc_mnt_ns+0xae/0x2c0 [ 511.475378][T15606] ? alloc_mnt_ns+0xae/0x2c0 [ 511.475402][T15606] alloc_mnt_ns+0xae/0x2c0 [ 511.475422][T15606] open_detached_copy+0x95/0x550 [ 511.475514][T15606] ? do_getname+0x151/0x250 [ 511.475533][T15606] vfs_open_tree+0x40d/0x480 [ 511.475561][T15606] ? __pfx_vfs_open_tree+0x10/0x10 [ 511.475594][T15606] __x64_sys_open_tree+0x93/0x110 [ 511.475617][T15606] do_syscall_64+0x166/0x520 [ 511.475638][T15606] ? trace_irq_disable+0x3b/0x140 [ 511.475659][T15606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.475676][T15606] ? clear_bhb_loop+0x70/0xc0 [ 511.475696][T15606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.475713][T15606] RIP: 0033:0x7fb6b1b9fb19 [ 511.475728][T15606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.475741][T15606] RSP: 002b:00007fb6b2a53028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 511.475758][T15606] RAX: ffffffffffffffda RBX: 00007fb6b1e25fa0 RCX: 00007fb6b1b9fb19 [ 511.475770][T15606] RDX: 0000000000089101 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 511.475781][T15606] RBP: 00007fb6b1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 511.475791][T15606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.475801][T15606] R13: 00007fb6b1e26038 R14: 00007fb6b1e25fa0 R15: 00007ffc32b74a68 [ 511.475825][T15606] [ 511.932770][ T33] audit: type=1800 audit(1793722431.521:2593): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207270 res=0 errno=-22 [ 514.249939][ T33] audit: type=1326 audit(1793722433.841:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.6.4343" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f698859fb19 code=0x0 [ 515.583311][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4350'. [ 516.108591][T15675] sock: sock_set_timeout: `syz.4.4353' (pid 15675) tries to set negative timeout [ 516.301204][T15679] sg_write: data in/out 409564/136 bytes for SCSI command 0x0-- guessing data in; [ 516.301204][T15679] program syz.6.4355 not setting count and/or reply_len properly [ 516.530215][T15683] 9pnet: p9_errstr2errno: server reported unknown error  [ 518.357298][T15704] netlink: 'syz.4.4365': attribute type 10 has an invalid length. [ 518.916189][T15720] overlayfs: failed to clone lowerpath [ 520.955910][T15761] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4389'. [ 521.278038][T15771] FAULT_INJECTION: forcing a failure. [ 521.278038][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 521.278066][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.1.4394 Tainted: G S L syzkaller #0 PREEMPT(full) [ 521.278089][T15771] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 521.278096][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 521.278106][T15771] Call Trace: [ 521.278112][T15771] [ 521.278119][T15771] dump_stack_lvl+0xe8/0x150 [ 521.278150][T15771] should_fail_ex+0x3eb/0x540 [ 521.278172][T15771] should_failslab+0xa8/0x100 [ 521.278199][T15771] __kmalloc_cache_noprof+0x9e/0x600 [ 521.278227][T15771] ? __kasan_kmalloc+0x93/0xb0 [ 521.278249][T15771] ? nci_allocate_device+0xe7/0x380 [ 521.278333][T15771] ? nci_allocate_device+0xe7/0x380 [ 521.278361][T15771] ? __pfx_virtual_nci_send+0x10/0x10 [ 521.278428][T15771] nci_allocate_device+0xe7/0x380 [ 521.278456][T15771] virtual_ncidev_open+0x75/0x1a0 [ 521.278483][T15771] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 521.278510][T15771] misc_open+0x2d5/0x350 [ 521.278560][T15771] chrdev_open+0x4d9/0x600 [ 521.278588][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 521.278614][T15771] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 521.278640][T15771] ? devcgroup_check_permission+0x31/0x8f0 [ 521.278664][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 521.278690][T15771] do_dentry_open+0x80e/0x1360 [ 521.278715][T15771] vfs_open_consume+0x4a/0x350 [ 521.278730][T15771] ? path_openat+0x16e1/0x20f0 [ 521.278756][T15771] path_openat+0x16fc/0x20f0 [ 521.278794][T15771] do_file_open+0x23e/0x4a0 [ 521.278821][T15771] ? __pfx_do_file_open+0x10/0x10 [ 521.278861][T15771] ? _raw_spin_unlock+0x28/0x50 [ 521.278877][T15771] ? alloc_fd+0x6af/0x760 [ 521.278905][T15771] do_sys_openat2+0x115/0x200 [ 521.278922][T15771] ? __se_sys_futex+0x3a8/0x450 [ 521.278948][T15771] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.278970][T15771] ? rcu_is_watching+0x16/0xb0 [ 521.278996][T15771] __x64_sys_openat+0x138/0x170 [ 521.279019][T15771] do_syscall_64+0x166/0x520 [ 521.279039][T15771] ? trace_irq_disable+0x3b/0x140 [ 521.279059][T15771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.279076][T15771] ? clear_bhb_loop+0x70/0xc0 [ 521.279096][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.279112][T15771] RIP: 0033:0x7fb6b1b9fb19 [ 521.279127][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.279141][T15771] RSP: 002b:00007fb6b2a53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.279158][T15771] RAX: ffffffffffffffda RBX: 00007fb6b1e25fa0 RCX: 00007fb6b1b9fb19 [ 521.279170][T15771] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 521.279181][T15771] RBP: 00007fb6b1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 521.279191][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.279200][T15771] R13: 00007fb6b1e26038 R14: 00007fb6b1e25fa0 R15: 00007ffc32b74a68 [ 521.279232][T15771] [ 521.803948][T15778] netlink: 'syz.1.4397': attribute type 16 has an invalid length. [ 521.803967][T15778] netlink: 63874 bytes leftover after parsing attributes in process `syz.1.4397'. [ 521.927845][ T5792] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 521.979595][T15782] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 521.980032][T15782] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 522.082175][ T5792] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 522.084937][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.111483][ T5792] usb 7-1: config 0 descriptor?? [ 522.115433][ T33] audit: type=1800 audit(1793722441.701:2595): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207533 res=0 errno=-22 [ 522.160977][ T33] audit: type=1800 audit(1793722441.751:2596): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=207562 res=0 errno=-22 [ 522.161036][ T33] audit: type=1800 audit(1793722441.751:2597): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=207540 res=0 errno=-22 [ 522.190091][ T33] audit: type=1800 audit(1793722441.781:2598): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=207541 res=0 errno=-22 [ 522.247249][ T33] audit: type=1800 audit(1793722441.831:2599): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=207542 res=0 errno=-22 [ 522.290584][ T33] audit: type=1800 audit(1793722441.881:2600): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207582 res=0 errno=-22 [ 522.352286][ T5792] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 522.383885][T15786] FAULT_INJECTION: forcing a failure. [ 522.383885][T15786] name failslab, interval 1, probability 0, space 0, times 0 [ 522.383923][T15786] CPU: 0 UID: 0 PID: 15786 Comm: syz.1.4401 Tainted: G S L syzkaller #0 PREEMPT(full) [ 522.383947][T15786] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 522.383954][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 522.383964][T15786] Call Trace: [ 522.383971][T15786] [ 522.383978][T15786] dump_stack_lvl+0xe8/0x150 [ 522.384010][T15786] should_fail_ex+0x3eb/0x540 [ 522.384031][T15786] should_failslab+0xa8/0x100 [ 522.384058][T15786] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 522.384078][T15786] ? __d_alloc+0x37/0x820 [ 522.384098][T15786] ? __d_alloc+0x37/0x820 [ 522.384130][T15786] __d_alloc+0x37/0x820 [ 522.384151][T15786] ? __pfx_get_random_u32+0x10/0x10 [ 522.384237][T15786] ? dquot_alloc_inode+0x216/0xa50 [ 522.384286][T15786] d_alloc_pseudo+0x21/0xc0 [ 522.384310][T15786] alloc_path_pseudo+0x107/0x220 [ 522.384331][T15786] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 522.384358][T15786] alloc_file_pseudo+0xa8/0x1e0 [ 522.384378][T15786] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 522.384405][T15786] __shmem_file_setup+0x2e9/0x370 [ 522.384427][T15786] ? __pfx___shmem_file_setup+0x10/0x10 [ 522.384450][T15786] ? vma_set_pgoff+0x163/0x290 [ 522.384477][T15786] shmem_zero_setup+0x90/0x130 [ 522.384499][T15786] mmap_region+0x1cd3/0x2820 [ 522.384539][T15786] ? __pfx_mmap_region+0x10/0x10 [ 522.384564][T15786] ? do_raw_spin_lock+0x12b/0x2f0 [ 522.384595][T15786] ? rcu_is_watching+0x16/0xb0 [ 522.384618][T15786] ? trace_hrtimer_start+0x82/0x200 [ 522.384638][T15786] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 522.384674][T15786] ? finish_task_switch+0x40e/0xc60 [ 522.384740][T15786] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 522.384786][T15786] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 522.384806][T15786] ? cap_mmap_addr+0xaa/0xf0 [ 522.384828][T15786] ? bpf_lsm_mmap_addr+0x9/0x50 [ 522.384891][T15786] ? security_mmap_addr+0x71/0x240 [ 522.384937][T15786] do_mmap+0xe0a/0x1300 [ 522.384985][T15786] ? __pfx_do_mmap+0x10/0x10 [ 522.385018][T15786] ? vm_mmap_pgoff+0x1ed/0x520 [ 522.385035][T15786] ? down_write_killable+0x179/0x230 [ 522.385062][T15786] ? __pfx_down_write_killable+0x10/0x10 [ 522.385086][T15786] ? apparmor_mmap_file+0x1cc/0x390 [ 522.385106][T15786] ? security_mmap_file+0xf9/0xa20 [ 522.385138][T15786] vm_mmap_pgoff+0x27a/0x520 [ 522.385162][T15786] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 522.385182][T15786] ? rcu_is_watching+0x16/0xb0 [ 522.385207][T15786] ? ksys_mmap_pgoff+0xf3/0x760 [ 522.385232][T15786] ? __x64_sys_mmap+0x7f/0x140 [ 522.385252][T15786] do_syscall_64+0x166/0x520 [ 522.385272][T15786] ? trace_irq_disable+0x3b/0x140 [ 522.385292][T15786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.385309][T15786] ? clear_bhb_loop+0x70/0xc0 [ 522.385329][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.385346][T15786] RIP: 0033:0x7fb6b1b9fb19 [ 522.385362][T15786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.385375][T15786] RSP: 002b:00007fb6b2a53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 522.385393][T15786] RAX: ffffffffffffffda RBX: 00007fb6b1e25fa0 RCX: 00007fb6b1b9fb19 [ 522.385406][T15786] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 522.385417][T15786] RBP: 00007fb6b1c37b70 R08: ffffffffffffffff R09: 00000000ec776000 [ 522.385429][T15786] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 522.385439][T15786] R13: 00007fb6b1e26038 R14: 00007fb6b1e25fa0 R15: 00007ffc32b74a68 [ 522.385465][T15786] [ 522.848583][ T33] audit: type=1800 audit(1793722442.441:2601): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207599 res=0 errno=-22 [ 522.894978][ T5792] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 522.894998][ T5792] [drm] Initialized udl on minor 1 [ 522.926397][ T33] audit: type=1800 audit(1793722442.511:2602): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207613 res=0 errno=-22 [ 525.305266][ T53] IPVS: stopping estimator thread 0... [ 525.483550][T15817] jffs2: notice: (15817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 526.963736][ T8033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.966240][ T8033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.975115][ T8033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.992737][ T8033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.014325][ T8033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.088441][ T33] audit: type=1800 audit(1793722446.681:2603): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207781 res=0 errno=-22 [ 527.131423][ T33] audit: type=1800 audit(1793722446.721:2604): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207792 res=0 errno=-22 [ 527.216524][ T33] audit: type=1800 audit(1793722446.801:2605): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207811 res=0 errno=-22 [ 527.266928][ T33] audit: type=1800 audit(1793722446.851:2606): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207822 res=0 errno=-22 [ 527.939799][ T33] audit: type=1326 audit(1793722447.531:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15854 comm="syz.4.4428" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4099fb19 code=0x0 [ 527.989702][ T5792] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 527.990084][ T5792] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 528.021859][ T878] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 528.053300][ T5792] usb 7-1: USB disconnect, device number 22 [ 528.475672][T15837] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.785448][ T33] audit: type=1800 audit(1793722448.371:2608): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209279 res=0 errno=-22 [ 528.842856][ T5792] input: syz0 as /devices/virtual/misc/uhid/0005:4000B05:0002.0022/input/input74 [ 528.847122][ T33] audit: type=1800 audit(1793722448.431:2609): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209420 res=0 errno=-22 [ 528.909071][ T33] audit: type=1800 audit(1793722448.501:2610): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=209475 res=0 errno=-22 [ 528.917577][ T33] audit: type=1800 audit(1793722448.501:2611): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=209478 res=0 errno=-22 [ 528.917620][ T33] audit: type=1800 audit(1793722448.501:2612): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=209477 res=0 errno=-22 [ 528.992887][ T33] audit: type=1800 audit(1793722448.581:2613): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=209476 res=0 errno=-22 [ 529.108484][ T8033] Bluetooth: hci3: command tx timeout [ 529.204914][ T5792] hid-generic 0005:4000B05:0002.0022: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1 [ 529.287603][T15873] udevd[15873]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 530.043451][T15888] FAULT_INJECTION: forcing a failure. [ 530.043451][T15888] name failslab, interval 1, probability 0, space 0, times 0 [ 530.043477][T15888] CPU: 0 UID: 0 PID: 15888 Comm: syz.6.4438 Tainted: G S L syzkaller #0 PREEMPT(full) [ 530.043501][T15888] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 530.043507][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 530.043517][T15888] Call Trace: [ 530.043523][T15888] [ 530.043530][T15888] dump_stack_lvl+0xe8/0x150 [ 530.043561][T15888] should_fail_ex+0x3eb/0x540 [ 530.043583][T15888] should_failslab+0xa8/0x100 [ 530.043609][T15888] ? security_inode_alloc+0x39/0x310 [ 530.043627][T15888] kmem_cache_alloc_noprof+0x9c/0x600 [ 530.043647][T15888] ? __pfx_make_kgid+0x10/0x10 [ 530.043666][T15888] ? security_inode_alloc+0x39/0x310 [ 530.043689][T15888] security_inode_alloc+0x39/0x310 [ 530.043706][T15888] inode_init_always_gfp+0x97e/0xd30 [ 530.043731][T15888] alloc_inode+0x82/0x1b0 [ 530.043754][T15888] new_inode+0x1f/0x170 [ 530.043776][T15888] rust_binderfs_create_proc_file+0x144/0x480 [ 530.043873][T15888] ? __pfx_rust_binderfs_create_proc_file+0x10/0x10 [ 530.043892][T15888] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.043914][T15888] ? _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessENtNtB7_9allocator8KVmallocE30push_within_capacity_uncheckedB1g_+0x201/0x2b0 [ 530.044049][T15888] _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10e9/0x1760 [ 530.044078][T15888] ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 530.044102][T15888] ? apparmor_file_open+0x523/0x6c0 [ 530.044129][T15888] ? __pfx_apparmor_file_open+0x10/0x10 [ 530.044152][T15888] ? fsnotify_open_perm_and_set_mode+0x13c/0x6b0 [ 530.044177][T15888] ? devcgroup_check_permission+0x31/0x8f0 [ 530.044200][T15888] ? __pfx__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 530.044220][T15888] do_dentry_open+0x80e/0x1360 [ 530.044244][T15888] vfs_open_consume+0x4a/0x350 [ 530.044259][T15888] ? path_openat+0x16e1/0x20f0 [ 530.044284][T15888] path_openat+0x16fc/0x20f0 [ 530.044326][T15888] do_file_open+0x23e/0x4a0 [ 530.044354][T15888] ? __pfx_do_file_open+0x10/0x10 [ 530.044393][T15888] ? _raw_spin_unlock+0x28/0x50 [ 530.044409][T15888] ? alloc_fd+0x6af/0x760 [ 530.044436][T15888] do_sys_openat2+0x115/0x200 [ 530.044453][T15888] ? __se_sys_futex+0x3a8/0x450 [ 530.044478][T15888] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.044500][T15888] ? rcu_is_watching+0x16/0xb0 [ 530.044525][T15888] __x64_sys_openat+0x138/0x170 [ 530.044547][T15888] do_syscall_64+0x166/0x520 [ 530.044566][T15888] ? trace_irq_disable+0x3b/0x140 [ 530.044586][T15888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.044603][T15888] ? clear_bhb_loop+0x70/0xc0 [ 530.044622][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.044638][T15888] RIP: 0033:0x7f698859fb19 [ 530.044653][T15888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.044667][T15888] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.044684][T15888] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 530.044696][T15888] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 530.044706][T15888] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 530.044716][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.044725][T15888] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 530.044749][T15888] [ 530.681104][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.682728][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.682847][T15837] bridge_slave_0: entered allmulticast mode [ 530.686409][T15837] bridge_slave_0: entered promiscuous mode [ 530.722444][T15837] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.724446][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.724569][T15837] bridge_slave_1: entered allmulticast mode [ 530.727879][T15837] bridge_slave_1: entered promiscuous mode [ 530.756916][T15894] syzkaller1: entered promiscuous mode [ 530.756933][T15894] syzkaller1: entered allmulticast mode [ 530.886496][T15837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.912374][T15837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.021117][T15837] team0: Port device team_slave_0 added [ 531.035680][T15837] team0: Port device team_slave_1 added [ 531.139096][T15837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.139111][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.139132][T15837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.143760][T15837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.143773][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.143795][T15837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.196592][ T8033] Bluetooth: hci3: command tx timeout [ 531.378864][T15899] FAULT_INJECTION: forcing a failure. [ 531.378864][T15899] name failslab, interval 1, probability 0, space 0, times 0 [ 531.378892][T15899] CPU: 0 UID: 0 PID: 15899 Comm: syz.6.4442 Tainted: G S L syzkaller #0 PREEMPT(full) [ 531.378916][T15899] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 531.378923][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 531.378933][T15899] Call Trace: [ 531.378939][T15899] [ 531.378946][T15899] dump_stack_lvl+0xe8/0x150 [ 531.378976][T15899] should_fail_ex+0x3eb/0x540 [ 531.378998][T15899] should_failslab+0xa8/0x100 [ 531.379022][T15899] ? copy_fs_struct+0x4f/0x270 [ 531.379040][T15899] kmem_cache_alloc_noprof+0x9c/0x600 [ 531.379060][T15899] ? copy_fs_struct+0x4f/0x270 [ 531.379082][T15899] copy_fs_struct+0x4f/0x270 [ 531.379102][T15899] ksys_unshare+0x4ab/0x890 [ 531.379128][T15899] ? __pfx_ksys_unshare+0x10/0x10 [ 531.379152][T15899] ? rcu_is_watching+0x16/0xb0 [ 531.379189][T15899] __x64_sys_unshare+0x38/0x50 [ 531.379212][T15899] do_syscall_64+0x166/0x520 [ 531.379234][T15899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.379251][T15899] ? clear_bhb_loop+0x70/0xc0 [ 531.379271][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.379287][T15899] RIP: 0033:0x7f698859fb19 [ 531.379303][T15899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.379316][T15899] RSP: 002b:00007f69894e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 531.379333][T15899] RAX: ffffffffffffffda RBX: 00007f6988825fa0 RCX: 00007f698859fb19 [ 531.379345][T15899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 531.379355][T15899] RBP: 00007f6988637b70 R08: 0000000000000000 R09: 0000000000000000 [ 531.379365][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.379374][T15899] R13: 00007f6988826038 R14: 00007f6988825fa0 R15: 00007ffc48a46388 [ 531.379399][T15899] [ 531.637379][T15837] hsr_slave_0: entered promiscuous mode [ 531.650949][T15837] hsr_slave_1: entered promiscuous mode [ 531.651477][T15837] debugfs: 'hsr0' already exists in 'hsr' [ 531.651489][T15837] Cannot create hsr debugfs directory [ 532.424410][ T33] kauditd_printk_skb: 6 callbacks suppressed [ 532.424426][ T33] audit: type=1800 audit(1793722452.011:2620): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24639 res=0 errno=-13 [ 532.463023][ T33] audit: type=1800 audit(1793722452.051:2621): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24638 res=0 errno=-13 [ 532.508504][ T33] audit: type=1800 audit(1793722452.091:2622): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216836 res=0 errno=-22 [ 533.157532][T15837] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 533.181274][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.183554][T15837] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 533.209306][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.224313][T15837] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 533.244440][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.269868][ T8033] Bluetooth: hci3: command tx timeout [ 533.270034][T15837] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 533.296458][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.628573][T15837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.690888][T15837] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.726671][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.726755][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.796309][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.796419][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.507373][T15948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 534.759432][T15954] MTD: Couldn't look up 'mtdblock0': -2 [ 534.831577][T15956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 535.132254][T15837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.350659][ T8033] Bluetooth: hci3: command tx timeout [ 536.195123][T15837] veth0_vlan: entered promiscuous mode [ 536.245376][T15837] veth1_vlan: entered promiscuous mode [ 536.373187][T15837] veth0_macvtap: entered promiscuous mode [ 536.424714][T15837] veth1_macvtap: entered promiscuous mode [ 536.504472][T15837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.534116][T15837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.578535][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.579491][T10809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.579526][T10809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.579552][T10809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.799075][ T33] audit: type=1800 audit(1793722456.391:2623): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217273 res=0 errno=-22 [ 537.030989][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.031006][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.075026][ T33] audit: type=1800 audit(1793722456.661:2624): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217399 res=0 errno=-22 [ 537.280172][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.280189][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.426000][T16010] nbd: socks must be embedded in a SOCK_ITEM attr [ 537.519415][T15837] [ 537.521791][T15837] ====================================================== [ 537.528866][T15837] WARNING: possible circular locking dependency detected [ 537.536082][T15837] syzkaller #0 Tainted: G S L [ 537.542127][T15837] ------------------------------------------------------ [ 537.549201][T15837] syz-executor/15837 is trying to acquire lock: [ 537.555445][T15837] ffffffff901aad60 (cpuset_mutex){+.+.}-{4:4}, at: cpuset_can_attach+0xac/0x1170 [ 537.564752][T15837] [ 537.564752][T15837] but task is already holding lock: [ 537.572113][T15837] ffffffff9019add0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x574/0x900 [ 537.582921][T15837] [ 537.582921][T15837] which lock already depends on the new lock. [ 537.582921][T15837] [ 537.593340][T15837] [ 537.593340][T15837] the existing dependency chain (in reverse order) is: [ 537.602616][T15837] [ 537.602616][T15837] -> #9 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 537.611134][T15837] percpu_down_write+0x4f/0x330 [ 537.616528][T15837] cgroup_procs_write_start+0x574/0x900 [ 537.622740][T15837] __cgroup_procs_write+0xa4/0x2f0 [ 537.628400][T15837] cgroup_procs_write+0x27/0x50 [ 537.633793][T15837] cgroup_file_write+0x331/0x8f0 [ 537.639265][T15837] kernfs_fop_write_iter+0x3a4/0x540 [ 537.645091][T15837] vfs_write+0x612/0xba0 [ 537.649865][T15837] ksys_write+0x150/0x270 [ 537.654728][T15837] do_syscall_64+0x166/0x520 [ 537.659846][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.666268][T15837] [ 537.666268][T15837] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 537.674036][T15837] cpus_read_lock+0x3d/0x160 [ 537.679168][T15837] static_key_slow_inc+0x12/0x30 [ 537.684704][T15837] setup_udp_tunnel_sock+0x2df/0x4f0 [ 537.690558][T15837] l2tp_tunnel_register+0xe77/0x1570 [ 537.696410][T15837] pppol2tp_connect+0x8e3/0x18b0 [ 537.701890][T15837] __sys_connect+0x316/0x450 [ 537.707169][T15837] __x64_sys_connect+0x7a/0x90 [ 537.712471][T15837] do_syscall_64+0x166/0x520 [ 537.717612][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.724038][T15837] [ 537.724038][T15837] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 537.731798][T15837] lock_sock_nested+0x41/0x100 [ 537.737196][T15837] inet_shutdown+0x6a/0x390 [ 537.742309][T15837] nbd_mark_nsock_dead+0x2cb/0x550 [ 537.748005][T15837] sock_shutdown+0x15e/0x260 [ 537.753126][T15837] nbd_clear_sock+0x24/0x170 [ 537.758248][T15837] nbd_config_put+0x477/0x7e0 [ 537.763454][T15837] nbd_genl_connect+0x19b8/0x1cd0 [ 537.769003][T15837] genl_family_rcv_msg_doit+0x233/0x340 [ 537.775167][T15837] genl_rcv_msg+0x614/0x7a0 [ 537.780200][T15837] netlink_rcv_skb+0x226/0x4a0 [ 537.785580][T15837] genl_rcv+0x28/0x40 [ 537.790091][T15837] netlink_unicast+0x8ef/0xa80 [ 537.795388][T15837] netlink_sendmsg+0x7f0/0xb20 [ 537.800702][T15837] sock_sendmsg_nosec+0x14e/0x190 [ 537.806262][T15837] ____sys_sendmsg+0x54e/0x850 [ 537.811559][T15837] ___sys_sendmsg+0x2a6/0x360 [ 537.816767][T15837] __x64_sys_sendmsg+0x1b1/0x290 [ 537.822255][T15837] do_syscall_64+0x166/0x520 [ 537.827379][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.833802][T15837] [ 537.833802][T15837] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 537.841474][T15837] __mutex_lock+0x197/0x15a0 [ 537.846614][T15837] nbd_queue_rq+0x373/0xff0 [ 537.851647][T15837] blk_mq_dispatch_rq_list+0x499/0x1990 [ 537.857811][T15837] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 537.864706][T15837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.871220][T15837] blk_mq_run_work_fn+0x167/0x2f0 [ 537.876774][T15837] process_scheduled_works+0xc3d/0x1630 [ 537.882856][T15837] worker_thread+0xa47/0xfb0 [ 537.887989][T15837] kthread+0x38b/0x480 [ 537.892596][T15837] ret_from_fork+0x514/0xb70 [ 537.897819][T15837] ret_from_fork_asm+0x1a/0x30 [ 537.903126][T15837] [ 537.903126][T15837] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 537.910379][T15837] __mutex_lock+0x197/0x15a0 [ 537.915519][T15837] nbd_queue_rq+0xc1/0xff0 [ 537.920482][T15837] blk_mq_dispatch_rq_list+0x499/0x1990 [ 537.926572][T15837] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 537.933435][T15837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.939952][T15837] blk_mq_run_work_fn+0x167/0x2f0 [ 537.945542][T15837] process_scheduled_works+0xc3d/0x1630 [ 537.951630][T15837] worker_thread+0xa47/0xfb0 [ 537.956769][T15837] kthread+0x38b/0x480 [ 537.961365][T15837] ret_from_fork+0x514/0xb70 [ 537.966479][T15837] ret_from_fork_asm+0x1a/0x30 [ 537.971777][T15837] [ 537.971777][T15837] -> #4 (set->srcu){.+.+}-{0:0}: [ 537.978906][T15837] __synchronize_srcu+0xca/0x2f0 [ 537.984375][T15837] elevator_switch+0x1e8/0x7b0 [ 537.989734][T15837] elevator_change+0x2fa/0x480 [ 537.995034][T15837] elevator_set_default+0x375/0x440 [ 538.000775][T15837] blk_register_queue+0x404/0x4f0 [ 538.006378][T15837] __add_disk+0x6b8/0xdb0 [ 538.011235][T15837] add_disk_fwnode+0x100/0x3a0 [ 538.016522][T15837] nbd_dev_add+0x733/0xb60 [ 538.021476][T15837] nbd_init+0x168/0x1f0 [ 538.026283][T15837] do_one_initcall+0x250/0x870 [ 538.031581][T15837] do_initcall_level+0x10a/0x1a0 [ 538.037146][T15837] do_initcalls+0x59/0xa0 [ 538.042006][T15837] kernel_init_freeable+0x29d/0x3e0 [ 538.047730][T15837] kernel_init+0x22/0x1d0 [ 538.052614][T15837] ret_from_fork+0x514/0xb70 [ 538.057728][T15837] ret_from_fork_asm+0x1a/0x30 [ 538.063022][T15837] [ 538.063022][T15837] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 538.070844][T15837] __mutex_lock+0x197/0x15a0 [ 538.075964][T15837] elevator_change+0x1af/0x480 [ 538.081266][T15837] elevator_set_none+0xb5/0x140 [ 538.086648][T15837] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 538.092981][T15837] nbd_start_device+0x189/0xb30 [ 538.098378][T15837] nbd_genl_connect+0x167d/0x1cd0 [ 538.103948][T15837] genl_family_rcv_msg_doit+0x233/0x340 [ 538.110021][T15837] genl_rcv_msg+0x614/0x7a0 [ 538.115058][T15837] netlink_rcv_skb+0x226/0x4a0 [ 538.120390][T15837] genl_rcv+0x28/0x40 [ 538.124924][T15837] netlink_unicast+0x8ef/0xa80 [ 538.130299][T15837] netlink_sendmsg+0x7f0/0xb20 [ 538.135704][T15837] sock_sendmsg_nosec+0x14e/0x190 [ 538.141324][T15837] ____sys_sendmsg+0x54e/0x850 [ 538.146666][T15837] ___sys_sendmsg+0x2a6/0x360 [ 538.151888][T15837] __x64_sys_sendmsg+0x1b1/0x290 [ 538.157494][T15837] do_syscall_64+0x166/0x520 [ 538.162626][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.169048][T15837] [ 538.169048][T15837] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 538.177688][T15837] blk_alloc_queue+0x544/0x690 [ 538.183017][T15837] __blk_mq_alloc_disk+0x194/0x390 [ 538.188660][T15837] nbd_dev_add+0x494/0xb60 [ 538.193607][T15837] nbd_init+0x168/0x1f0 [ 538.198384][T15837] do_one_initcall+0x250/0x870 [ 538.203688][T15837] do_initcall_level+0x10a/0x1a0 [ 538.209239][T15837] do_initcalls+0x59/0xa0 [ 538.214093][T15837] kernel_init_freeable+0x29d/0x3e0 [ 538.219819][T15837] kernel_init+0x22/0x1d0 [ 538.224713][T15837] ret_from_fork+0x514/0xb70 [ 538.229844][T15837] ret_from_fork_asm+0x1a/0x30 [ 538.235149][T15837] [ 538.235149][T15837] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 538.242366][T15837] fs_reclaim_acquire+0x71/0x100 [ 538.247857][T15837] __kmalloc_noprof+0xbc/0x710 [ 538.253154][T15837] rebuild_sched_domains_locked+0x608/0x950 [ 538.259609][T15837] cpuset_handle_hotplug+0xff9/0x10b0 [ 538.265530][T15837] sched_cpu_deactivate+0x7cb/0xf00 [ 538.271274][T15837] cpuhp_invoke_callback+0x434/0x810 [ 538.277098][T15837] cpuhp_thread_fun+0x362/0x780 [ 538.282616][T15837] smpboot_thread_fn+0x5f8/0xb30 [ 538.288127][T15837] kthread+0x38b/0x480 [ 538.292824][T15837] ret_from_fork+0x514/0xb70 [ 538.297967][T15837] ret_from_fork_asm+0x1a/0x30 [ 538.303276][T15837] [ 538.303276][T15837] -> #0 (cpuset_mutex){+.+.}-{4:4}: [ 538.310665][T15837] __lock_acquire+0x164c/0x2de0 [ 538.316044][T15837] lock_acquire+0x115/0x350 [ 538.321071][T15837] __mutex_lock+0x197/0x15a0 [ 538.326200][T15837] cpuset_can_attach+0xac/0x1170 [ 538.331682][T15837] cgroup_migrate_execute+0x20e/0x1820 [ 538.337681][T15837] cgroup_attach_task+0x596/0x870 [ 538.343232][T15837] __cgroup_procs_write+0x28c/0x2f0 [ 538.348966][T15837] cgroup_procs_write+0x27/0x50 [ 538.354366][T15837] cgroup_file_write+0x331/0x8f0 [ 538.359869][T15837] kernfs_fop_write_iter+0x3a4/0x540 [ 538.365685][T15837] vfs_write+0x612/0xba0 [ 538.370457][T15837] ksys_write+0x150/0x270 [ 538.375350][T15837] do_syscall_64+0x166/0x520 [ 538.380533][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.386968][T15837] [ 538.386968][T15837] other info that might help us debug this: [ 538.386968][T15837] [ 538.397292][T15837] Chain exists of: [ 538.397292][T15837] cpuset_mutex --> cpu_hotplug_lock --> cgroup_threadgroup_rwsem [ 538.397292][T15837] [ 538.411037][T15837] Possible unsafe locking scenario: [ 538.411037][T15837] [ 538.418560][T15837] CPU0 CPU1 [ 538.424021][T15837] ---- ---- [ 538.429452][T15837] lock(cgroup_threadgroup_rwsem); [ 538.434694][T15837] lock(cpu_hotplug_lock); [ 538.441727][T15837] lock(cgroup_threadgroup_rwsem); [ 538.449472][T15837] lock(cpuset_mutex); [ 538.453630][T15837] [ 538.453630][T15837] *** DEADLOCK *** [ 538.453630][T15837] [ 538.461852][T15837] locks held by syz-executor/15837: 5, last CPU#0: [ 538.468405][T15837] #0: ffff88807f5ce478 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 538.477336][T15837] #1: ffff88805d27a880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 538.487106][T15837] #2: ffffffff9019aa60 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x14f/0x260 [ 538.496877][T15837] #3: ffffffff8ffe61d0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x568/0x900 [ 538.507429][T15837] #4: ffffffff9019add0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x574/0x900 [ 538.518694][T15837] [ 538.518694][T15837] stack backtrace: [ 538.524588][T15837] CPU: 0 UID: 0 PID: 15837 Comm: syz-executor Tainted: G S L syzkaller #0 PREEMPT(full) [ 538.535697][T15837] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 538.541847][T15837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 538.551903][T15837] Call Trace: [ 538.555184][T15837] [ 538.558115][T15837] dump_stack_lvl+0xe8/0x150 [ 538.562718][T15837] print_circular_bug+0x2e2/0x300 [ 538.567774][T15837] check_noncircular+0x12f/0x150 [ 538.572724][T15837] __lock_acquire+0x164c/0x2de0 [ 538.577584][T15837] ? stack_trace_save+0xa9/0x100 [ 538.582540][T15837] ? __pfx_stack_trace_save+0x10/0x10 [ 538.587916][T15837] ? stack_depot_save_flags+0x33/0x810 [ 538.593450][T15837] lock_acquire+0x115/0x350 [ 538.597978][T15837] ? cpuset_can_attach+0xac/0x1170 [ 538.603126][T15837] __mutex_lock+0x197/0x15a0 [ 538.607757][T15837] ? cpuset_can_attach+0xac/0x1170 [ 538.612911][T15837] ? __lock_acquire+0x747/0x2de0 [ 538.617864][T15837] ? cpuset_can_attach+0xac/0x1170 [ 538.622990][T15837] ? __pfx___mutex_lock+0x10/0x10 [ 538.628034][T15837] ? css_get+0x55/0x230 [ 538.632206][T15837] cpuset_can_attach+0xac/0x1170 [ 538.637184][T15837] ? __pfx_cpuset_can_attach+0x10/0x10 [ 538.642652][T15837] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.647855][T15837] ? _raw_spin_unlock_irq+0x2e/0x50 [ 538.653069][T15837] ? find_css_set+0x1c37/0x1e00 [ 538.658040][T15837] cgroup_migrate_execute+0x20e/0x1820 [ 538.663546][T15837] ? __pfx_cgroup_migrate_execute+0x10/0x10 [ 538.669454][T15837] ? call_rcu+0x20e/0x300 [ 538.673806][T15837] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.679015][T15837] cgroup_attach_task+0x596/0x870 [ 538.684050][T15837] ? __pfx_evict+0x10/0x10 [ 538.688489][T15837] ? __pfx_cgroup_attach_task+0x10/0x10 [ 538.694084][T15837] ? cgroup_attach_permissions+0x4ec/0x9f0 [ 538.699907][T15837] __cgroup_procs_write+0x28c/0x2f0 [ 538.705122][T15837] cgroup_procs_write+0x27/0x50 [ 538.709994][T15837] ? __pfx_cgroup_procs_write+0x10/0x10 [ 538.715542][T15837] cgroup_file_write+0x331/0x8f0 [ 538.720483][T15837] ? __pfx_cgroup_file_write+0x10/0x10 [ 538.725959][T15837] ? __kmalloc_noprof+0x387/0x710 [ 538.731001][T15837] ? __pfx_cgroup_file_write+0x10/0x10 [ 538.736479][T15837] kernfs_fop_write_iter+0x3a4/0x540 [ 538.741802][T15837] vfs_write+0x612/0xba0 [ 538.746058][T15837] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 538.752222][T15837] ? task_work_run+0x1d9/0x260 [ 538.757013][T15837] ? __pfx_vfs_write+0x10/0x10 [ 538.761815][T15837] ? fdget+0x16b/0x250 [ 538.765949][T15837] ksys_write+0x150/0x270 [ 538.770324][T15837] ? __pfx_ksys_write+0x10/0x10 [ 538.775236][T15837] do_syscall_64+0x166/0x520 [ 538.779837][T15837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.785996][T15837] ? clear_bhb_loop+0x70/0xc0 [ 538.790690][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.796589][T15837] RIP: 0033:0x7f696f56034e [ 538.801009][T15837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.820622][T15837] RSP: 002b:00007ffe2c5e9878 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.829054][T15837] RAX: ffffffffffffffda RBX: 000055557a9d2500 RCX: 00007f696f56034e [ 538.837045][T15837] RDX: 0000000000000001 RSI: 00007ffe2c5e9900 RDI: 0000000000000003 [ 538.845028][T15837] RBP: 00007ffe2c5e9e70 R08: 0000000000000000 R09: 0000000000000000 [ 538.853021][T15837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.861011][T15837] R13: 00007ffe2c5e9900 R14: 00007ffe2c5e9e30 R15: 00007ffe2c5e9e70 [ 538.869000][T15837] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.354795][T16010] block nbd3: shutting down sockets [ 541.557245][ T122] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.623930][ T122] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.673841][ T122] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.703257][ T122] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.765659][ T33] audit: type=1800 audit(1793722461.351:2625): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217526 res=0 errno=-22 [ 541.793218][ T33] audit: type=1800 audit(1793722461.381:2626): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=217531 res=0 errno=-22 [ 541.793250][ T33] audit: type=1800 audit(1793722461.381:2627): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=217535 res=0 errno=-22 [ 541.793274][ T33] audit: type=1800 audit(1793722461.381:2628): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=217534 res=0 errno=-22 [ 541.868193][ T33] audit: type=1800 audit(1793722461.451:2629): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=217537 res=0 errno=-22 [ 541.921083][ T33] audit: type=1800 audit(1793722461.511:2630): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217612 res=0 errno=-22 [ 541.924653][ T33] audit: type=1800 audit(1793722461.511:2631): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=217617 res=0 errno=-22 [ 541.976091][ T122] bridge_slave_1: left allmulticast mode [ 541.976110][ T122] bridge_slave_1: left promiscuous mode [ 541.976227][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.976643][ T33] audit: type=1800 audit(1793722461.561:2632): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=217621 res=0 errno=-22 [ 541.977416][ T33] audit: type=1800 audit(1793722461.561:2633): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=217620 res=0 errno=-22 [ 542.044682][ T122] bridge_slave_0: left allmulticast mode [ 542.044702][ T122] bridge_slave_0: left promiscuous mode [ 542.044810][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.045398][ T33] audit: type=1800 audit(1793722461.631:2634): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=217623 res=0 errno=-22 [ 542.242659][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.245409][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.247634][ T122] bond0 (unregistering): Released all slaves [ 542.427428][ T5301] 8021q: adding VLAN 0 to HW filter on device eth6 [ 542.591628][ T122] hsr_slave_0: left promiscuous mode [ 542.593584][ T122] hsr_slave_1: left promiscuous mode [ 542.594151][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.594164][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.596278][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.596292][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.650762][ T122] veth1_macvtap: left promiscuous mode [ 542.650813][ T122] veth0_macvtap: left promiscuous mode [ 542.650892][ T122] veth1_vlan: left promiscuous mode [ 542.650951][ T122] veth0_vlan: left promiscuous mode [ 542.883418][ T122] team0 (unregistering): Port device team_slave_1 removed [ 542.903145][ T122] team0 (unregistering): Port device team_slave_0 removed [ 543.013315][ T5301] 8021q: adding VLAN 0 to HW filter on device eth7 [ 543.175698][ T5301] 8021q: adding VLAN 0 to HW filter on device eth8 [ 543.227655][ T122] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.273538][ T122] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.320424][ T122] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.342431][ T122] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.490402][ T122] bridge_slave_1: left allmulticast mode [ 543.490422][ T122] bridge_slave_1: left promiscuous mode [ 543.490554][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.491563][ T122] bridge_slave_0: left allmulticast mode [ 543.491576][ T122] bridge_slave_0: left promiscuous mode [ 543.491672][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.684792][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.687526][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.711536][ T122] bond0 (unregistering): Released all slaves [ 543.715502][ T5301] 8021q: adding VLAN 0 to HW filter on device eth9 [ 543.772303][ T122] tipc: Disabling bearer [ 543.772459][ T122] tipc: Left network mode [ 543.962587][ T5301] 8021q: adding VLAN 0 to HW filter on device eth10 [ 544.157620][ T122] hsr_slave_0: left promiscuous mode [ 544.165582][ T122] hsr_slave_1: left promiscuous mode [ 544.166014][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.166027][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.166841][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.166854][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.214561][ T122] veth1_macvtap: left promiscuous mode [ 544.215210][ T122] veth0_macvtap: left promiscuous mode [ 544.215289][ T122] veth1_vlan: left promiscuous mode [ 544.215343][ T122] veth0_vlan: left promiscuous mode [ 544.478114][ T122] team0 (unregistering): Port device team_slave_1 removed [ 544.485794][ T122] team0 (unregistering): Port device team_slave_0 removed [ 544.612303][ T5301] 8021q: adding VLAN 0 to HW filter on device eth11 [ 544.791733][ T5301] 8021q: adding VLAN 0 to HW filter on device eth12 [ 544.986831][ T5301] 8021q: adding VLAN 0 to HW filter on device eth13