last executing test programs: 12.330315s ago: executing program 0 (id=936): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0x4018aee2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) 11.673737805s ago: executing program 0 (id=938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004700500200000000000050020000000000009001f"], 0x44}}, 0x0) 11.43008048s ago: executing program 0 (id=939): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002400010027bd70000000000008000000", @ANYRES64=r0], 0x24}], 0x1}, 0x8008) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x0, 0x0, 0x4}) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x0, 0x0, 0x4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) (async) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x10, &(0x7f0000000140)=[{0x1c, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x3, @uvalue=0x5}, {0x3, @uvalue=0xfffffffffffffff7}, {0x2}]}, 0xb9ea}]}) (async) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x10, &(0x7f0000000140)=[{0x1c, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x3, @uvalue=0x5}, {0x3, @uvalue=0xfffffffffffffff7}, {0x2}]}, 0xb9ea}]}) ftruncate(r3, 0xffff) (async) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r3, @ANYBLOB="0000008000000002000052a00cdd47e6049d30fedd9ab908efb8a705f1cfb85b023c07a52369e29a2811725c01dcbfe0a75c1448f80874a7ed4fa420137df1", @ANYRES32=r1, @ANYBLOB="0000000000000001000000000080000000000000"]) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) (async) write$UHID_CREATE2(r5, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000300), 0x6) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x35) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x35) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20044000) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000000)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev}, 'veth1_to_bridge\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000001c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x4, 0x2, 0x2, 0xff, 0xce}, 0x0, 0x0}) 8.201780767s ago: executing program 1 (id=950): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x19, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x29b, 0x0, 0xfffffffffffffffb}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 6.171000692s ago: executing program 1 (id=954): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x912}, 0x60) 5.506226711s ago: executing program 3 (id=956): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000fffffffffffc00"/88, 0x58) 5.400534047s ago: executing program 1 (id=957): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10}, 0x1c) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) preadv(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) unshare(0x20000400) (async) r10 = dup(r6) (async) r11 = gettid() (async) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000003c0)=0x2) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) (async) write(r12, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000000140)=0x0) (async) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000002c0)=@ublk_start_dev_sqe={0x2e, 0x30, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x3972594e, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r11}}) (async) r15 = socket(0x840000000002, 0x3, 0x100) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000a80)={{r14}, r16, 0x18, @inherit={0x78, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000060000000000000003000000000000000400000000000000260000000000000009000000000000008000000000000000040000000000000081000000000000000b0000000000000009000000000000000000000000000800000000000000ffffff7f00"/120]}, @name="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"}) (async) connect$inet(r15, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) timer_getoverrun(r13) getsockopt$inet_mreqn(r15, 0x0, 0xe, 0x0, &(0x7f0000000080)) (async) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0xd600, 0x0, 0x3, 0x21d, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x323}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67e7, 0x0, 0x2, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xaea, 0x0, 0x0}}, 0x0) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) fchdir(r17) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705821f000200070503", @ANYBLOB="57eb"], 0x0) 5.20766821s ago: executing program 3 (id=958): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 4.738015493s ago: executing program 3 (id=959): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001b0d000001002cbd7000ffdbdf2510040000"], 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c0}, 0x4000010) r4 = syz_open_dev$dvb_demux(&(0x7f0000000740), 0x3, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000780)={0x8, 0x0, 0x3, 0xf, 0x4}) prctl$PR_SET_SECCOMP(0x4f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000840)={0xa, &(0x7f00000007c0)=[{0x6, 0x80, 0x4, 0xb7c}, {0x4, 0x75, 0xcf, 0x7}, {0xfffa, 0x8c, 0xf1, 0x5}, {0x9397, 0x4, 0x81, 0x3}, {0x3, 0x0, 0x9, 0x6}, {0xd, 0x53, 0x1, 0x4}, {0x2ca6, 0x23, 0x3, 0x9}, {0x6, 0x8, 0x8, 0x5}, {0x40, 0x4, 0x8, 0x7c}, {0x6, 0x2, 0x3, 0x70000}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r5, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x7a, 0x3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)='}', 0xff41, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000327bd7000fedbdf250f00000004001601ee81ac618230ff45a6e9efea44b7218b65569b77746588e3b2966e39d414f93096e524400f58ffcacf81f4d6279c9027c137ba6035a14cd893cbd9f8e0b24c300e78d31a64057c78d0c0a3d5cbc65e0cace032d8670de046fb58106b7ae2a042ddb417bad92d4bb39a9c7babfffd634597d1886eff55ab59758a2ac3b6ee5d162e68a64e16916e7d97146209df7e377e8dca610ad33fe40b23f70d50c91726d6ce85449f7d031e482f4e6fb0af826b3b7f94e5385027b3dea4d4d355f085959b51e9dbe9796a036bf3f3bb0400"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000040)='{/!\x00', 0x8000, &(0x7f0000000080)={@align=0x4003ac, {0x1, 0xdace, 0x2, 0x2}}, 0x8, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x6767}, 0x3, &(0x7f0000000600)=[{0x1, 0x5, &(0x7f00000003c0)='*[##]/l#!*\x00', &(0x7f0000000400)="c8d46ea52137f92408df480224cc27b1f337193d5a1262b288e33da0d00ec790e42fe91966bf2404d2b241e1e1dc8f9b96be1910e9c32f98472692dde52ae22167652f8046afb3d1dbf946c56e423692743c4ac36752c4569a5777d87e00b7660aee8cf05a1c39d93b9814f99210e411f2845140ff5786638efe16", 0x7b, 0x2}, {0x2, 0x80c, &(0x7f0000000480)='-\x00', &(0x7f00000004c0)="635af7baed0dc8f7ef4053f469edc9e262ba3f19a569eb50055df34e97d9bf0a28b4c72cc8cd548808093df17c4ba7a3b988340da566278b9946f650342eb4149c961fcb51c672cb8aa72943ab036d656f682872c5a3f3443184b3df7eb37c661d67f47c0bd92dae146106e1eab131da98026c924792b2c419741b0fd50379f23c3af689d3ce675dddf44133bab14bf2038f19072a935688b080cdc7924581f119d036f1fa8afefcb3658d12f05462b5fbc49588ba83d26e12edf1e9920a15", 0xbf, 0x22}, {0x3, 0xfffffffb, &(0x7f0000000580)='wlan1\x00', &(0x7f00000005c0)="ec61d24657743cc49789ee79ede19cb391c303d61e79bd48fe42", 0x1a, 0x28}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x1, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0xffffffffffffffff, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c009900020000002e000000080026006c09000008002700"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000700), 0x3) 1.960109023s ago: executing program 2 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget\x00', 0x28) mount(0x0, 0x0, &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000402505a0a4000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget/ep1in-bulk\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x401, 0x0, 0x1136f858, 0xd, 0xffffffffffffffff}, 0x0, 0x0) 1.770259275s ago: executing program 0 (id=965): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e26, @local}, {0x1}, 0x10, {0x2, 0x4e22, @loopback}, 'syzkaller0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x200000000000000, 0x2c048040}, 0xe840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.759652476s ago: executing program 2 (id=966): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xe2a, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r3, 0x2}, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000440)={0x87, @empty, 0x4e20, 0x0, 'rr\x00', 0x20, 0x6, 0x41}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0x4e014) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf252c00000008000300", @ANYRES32=r8, @ANYBLOB="84949abfc76975675c826234543027aad3f360538bc60ea31a304b0e11fadda109ca19a0433faa94aec7eae03a5217dbecfc0717a814098ecc59d3ec90bdd57772625482cc917aa8ce21a731f8a760899bf33f2772c2309706fe13ae9f330b2835c2a2f34915b0242834b86897fe80b5b248587821fe3fcff7e13748a5221df9f0ab01f701f16d795c3a64a15fecdbe709c7d2174c99a9cd0762adcc31c061987a8e00eb949ede9464727bebb5cc60ac91"], 0x1c}}, 0x20008004) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000200)=0xa) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x40, 0x0, 0x60) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002b0009082dbd7000fedbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) 1.59132836s ago: executing program 0 (id=967): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fdb9", 0x10}], 0x1}, 0x400c804) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000a80)=0x8000000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a12000e800000006c07010033d43afffe800000000000000000000000000010ff0200f42d000000000000000000000188"], 0x340a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) r4 = syz_open_dev$evdev(0x0, 0x3, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r5, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x8840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002d80)={'syztnl2\x00', 0x0}) sendmsg$inet(r0, 0x0, 0x40840) bind$bt_l2cap(r0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, 0x0, 0x0) listen(r0, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.282112352s ago: executing program 2 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys/module/acpi/parameters/ec_event_clearing\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {0x2d000000}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 1.235187739s ago: executing program 3 (id=969): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xffa1}, 0x0) 1.06600208s ago: executing program 1 (id=970): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 910.073768ms ago: executing program 2 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000200001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) 874.936815ms ago: executing program 3 (id=972): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) inotify_init1(0x800) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x800000) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 762.381894ms ago: executing program 2 (id=973): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000102030408000100e1010203", 0x34, 0x0, &(0x7f0000000100)=@nl, 0xc) (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r3, &(0x7f00000017c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) 582.288187ms ago: executing program 1 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget\x00', 0x28) mount(0x0, &(0x7f0000000140)='./gadget\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000402505a0a4000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget/ep1in-bulk\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x401, 0x0, 0x1136f858, 0xd, 0xffffffffffffffff}, 0x0, 0x0) 282.850926ms ago: executing program 3 (id=975): syz_usb_connect(0x2, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a070581024000000705020240"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="006100000000000000000000000000000000014100"/34, 0x22) 139.457242ms ago: executing program 1 (id=976): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x5608, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/122, 0x0, 0xffff1000}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='J', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="d9", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x3}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r5 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(r0, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000140)='./file1\x00', 0x1400) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tcp_congestion(r6, 0x0, 0x0) write$P9_RWSTAT(r5, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) 30.542849ms ago: executing program 0 (id=977): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x1, {0x0, 0x1, 0x1}, 0xfe}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x9, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x4b) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r5, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") 0s ago: executing program 2 (id=978): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1b, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000290000003b00000016000000000000008810"], 0x10a0}, 0x34004054) kernel console output (not intermixed with test programs): TLOCKUP [ 150.250897][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.250908][ T7373] Call Trace: [ 150.250915][ T7373] [ 150.250922][ T7373] dump_stack_lvl+0xe8/0x150 [ 150.250947][ T7373] should_fail_ex+0x3eb/0x540 [ 150.250971][ T7373] should_failslab+0xa8/0x100 [ 150.250991][ T7373] __kmalloc_node_noprof+0xfb/0x720 [ 150.251010][ T7373] ? fifo_init+0x3ed/0x6d0 [ 150.251027][ T7373] ? qdisc_alloc+0x92/0x9d0 [ 150.251042][ T7373] ? qdisc_alloc+0x92/0x9d0 [ 150.251058][ T7373] ? __pfx_fifo_init+0x10/0x10 [ 150.251078][ T7373] qdisc_alloc+0x92/0x9d0 [ 150.251109][ T7373] qdisc_create_dflt+0x8e/0x4e0 [ 150.251131][ T7373] taprio_init+0x410/0xc00 [ 150.251146][ T7373] ? sock_write_iter+0x2de/0x3e0 [ 150.251163][ T7373] ? vfs_write+0x612/0xba0 [ 150.251178][ T7373] ? ksys_write+0x150/0x270 [ 150.251206][ T7373] ? __pfx_taprio_init+0x10/0x10 [ 150.251223][ T7373] ? qdisc_alloc+0x6e7/0x9d0 [ 150.251242][ T7373] ? __pfx_taprio_init+0x10/0x10 [ 150.251261][ T7373] qdisc_create+0xc23/0x1450 [ 150.251281][ T7373] ? lockdep_rtnl_is_held+0x26/0x40 [ 150.251300][ T7373] ? qdisc_lookup+0x364/0x6c0 [ 150.251319][ T7373] tc_modify_qdisc+0x17af/0x2390 [ 150.251348][ T7373] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 150.251393][ T7373] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 150.251414][ T7373] rtnetlink_rcv_msg+0x7b9/0xc00 [ 150.251432][ T7373] ? netlink_sendmsg+0x577/0xae0 [ 150.251453][ T7373] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 150.251471][ T7373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.251490][ T7373] ? __lock_acquire+0x747/0x2de0 [ 150.251521][ T7373] netlink_rcv_skb+0x226/0x4a0 [ 150.251540][ T7373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.251560][ T7373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.251590][ T7373] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.251608][ T7373] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.251631][ T7373] netlink_unicast+0x7bd/0x940 [ 150.251659][ T7373] netlink_sendmsg+0x7c3/0xae0 [ 150.251683][ T7373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.251708][ T7373] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.251726][ T7373] ? lock_acquire+0x115/0x350 [ 150.251745][ T7373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.251761][ T7373] sock_sendmsg_nosec+0x14e/0x190 [ 150.251783][ T7373] sock_write_iter+0x2de/0x3e0 [ 150.251803][ T7373] ? __pfx_sock_write_iter+0x10/0x10 [ 150.251828][ T7373] ? bpf_lsm_file_permission+0x9/0x20 [ 150.251846][ T7373] ? security_file_permission+0x75/0x260 [ 150.251873][ T7373] vfs_write+0x612/0xba0 [ 150.251898][ T7373] ? __pfx_vfs_write+0x10/0x10 [ 150.251919][ T7373] ? __fget_files+0x3a2/0x420 [ 150.251936][ T7373] ? __fget_files+0x2a/0x420 [ 150.251956][ T7373] ? fdget+0x1ac/0x250 [ 150.251979][ T7373] ksys_write+0x150/0x270 [ 150.251999][ T7373] ? __pfx_ksys_write+0x10/0x10 [ 150.252028][ T7373] do_syscall_64+0x166/0x520 [ 150.252045][ T7373] ? trace_irq_disable+0x3b/0x140 [ 150.252061][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.252080][ T7373] ? clear_bhb_loop+0x70/0xc0 [ 150.252105][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.252123][ T7373] RIP: 0033:0x7f153159e159 [ 150.252140][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.252155][ T7373] RSP: 002b:00007f15324d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.252174][ T7373] RAX: ffffffffffffffda RBX: 00007f1531825fa0 RCX: 00007f153159e159 [ 150.252187][ T7373] RDX: 00000000000000a0 RSI: 0000200000000100 RDI: 0000000000000003 [ 150.252197][ T7373] RBP: 00007f15324d8090 R08: 0000000000000000 R09: 0000000000000000 [ 150.252206][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.252216][ T7373] R13: 00007f1531826038 R14: 00007f1531825fa0 R15: 00007ffed8266f68 [ 150.252243][ T7373] [ 150.421136][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 150.666246][ T5693] wwan wwan0: port wwan0mbim0 disconnected [ 151.825470][ T7436] binder: Failure in copy_transaction_data: EFAULT [ 151.908946][ T7438] overlayfs: failed to resolve 'lower1': -2 [ 152.127408][ T7440] binder: Write failure EFAULT in pid:349 [ 152.375700][ T7448] device-mapper: ioctl: Invalid ioctl structure: name m, dev 32 [ 153.025435][ T7474] FAULT_INJECTION: forcing a failure. [ 153.025435][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 153.025468][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.1.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.025495][ T7474] Tainted: [L]=SOFTLOCKUP [ 153.025503][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.025514][ T7474] Call Trace: [ 153.025522][ T7474] [ 153.025531][ T7474] dump_stack_lvl+0xe8/0x150 [ 153.025556][ T7474] should_fail_ex+0x3eb/0x540 [ 153.025581][ T7474] should_failslab+0xa8/0x100 [ 153.025603][ T7474] __kvmalloc_node_noprof+0x171/0x820 [ 153.025626][ T7474] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 153.025647][ T7474] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 153.025672][ T7474] __nf_hook_entries_try_shrink+0x34e/0x720 [ 153.025702][ T7474] __nf_unregister_net_hook+0x488/0x710 [ 153.025730][ T7474] nf_unregister_net_hook+0x9a/0xf0 [ 153.025751][ T7474] nf_tables_abort+0x6a8f/0x8bb0 [ 153.025796][ T7474] ? __pfx_nf_tables_abort+0x10/0x10 [ 153.025826][ T7474] ? kasan_quarantine_put+0xbb/0x1f0 [ 153.025849][ T7474] ? kfree+0x1c5/0x650 [ 153.025865][ T7474] ? nfnetlink_rcv+0x16fd/0x28c0 [ 153.025888][ T7474] nfnetlink_rcv+0x1f30/0x28c0 [ 153.025936][ T7474] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 153.025994][ T7474] ? skb_clone+0x246/0x3a0 [ 153.026025][ T7474] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.026051][ T7474] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.026078][ T7474] netlink_unicast+0x7bd/0x940 [ 153.026106][ T7474] netlink_sendmsg+0x7c3/0xae0 [ 153.026131][ T7474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.026158][ T7474] ? apparmor_socket_sendmsg+0x98/0x360 [ 153.026180][ T7474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.026198][ T7474] sock_sendmsg_nosec+0x14e/0x190 [ 153.026221][ T7474] ____sys_sendmsg+0x54e/0x850 [ 153.026245][ T7474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.026270][ T7474] ? import_iovec+0x73/0xa0 [ 153.026293][ T7474] ___sys_sendmsg+0x2a5/0x360 [ 153.026308][ T7474] ? __lock_acquire+0x747/0x2de0 [ 153.026331][ T7474] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.026352][ T7474] ? futex_wait+0x2a2/0x390 [ 153.026397][ T7474] ? __fget_files+0x3a2/0x420 [ 153.026415][ T7474] ? __fget_files+0x2a/0x420 [ 153.026439][ T7474] __x64_sys_sendmsg+0x1b1/0x290 [ 153.026460][ T7474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.026498][ T7474] do_syscall_64+0x166/0x520 [ 153.026516][ T7474] ? trace_irq_disable+0x3b/0x140 [ 153.026532][ T7474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.026551][ T7474] ? clear_bhb_loop+0x70/0xc0 [ 153.026571][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.026591][ T7474] RIP: 0033:0x7f551619e159 [ 153.026608][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.026624][ T7474] RSP: 002b:00007f5517138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.026645][ T7474] RAX: ffffffffffffffda RBX: 00007f5516425fa0 RCX: 00007f551619e159 [ 153.026660][ T7474] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 153.026672][ T7474] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 153.026684][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.026695][ T7474] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 153.026726][ T7474] [ 153.171093][ T5693] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 153.369804][ T5693] usb 1-1: Using ep0 maxpacket: 8 [ 153.392351][ T5693] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.392401][ T5693] usb 1-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 153.402236][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 153.402267][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.402290][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 153.402312][ T5693] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 153.402331][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 153.402349][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.481913][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.481939][ T5693] usb 1-1: Product: syz [ 153.481952][ T5693] usb 1-1: Manufacturer: syz [ 153.481965][ T5693] usb 1-1: SerialNumber: syz [ 153.504034][ T5693] usb 1-1: config 0 descriptor?? [ 153.509559][ T7468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.533011][ T5693] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.875051][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.876523][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.073106][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.110487][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 154.237903][ T7506] device-mapper: ioctl: Invalid ioctl structure: name m, dev 32000000000000 [ 154.249465][ T10] usb 3-1: device descriptor read/64, error -71 [ 154.379131][ T5345] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.516542][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 154.538704][ T5345] usb 4-1: Using ep0 maxpacket: 16 [ 154.539426][ T5345] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 154.540735][ T5345] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 154.540757][ T5345] usb 4-1: config 0 has no interface number 0 [ 154.540794][ T5345] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 154.540817][ T5345] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 154.545538][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.545560][ T5345] usb 4-1: Product: syz [ 154.545573][ T5345] usb 4-1: Manufacturer: syz [ 154.545586][ T5345] usb 4-1: SerialNumber: syz [ 154.556095][ T5345] usb 4-1: config 0 descriptor?? [ 154.557859][ T7502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 154.557956][ T7502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 154.655622][ T10] usb 3-1: device descriptor read/64, error -71 [ 154.774598][ T10] usb usb3-port1: attempt power cycle [ 154.775227][ T1768] usb 1-1: USB disconnect, device number 36 [ 154.814482][ T7502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 154.814585][ T7502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 155.077124][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 155.157899][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 155.179676][ T10] usb 3-1: device descriptor read/8, error -71 [ 155.251504][ T5345] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 105 [ 155.435540][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 155.458656][ T10] usb 3-1: device descriptor read/8, error -71 [ 155.579866][ T10] usb usb3-port1: unable to enumerate USB device [ 155.777901][ T990] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 155.938659][ T990] usb 2-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=1.00 [ 155.945292][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.945316][ T990] usb 2-1: Product: syz [ 155.945329][ T990] usb 2-1: Manufacturer: syz [ 155.945342][ T990] usb 2-1: SerialNumber: syz [ 155.992797][ T990] hso 2-1:1.0: Can't find BULK endpoints [ 156.397227][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 156.559381][ T10] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.560435][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 156.560481][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.560505][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.560531][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.560555][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.578336][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.579290][ T10] usb 1-1: invalid MIDI out EP 0 [ 156.826300][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 156.861585][ T990] usb 1-1: USB disconnect, device number 37 [ 157.334867][ T5693] usb 4-1: USB disconnect, device number 27 [ 157.546890][ T7566] tipc: Enabling of bearer rejected, already enabled [ 157.822971][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 157.823026][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 157.823056][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 158.117703][ T1768] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 158.289791][ T1768] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 158.291397][ T1768] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.294336][ T1768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.294367][ T1768] usb 4-1: SerialNumber: syz [ 158.353018][ T5345] usb 2-1: USB disconnect, device number 37 [ 159.026606][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.064451][ T7603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.110947][ T1768] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 159.307295][ T990] usb 4-1: USB disconnect, device number 28 [ 159.314020][ T7606] netlink: 'syz.1.601': attribute type 20 has an invalid length. [ 159.331783][ T990] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 159.472613][ T7609] binder: Write failure EFAULT in pid:374 [ 160.224310][ T5345] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 160.386284][ T5345] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 160.425297][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.425320][ T5345] usb 3-1: Product: syz [ 160.425333][ T5345] usb 3-1: Manufacturer: syz [ 160.425345][ T5345] usb 3-1: SerialNumber: syz [ 160.523089][ T7639] syzkaller1: entered promiscuous mode [ 160.523290][ T7639] syzkaller1: entered allmulticast mode [ 160.916281][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.916343][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.131947][ T990] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 161.295021][ T990] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 161.311005][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.311030][ T990] usb 2-1: Product: syz [ 161.311043][ T990] usb 2-1: Manufacturer: syz [ 161.311056][ T990] usb 2-1: SerialNumber: syz [ 161.358257][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.358862][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.785636][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 161.785697][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.827956][ T7667] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 162.203726][ T7676] loop3: detected capacity change from 0 to 7 [ 162.207492][ T7676] Dev loop3: unable to read RDB block 7 [ 162.207540][ T7676] loop3: unable to read partition table [ 162.207720][ T7676] loop3: partition table beyond EOD, truncated [ 162.209669][ T7676] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.498147][ T7682] device-mapper: ioctl: Invalid ioctl structure: name m, dev 3200 [ 162.622492][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 162.622531][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 163.013105][ T5693] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 163.173677][ T5693] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 163.179866][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.179888][ T5693] usb 1-1: Product: syz [ 163.179902][ T5693] usb 1-1: Manufacturer: syz [ 163.179915][ T5693] usb 1-1: SerialNumber: syz [ 163.326462][ T5693] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.369507][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 163.370301][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 163.378257][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 163.378306][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 163.378323][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.378929][ T5345] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.379077][ T33] audit: type=1326 audit(1791102943.713:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.1.612" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f551619e159 code=0x0 [ 163.390017][ T5345] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 163.419192][ T5345] usb 3-1: USB disconnect, device number 31 [ 163.468297][ T7691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.626'. [ 163.477941][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 163.484419][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 163.484928][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 163.485023][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.545578][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.583658][ T990] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 163.628961][ T5686] usb 1-1: USB disconnect, device number 38 [ 163.642857][ T990] usb 2-1: USB disconnect, device number 38 [ 163.683925][ T7694] netlink: 'syz.3.627': attribute type 4 has an invalid length. [ 163.683946][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 164.121375][ T7707] netlink: 'syz.2.633': attribute type 39 has an invalid length. [ 164.359429][ T762] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.359472][ T762] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.359503][ T762] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.359533][ T762] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.498121][ T5693] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 164.498530][ T5693] ath9k_htc: Failed to initialize the device [ 164.506661][ T5686] usb 1-1: ath9k_htc: USB layer deinitialized [ 164.851596][ T7725] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 164.868772][ T5686] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 165.049122][ T5686] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 165.052013][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.052056][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.097046][ T5686] usb 1-1: config 0 descriptor?? [ 165.223308][ T7729] hub 8-0:1.0: USB hub found [ 165.227828][ T7729] hub 8-0:1.0: 1 port detected [ 165.537527][ T5686] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 165.567910][ T5686] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input13 [ 165.753326][ T990] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 165.804673][ T7733] block device autoloading is deprecated and will be removed. [ 165.924611][ T990] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 165.950774][ T5686] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 165.953811][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.953835][ T990] usb 2-1: Product: syz [ 165.953848][ T990] usb 2-1: Manufacturer: syz [ 165.953861][ T990] usb 2-1: SerialNumber: syz [ 166.289482][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.317726][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.444497][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 166.444546][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 166.634414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 166.689193][ T7754] netlink: 64 bytes leftover after parsing attributes in process `syz.3.644'. [ 166.709327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 166.719888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 166.773336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.784047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 166.816221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 166.837430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.869485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.915109][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.915462][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.922944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 166.954989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 168.178139][ T5686] usb 1-1: USB disconnect, device number 39 [ 169.193798][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 169.194268][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 169.197546][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 169.197605][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 169.197623][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.198265][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.271036][ T990] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 169.295146][ T990] usb 2-1: USB disconnect, device number 39 [ 169.369824][ T7763] rdma_rxe: rxe_newlink: failed to add syz_tun [ 169.972840][ T7779] binder: Failure in copy_transaction_data: EINVAL [ 169.998448][ T7781] FAULT_INJECTION: forcing a failure. [ 169.998448][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 169.998481][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.1.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.998508][ T7781] Tainted: [L]=SOFTLOCKUP [ 169.998515][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.998526][ T7781] Call Trace: [ 169.998534][ T7781] [ 169.998543][ T7781] dump_stack_lvl+0xe8/0x150 [ 169.998569][ T7781] should_fail_ex+0x3eb/0x540 [ 169.998595][ T7781] should_failslab+0xa8/0x100 [ 169.998617][ T7781] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 169.998639][ T7781] ? alloc_inode+0xb8/0x1b0 [ 169.998655][ T7781] ? alloc_inode+0xb8/0x1b0 [ 169.998678][ T7781] alloc_inode+0xb8/0x1b0 [ 169.998697][ T7781] path_from_stashed+0x205/0x580 [ 169.998725][ T7781] proc_ns_get_link+0x16b/0x2a0 [ 169.998744][ T7781] ? __pfx_proc_ns_get_link+0x10/0x10 [ 169.998766][ T7781] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 169.998787][ T7781] ? __pfx_proc_ns_get_link+0x10/0x10 [ 169.998806][ T7781] pick_link+0x72a/0xfd0 [ 169.998832][ T7781] step_into_slowpath+0x58a/0x820 [ 169.998852][ T7781] ? __pfx_step_into_slowpath+0x10/0x10 [ 169.998878][ T7781] path_openat+0x989/0x1da0 [ 169.998912][ T7781] do_file_open+0x23e/0x4a0 [ 169.998942][ T7781] ? __pfx_do_file_open+0x10/0x10 [ 169.998984][ T7781] ? _raw_spin_unlock+0x28/0x50 [ 169.999002][ T7781] ? alloc_fd+0x6af/0x760 [ 169.999031][ T7781] do_sys_openat2+0x115/0x200 [ 169.999050][ T7781] ? __se_sys_futex+0x3a8/0x450 [ 169.999069][ T7781] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.999093][ T7781] ? rcu_is_watching+0x16/0xb0 [ 169.999117][ T7781] __x64_sys_openat+0x138/0x170 [ 169.999136][ T7781] do_syscall_64+0x166/0x520 [ 169.999152][ T7781] ? trace_irq_disable+0x3b/0x140 [ 169.999167][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.999187][ T7781] ? clear_bhb_loop+0x70/0xc0 [ 169.999207][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.999225][ T7781] RIP: 0033:0x7f551615e98e [ 169.999243][ T7781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.999256][ T7781] RSP: 002b:00007f5517137f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.999276][ T7781] RAX: ffffffffffffffda RBX: 00007f55171386c0 RCX: 00007f551615e98e [ 169.999288][ T7781] RDX: 0000000000000000 RSI: 00007f55162347a6 RDI: ffffffffffffff9c [ 169.999300][ T7781] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 169.999311][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.999321][ T7781] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 169.999348][ T7781] [ 170.359784][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 170.360071][ T7786] openvswitch: netlink: EtherType 300 is less than min 600 [ 170.728500][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 171.094803][ T7811] Bluetooth: hci0: unsupported parameter 5135 [ 171.094825][ T7811] Bluetooth: hci0: unsupported parameter 8192 [ 171.094838][ T7811] Bluetooth: hci0: unsupported parameter 5135 [ 171.094848][ T7811] Bluetooth: hci0: unsupported parameter 8192 [ 171.263861][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 171.433125][ T10] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 171.461096][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.461122][ T10] usb 2-1: Product: syz [ 171.461135][ T10] usb 2-1: Manufacturer: syz [ 171.461148][ T10] usb 2-1: SerialNumber: syz [ 171.717216][ T7822] can0: slcan on ttyprintk. [ 171.756966][ T7827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.670'. [ 171.934773][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 171.934832][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 171.956699][ T5612] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 171.964448][ T7821] can0 (unregistered): slcan off ttyprintk. [ 172.095308][ T5612] usb 4-1: device descriptor read/64, error -71 [ 172.354764][ T5612] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 172.480782][ T7836] vivid-000: ================= START STATUS ================= [ 172.480835][ T7836] vivid-000: Test Pattern: 75% Colorbar [ 172.480868][ T7836] vivid-000: Fill Percentage of Frame: 100 [ 172.480890][ T7836] vivid-000: Horizontal Movement: No Movement [ 172.480907][ T7836] vivid-000: Vertical Movement: No Movement [ 172.480925][ T7836] vivid-000: OSD Text Mode: All [ 172.480941][ T7836] vivid-000: Show Border: false [ 172.480958][ T7836] vivid-000: Show Square: false [ 172.480974][ T7836] vivid-000: Sensor Flipped Horizontally: false [ 172.480992][ T7836] vivid-000: Sensor Flipped Vertically: false [ 172.481009][ T7836] vivid-000: Insert SAV Code in Image: false [ 172.481027][ T7836] vivid-000: Insert EAV Code in Image: false [ 172.481044][ T7836] vivid-000: Insert Video Guard Band: false [ 172.481060][ T7836] vivid-000: Reduced Framerate: false [ 172.481077][ T7836] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 172.481095][ T7836] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 172.481114][ T7836] vivid-000: Enable Capture Cropping: true [ 172.481131][ T7836] vivid-000: Enable Capture Composing: true [ 172.481148][ T7836] vivid-000: Enable Capture Scaler: true [ 172.481165][ T7836] vivid-000: Timestamp Source: End of Frame [ 172.481181][ T7836] vivid-000: Colorspace: sRGB [ 172.481198][ T7836] vivid-000: Transfer Function: Default [ 172.481214][ T7836] vivid-000: Y'CbCr Encoding: Default [ 172.481231][ T7836] vivid-000: HSV Encoding: Hue 0-179 [ 172.481248][ T7836] vivid-000: Quantization: Default [ 172.481264][ T7836] vivid-000: Apply Alpha To Red Only: false [ 172.481281][ T7836] vivid-000: Standard Aspect Ratio: 4x3 [ 172.481298][ T7836] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 172.481320][ T7836] vivid-000: DV Timings: 640x480p59 inactive [ 172.481341][ T7836] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 172.481359][ T7836] vivid-000: Maximum EDID Blocks: 2 [ 172.481377][ T7836] vivid-000: Limited RGB Range (16-235): false [ 172.481395][ T7836] vivid-000: Rx RGB Quantization Range: Automatic [ 172.481412][ T7836] vivid-000: Power Present: 0x00000001 [ 172.481435][ T7836] tpg source WxH: 320x240 (Y'CbCr) [ 172.482274][ T7836] tpg field: 1 [ 172.482283][ T7836] tpg crop: (0,0)/320x240 [ 172.482295][ T7836] tpg compose: (0,0)/320x240 [ 172.482308][ T7836] tpg colorspace: 8 [ 172.482315][ T7836] tpg transfer function: 0/0 [ 172.482324][ T7836] tpg Y'CbCr encoding: 0/0 [ 172.482333][ T7836] tpg quantization: 0/0 [ 172.482342][ T7836] tpg RGB range: 0/2 [ 172.482350][ T7836] vivid-000: ================== END STATUS ================== [ 172.503178][ T5612] usb 4-1: device descriptor read/64, error -71 [ 172.624519][ T5612] usb usb4-port1: attempt power cycle [ 173.005515][ T5612] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.036063][ T5612] usb 4-1: device descriptor read/8, error -71 [ 173.117086][ T7845] netlink: 'syz.0.677': attribute type 16 has an invalid length. [ 173.117108][ T7845] netlink: 164 bytes leftover after parsing attributes in process `syz.0.677'. [ 173.351361][ T5612] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 173.525429][ T7849] gadgetfs: bound to dummy_udc driver [ 173.547545][ T5612] usb 4-1: device descriptor read/8, error -71 [ 173.592337][ T7851] Invalid source name [ 173.592355][ T7851] UBIFS error (pid: 7851): cannot open "usb0", error -22 [ 173.655514][ T5612] usb usb4-port1: unable to enumerate USB device [ 174.435504][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 174.474238][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 174.474702][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 174.474749][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 174.474767][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.475508][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.679259][ T7864] FAULT_INJECTION: forcing a failure. [ 174.679259][ T7864] name fail_futex, interval 1, probability 0, space 0, times 0 [ 174.679295][ T7864] CPU: 1 UID: 0 PID: 7864 Comm: syz.0.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.679322][ T7864] Tainted: [L]=SOFTLOCKUP [ 174.679329][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.679354][ T7864] Call Trace: [ 174.679363][ T7864] [ 174.679371][ T7864] dump_stack_lvl+0xe8/0x150 [ 174.679398][ T7864] should_fail_ex+0x3eb/0x540 [ 174.679423][ T7864] get_futex_key+0x1b4/0x1580 [ 174.679448][ T7864] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 174.679473][ T7864] ? __pfx_get_futex_key+0x10/0x10 [ 174.679504][ T7864] futex_wake+0x119/0x5f0 [ 174.679600][ T7864] ? __pfx_futex_wake+0x10/0x10 [ 174.679638][ T7864] ? __se_sys_mbind+0xe40/0x10e0 [ 174.679674][ T7864] do_futex+0x458/0x4e0 [ 174.679699][ T7864] ? __pfx_do_futex+0x10/0x10 [ 174.679715][ T7864] ? __fget_files+0x3a2/0x420 [ 174.679742][ T7864] __se_sys_futex+0x3a8/0x450 [ 174.679767][ T7864] ? __pfx___se_sys_futex+0x10/0x10 [ 174.679785][ T7864] ? rcu_is_watching+0x16/0xb0 [ 174.679811][ T7864] ? __x64_sys_futex+0x21/0xf0 [ 174.679832][ T7864] do_syscall_64+0x166/0x520 [ 174.679850][ T7864] ? trace_irq_disable+0x3b/0x140 [ 174.679867][ T7864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.679886][ T7864] ? clear_bhb_loop+0x70/0xc0 [ 174.679907][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.679927][ T7864] RIP: 0033:0x7f096699e159 [ 174.679955][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.679972][ T7864] RSP: 002b:00007f09678350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.679993][ T7864] RAX: ffffffffffffffda RBX: 00007f0966c25fa8 RCX: 00007f096699e159 [ 174.680008][ T7864] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0966c25fac [ 174.680021][ T7864] RBP: 00007f0966c25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 174.680034][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.680046][ T7864] R13: 00007f0966c26038 R14: 00007ffe58e91830 R15: 00007ffe58e91918 [ 174.680073][ T7864] [ 174.925964][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 174.975908][ T10] usb 2-1: USB disconnect, device number 40 [ 175.227261][ T7871] jffs2: notice: (7871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 175.237366][ T7872] gadgetfs: bound to dummy_udc driver [ 175.516251][ T7883] jffs2: notice: (7883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 175.663772][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 175.867495][ T5612] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 176.032323][ T5612] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.033537][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.049290][ T5612] usb 1-1: config 0 descriptor?? [ 176.055284][ T5612] cp210x 1-1:0.0: cp210x converter detected [ 176.292597][ T5612] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 176.292624][ T5612] cp210x 1-1:0.0: querying part number failed [ 176.304493][ T5612] usb 1-1: cp210x converter now attached to ttyUSB0 [ 176.476365][ T5693] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 176.638929][ T5693] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 176.658081][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.658105][ T5693] usb 2-1: Product: syz [ 176.658118][ T5693] usb 2-1: Manufacturer: syz [ 176.658131][ T5693] usb 2-1: SerialNumber: syz [ 176.698651][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.697'. [ 176.909789][ T7910] gadgetfs: bound to dummy_udc driver [ 177.118304][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 177.118364][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 178.851614][ T10] usb 1-1: USB disconnect, device number 40 [ 178.903407][ T5612] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 179.004435][ T7936] netlink: 168 bytes leftover after parsing attributes in process `syz.3.707'. [ 179.127527][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.128473][ T10] cp210x 1-1:0.0: device disconnected [ 179.137776][ T5612] usb 3-1: Using ep0 maxpacket: 8 [ 179.198482][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.198530][ T5612] usb 3-1: New USB device found: idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 179.200297][ T5612] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 179.200327][ T5612] usb 3-1: can't read configurations, error -71 [ 179.256428][ T7938] gadgetfs: bound to dummy_udc driver [ 179.696242][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 179.697117][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 179.697518][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 179.697564][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 179.697582][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.698240][ T5693] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.770432][ T5693] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 179.800824][ T5693] usb 2-1: USB disconnect, device number 41 [ 180.120700][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 180.344697][ T10] usb 4-1: device descriptor read/64, error -71 [ 180.419574][ T5612] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 180.579847][ T5612] usb 3-1: Using ep0 maxpacket: 16 [ 180.580513][ T5612] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 180.583743][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.583769][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.583789][ T5612] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.583826][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.616836][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 180.643253][ T5612] usb 3-1: config 0 descriptor?? [ 180.756464][ T10] usb 4-1: device descriptor read/64, error -71 [ 180.870604][ T10] usb usb4-port1: attempt power cycle [ 181.150777][ T5612] HID 045e:07da: Invalid code 65791 type 1 [ 181.178476][ T5612] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input14 [ 181.222913][ T5612] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 181.264412][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 181.287945][ T10] usb 4-1: device descriptor read/8, error -71 [ 181.378672][ T5612] usb 3-1: USB disconnect, device number 34 [ 181.519634][ T7964] fido_id[7964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.541562][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 181.564476][ T10] usb 4-1: device descriptor read/8, error -71 [ 181.681874][ T10] usb usb4-port1: unable to enumerate USB device [ 181.691135][ T5693] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 181.819361][ T5764] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 181.864920][ T5693] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.876204][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.884673][ T5693] usb 1-1: config 0 descriptor?? [ 181.891910][ T5693] cp210x 1-1:0.0: cp210x converter detected [ 181.982689][ T5764] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 181.983766][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.985236][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.985258][ T5764] usb 2-1: SerialNumber: syz [ 182.119710][ T5693] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 182.119738][ T5693] cp210x 1-1:0.0: querying part number failed [ 182.131339][ T5693] usb 1-1: cp210x converter now attached to ttyUSB0 [ 182.180511][ T7970] gadgetfs: bound to dummy_udc driver [ 182.636455][ T7975] overlayfs: upper fs does not support tmpfile. [ 182.836156][ T5764] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 183.130582][ T7980] syzkaller1: entered promiscuous mode [ 183.130800][ T7980] syzkaller1: entered allmulticast mode [ 183.202596][ T5693] usb 2-1: USB disconnect, device number 42 [ 183.210286][ T5693] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 183.326096][ T5612] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 183.486970][ T5612] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 183.510178][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.510204][ T5612] usb 3-1: Product: syz [ 183.510217][ T5612] usb 3-1: Manufacturer: syz [ 183.510230][ T5612] usb 3-1: SerialNumber: syz [ 183.994267][ T5612] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 183.994325][ T5612] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 184.192265][ T5693] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 184.352004][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 184.357595][ T5693] usb 4-1: New USB device found: idVendor=0582, idProduct=0000, bcdDevice=0.40 [ 184.361680][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.361706][ T5693] usb 4-1: Product: à°Š [ 184.361720][ T5693] usb 4-1: Manufacturer: 鷋텲쳟讘â£æœŸâ‰’ê·ã•£ë¼á¿ºâ®±ï…‘涤唅फ़య뇖掳â·ã‘ⶼ☇烾梑햛Ζ岕޳ê„ã‹™ç—₮ᵰ요塀뻗円䙿辆ï’㮀ä„臇枩ꫢ쫀 [ 184.361738][ T5693] usb 4-1: SerialNumber: 冑뒨뼈ﻩ䠕約ꔎä²äš”é´¦è½ç»‰å²Žïºâ‚Ÿêˆ™ã‡™å˜¬á¿ƒì˜‡ãŒå´²é®›ê”ᅗ⌜ꅷ㭪宆먰ᄬꇞ㊈ݢ襕ܨ︭筦èŠÛ™å‘ªêšï•«å¶£î¿€â¦£à±Žë›–祷ⶠഡ亴沟越姖藜廖໘Ŕꀀ혜뎄å±â£ªé¢¬á¨¦á³·æ—쩙⬥ë©ó¼©¾å˜¡é­Œä–ºé¥´à©©â‚˜á©šé‚ªå©Šá££å¡¦ã…¢ç©ºë¡‘ᨅ㺄븯뚩ã£é—¦ç—㥣艕ᥤ攨ʑ祝Զ⣒蟛璜䅋 [ 184.624943][ T5693] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.650590][ T5693] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 184.842875][ T990] usb 1-1: USB disconnect, device number 41 [ 184.864421][ T990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.870092][ T990] cp210x 1-1:0.0: device disconnected [ 184.998925][ T8010] gadgetfs: bound to dummy_udc driver [ 185.110519][ T5612] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 185.112667][ T5612] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 185.113313][ T5612] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 185.154212][ T5693] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 185.181954][ T5612] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 185.333291][ T8014] jffs2: notice: (8014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 185.364497][ T5693] usb 4-1: USB disconnect, device number 37 [ 185.605014][ T8022] binder: Failure in copy_transaction_data: EINVAL [ 185.610126][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.807345][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 186.129299][ T5693] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 186.366965][ T5686] usb 3-1: USB disconnect, device number 35 [ 186.396323][ T5693] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.400645][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.400668][ T5693] usb 4-1: Product: syz [ 186.400682][ T5693] usb 4-1: Manufacturer: syz [ 186.400695][ T5693] usb 4-1: SerialNumber: syz [ 186.427768][ T5693] usb 4-1: config 0 descriptor?? [ 186.664394][ T5693] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.808357][ T8049] gadgetfs: bound to dummy_udc driver [ 186.927276][ T5686] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 186.959483][ T5701] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 187.031879][ T8052] loop0: detected capacity change from 0 to 1 [ 187.087538][ T8052] ldm_validate_privheads(): Disk read failed. [ 187.087598][ T8052] loop0: [ 187.087615][ T8052] loop0: partition table partially beyond EOD, truncated [ 187.092914][ T5686] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.097754][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.106389][ T5686] usb 3-1: config 0 descriptor?? [ 187.128448][ T5686] cp210x 3-1:0.0: cp210x converter detected [ 187.133313][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 187.145668][ T5701] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.148766][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 187.148790][ T5701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 187.163583][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.163604][ T5701] usb 1-1: Product: syz [ 187.163617][ T5701] usb 1-1: Manufacturer: syz [ 187.163629][ T5701] usb 1-1: SerialNumber: syz [ 187.174644][ T5701] usb 1-1: config 0 descriptor?? [ 187.359025][ T5686] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 187.359060][ T5686] cp210x 3-1:0.0: querying part number failed [ 187.373013][ T5686] usb 3-1: cp210x converter now attached to ttyUSB0 [ 187.406174][ T5686] usb 1-1: USB disconnect, device number 42 [ 188.061256][ T5686] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 188.225931][ T5693] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.232847][ T5686] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 188.233105][ T5693] usb 4-1: USB disconnect, device number 38 [ 188.234588][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.234630][ T5686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.234652][ T5686] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.234673][ T5686] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.234710][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.575485][ T5701] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 188.747649][ T5701] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 188.756539][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.756562][ T5701] usb 1-1: Product: syz [ 188.756576][ T5701] usb 1-1: Manufacturer: syz [ 188.756590][ T5701] usb 1-1: SerialNumber: syz [ 188.944356][ T8068] FAULT_INJECTION: forcing a failure. [ 188.944356][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 188.944388][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.3.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.944413][ T8068] Tainted: [L]=SOFTLOCKUP [ 188.944419][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.944430][ T8068] Call Trace: [ 188.944437][ T8068] [ 188.944445][ T8068] dump_stack_lvl+0xe8/0x150 [ 188.944468][ T8068] should_fail_ex+0x3eb/0x540 [ 188.944492][ T8068] should_failslab+0xa8/0x100 [ 188.944513][ T8068] __kmalloc_noprof+0xf9/0x710 [ 188.944532][ T8068] ? tomoyo_encode+0x2ad/0x570 [ 188.944549][ T8068] ? tomoyo_encode+0x2ad/0x570 [ 188.944572][ T8068] tomoyo_encode+0x2ad/0x570 [ 188.944595][ T8068] tomoyo_realpath_from_path+0x5fa/0x640 [ 188.944622][ T8068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 188.944642][ T8068] tomoyo_path_number_perm+0x246/0x5f0 [ 188.944663][ T8068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.944681][ T8068] ? __lock_acquire+0x747/0x2de0 [ 188.944734][ T8068] ? __fget_files+0x2a/0x420 [ 188.944754][ T8068] ? __fget_files+0x2a/0x420 [ 188.944771][ T8068] ? __fget_files+0x2a/0x420 [ 188.944793][ T8068] security_file_ioctl+0xc3/0x2a0 [ 188.944822][ T8068] __se_sys_ioctl+0x47/0x170 [ 188.944843][ T8068] do_syscall_64+0x166/0x520 [ 188.944861][ T8068] ? trace_irq_disable+0x3b/0x140 [ 188.944877][ T8068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.944896][ T8068] ? clear_bhb_loop+0x70/0xc0 [ 188.944921][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.944943][ T8068] RIP: 0033:0x7fa90ab9e159 [ 188.944960][ T8068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.944976][ T8068] RSP: 002b:00007fa90ba4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.944996][ T8068] RAX: ffffffffffffffda RBX: 00007fa90ae25fa0 RCX: 00007fa90ab9e159 [ 188.945009][ T8068] RDX: 0000000000000001 RSI: 0000000000005608 RDI: 0000000000000003 [ 188.945021][ T8068] RBP: 00007fa90ba4a090 R08: 0000000000000000 R09: 0000000000000000 [ 188.945032][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.945043][ T8068] R13: 00007fa90ae26038 R14: 00007fa90ae25fa0 R15: 00007ffcaf4cb128 [ 188.945072][ T8068] [ 188.947361][ T8068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.267689][ T5701] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 189.267748][ T5701] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 189.549949][ T8072] gadgetfs: bound to dummy_udc driver [ 189.898415][ T5686] usb 3-1: USB disconnect, device number 36 [ 189.941323][ T5686] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.951095][ T5686] cp210x 3-1:0.0: device disconnected [ 190.421622][ T5686] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 190.454859][ T5701] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 190.454916][ T5701] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 190.455576][ T5701] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.461664][ T5701] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 190.593138][ T5686] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 190.596429][ T5686] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 190.596453][ T5686] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.596493][ T5686] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.599818][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.599839][ T5686] usb 4-1: Product: syz [ 190.599851][ T5686] usb 4-1: Manufacturer: syz [ 190.599864][ T5686] usb 4-1: SerialNumber: syz [ 190.676011][ T5686] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 190.676054][ T5686] cdc_ncm 4-1:1.0: bind() failure [ 191.073460][ T5686] usb 2-1: USB disconnect, device number 43 [ 191.247852][ T8084] device-mapper: ioctl: Invalid ioctl structure: name m, dev 32 [ 191.411800][ T8087] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 191.715831][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.716407][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.776405][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.832926][ T5686] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 191.891264][ T10] usb 1-1: USB disconnect, device number 43 [ 192.063318][ T5686] usb 3-1: Using ep0 maxpacket: 32 [ 192.078113][ T5686] usb 3-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 192.079156][ T5686] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 192.079191][ T5686] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.079221][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.087384][ T5686] usb 3-1: config 0 descriptor?? [ 192.231504][ T8097] gadgetfs: bound to dummy_udc driver [ 192.399877][ T149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.399915][ T149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.399943][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.399973][ T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.549499][ T149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.621583][ T8104] fuse: Unknown parameter '¸ªN£ŠŠ è' [ 192.815389][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 192.976525][ T10] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.979590][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.987156][ T10] usb 2-1: config 0 descriptor?? [ 192.991910][ T10] cp210x 2-1:0.0: cp210x converter detected [ 193.024013][ T5686] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 193.202907][ T5686] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -71 [ 193.230460][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 193.230486][ T10] cp210x 2-1:0.0: querying part number failed [ 193.245489][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 193.787176][ T5686] usb 4-1: USB disconnect, device number 39 [ 193.910578][ T990] usb 3-1: USB disconnect, device number 37 [ 194.933278][ T8120] securityfs: Unknown parameter './cgroup.net/syz0' [ 195.070022][ T5701] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 195.241949][ T5701] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 195.248353][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.248375][ T5701] usb 4-1: Product: syz [ 195.248389][ T5701] usb 4-1: Manufacturer: syz [ 195.248402][ T5701] usb 4-1: SerialNumber: syz [ 195.358666][ T5686] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 195.540887][ T5686] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 195.541859][ T5686] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.541880][ T5686] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 195.541896][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.541913][ T5686] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.541931][ T5686] usb 1-1: config 1 has no interface number 1 [ 195.541966][ T5686] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.546692][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.546715][ T5686] usb 1-1: Product: syz [ 195.546729][ T5686] usb 1-1: Manufacturer: syz [ 195.546742][ T5686] usb 1-1: SerialNumber: syz [ 195.621000][ T8126] gadgetfs: bound to dummy_udc driver [ 195.745074][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 195.745134][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 195.817868][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 195.860827][ T10] usb 2-1: USB disconnect, device number 44 [ 195.889892][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.890847][ T10] cp210x 2-1:0.0: device disconnected [ 196.105628][ T5686] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 196.105877][ T5686] usb 1-1: MIDIStreaming interface descriptor not found [ 196.119017][ T8130] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 196.249252][ T5686] usb 1-1: USB disconnect, device number 44 [ 196.410947][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.416782][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 196.577504][ T10] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 196.578623][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.579600][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.579621][ T10] usb 3-1: SerialNumber: syz [ 196.929434][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 196.929488][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 196.930181][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 196.971538][ T5701] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 197.143538][ T5764] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 197.316917][ T5764] usb 2-1: not running at top speed; connect to a high speed hub [ 197.316953][ T5764] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 197.318008][ T5764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 25920, setting to 64 [ 197.453433][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.453459][ T5764] usb 2-1: Product: syz [ 197.453472][ T5764] usb 2-1: Manufacturer: syz [ 197.453484][ T5764] usb 2-1: SerialNumber: syz [ 197.507738][ T8135] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 197.517962][ T5764] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 197.535974][ T10] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 197.545704][ T5764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 197.572686][ T5764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 197.603400][ T5764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 197.881143][ T5764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 197.996410][ T5612] usb 2-1: USB disconnect, device number 45 [ 198.006860][ T10] usb 3-1: USB disconnect, device number 38 [ 198.061379][ T10] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 198.245334][ T5612] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 198.261058][ T5612] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 198.279742][ T5612] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 198.290420][ T5612] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 198.291883][ T5612] keyspan 2-1:1.0: device disconnected [ 198.391178][ T5345] usb 4-1: USB disconnect, device number 40 [ 198.799832][ T8155] gadgetfs: bound to dummy_udc driver [ 199.143940][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 199.194825][ T8166] jffs2: notice: (8166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 199.308641][ T10] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.316950][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.331982][ T10] usb 4-1: config 0 descriptor?? [ 199.364943][ T10] cp210x 4-1:0.0: cp210x converter detected [ 199.453820][ T5345] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 199.526148][ T5701] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 199.605143][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 199.623603][ T5345] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 199.628359][ T5345] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.628383][ T5345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.628400][ T5345] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.628439][ T5345] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.637049][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.637073][ T5345] usb 1-1: Product: syz [ 199.637086][ T5345] usb 1-1: Manufacturer: syz [ 199.652768][ T5345] cdc_wdm 1-1:1.0: skipping garbage [ 199.652785][ T5345] cdc_wdm 1-1:1.0: skipping garbage [ 199.673709][ T5345] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 199.673728][ T5345] cdc_wdm 1-1:1.0: Unknown control protocol [ 199.725029][ T5701] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 199.726084][ T5701] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 199.726115][ T5701] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 199.726148][ T5701] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 199.728387][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.728408][ T5701] usb 3-1: SerialNumber: syz [ 199.765726][ T5764] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 199.880980][ T5345] usb 1-1: USB disconnect, device number 45 [ 199.945202][ T5764] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 199.964436][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.964461][ T5764] usb 2-1: Product: syz [ 199.964481][ T5764] usb 2-1: Manufacturer: syz [ 199.964496][ T5764] usb 2-1: SerialNumber: syz [ 200.084488][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.084737][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.427604][ T5701] rndis_host 3-1:253.0: missing cdc header ether descriptor [ 200.451554][ T5701] usb 3-1: USB disconnect, device number 39 [ 200.472201][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 200.472257][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 200.473408][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 200.473457][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 200.475649][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.489566][ T5764] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 200.605558][ T5345] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 200.858557][ T5345] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 200.878417][ T5345] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.878443][ T5345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.878460][ T5345] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.878502][ T5345] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.936807][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.936832][ T5345] usb 1-1: Product: syz [ 200.936846][ T5345] usb 1-1: Manufacturer: syz [ 200.993296][ T5345] cdc_wdm 1-1:1.0: skipping garbage [ 200.993315][ T5345] cdc_wdm 1-1:1.0: skipping garbage [ 200.998924][ T5345] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 200.998943][ T5345] cdc_wdm 1-1:1.0: Unknown control protocol [ 201.297893][ T33] audit: type=1326 audit(1791102979.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.2.781" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f153159e159 code=0x0 [ 201.842672][ T5701] usb 1-1: USB disconnect, device number 46 [ 202.117066][ T5701] usb 4-1: USB disconnect, device number 41 [ 202.142165][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.145307][ T5701] cp210x 4-1:0.0: device disconnected [ 202.284263][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 202.286678][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 202.299842][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 202.299868][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 202.922261][ T8215] gadgetfs: bound to dummy_udc driver [ 202.960144][ T5764] usb 2-1: USB disconnect, device number 46 [ 203.135199][ T8221] netlink: 64 bytes leftover after parsing attributes in process `syz.1.787'. [ 203.430646][ T8228] FAULT_INJECTION: forcing a failure. [ 203.430646][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 203.430678][ T8228] CPU: 0 UID: 0 PID: 8228 Comm: syz.2.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.430704][ T8228] Tainted: [L]=SOFTLOCKUP [ 203.430718][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.430728][ T8228] Call Trace: [ 203.430737][ T8228] [ 203.430744][ T8228] dump_stack_lvl+0xe8/0x150 [ 203.430770][ T8228] should_fail_ex+0x3eb/0x540 [ 203.430794][ T8228] should_failslab+0xa8/0x100 [ 203.430814][ T8228] __kmalloc_node_noprof+0xfb/0x720 [ 203.430833][ T8228] ? fifo_init+0x3ed/0x6d0 [ 203.430850][ T8228] ? qdisc_alloc+0x92/0x9d0 [ 203.430865][ T8228] ? qdisc_alloc+0x92/0x9d0 [ 203.430883][ T8228] ? __pfx_fifo_init+0x10/0x10 [ 203.430902][ T8228] qdisc_alloc+0x92/0x9d0 [ 203.430926][ T8228] qdisc_create_dflt+0x8e/0x4e0 [ 203.430948][ T8228] taprio_init+0x410/0xc00 [ 203.430963][ T8228] ? sock_write_iter+0x2de/0x3e0 [ 203.430980][ T8228] ? vfs_write+0x612/0xba0 [ 203.430995][ T8228] ? ksys_write+0x150/0x270 [ 203.431024][ T8228] ? __pfx_taprio_init+0x10/0x10 [ 203.431045][ T8228] ? qdisc_alloc+0x6e7/0x9d0 [ 203.431064][ T8228] ? __pfx_taprio_init+0x10/0x10 [ 203.431083][ T8228] qdisc_create+0xc23/0x1450 [ 203.431104][ T8228] ? lockdep_rtnl_is_held+0x26/0x40 [ 203.431122][ T8228] ? qdisc_lookup+0x364/0x6c0 [ 203.431141][ T8228] tc_modify_qdisc+0x17af/0x2390 [ 203.431171][ T8228] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 203.431214][ T8228] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 203.431232][ T8228] rtnetlink_rcv_msg+0x7b9/0xc00 [ 203.431249][ T8228] ? netlink_sendmsg+0x577/0xae0 [ 203.431270][ T8228] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 203.431288][ T8228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.431308][ T8228] ? __lock_acquire+0x747/0x2de0 [ 203.431338][ T8228] netlink_rcv_skb+0x226/0x4a0 [ 203.431358][ T8228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.431378][ T8228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.431409][ T8228] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.431426][ T8228] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.431449][ T8228] netlink_unicast+0x7bd/0x940 [ 203.431479][ T8228] netlink_sendmsg+0x7c3/0xae0 [ 203.431507][ T8228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.431533][ T8228] ? apparmor_socket_sendmsg+0x98/0x360 [ 203.431551][ T8228] ? lock_acquire+0x115/0x350 [ 203.431569][ T8228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.431586][ T8228] sock_sendmsg_nosec+0x14e/0x190 [ 203.431608][ T8228] sock_write_iter+0x2de/0x3e0 [ 203.431628][ T8228] ? __pfx_sock_write_iter+0x10/0x10 [ 203.431653][ T8228] ? bpf_lsm_file_permission+0x9/0x20 [ 203.431671][ T8228] ? security_file_permission+0x75/0x260 [ 203.431697][ T8228] vfs_write+0x612/0xba0 [ 203.431728][ T8228] ? __pfx_vfs_write+0x10/0x10 [ 203.431749][ T8228] ? __fget_files+0x3a2/0x420 [ 203.431766][ T8228] ? __fget_files+0x2a/0x420 [ 203.431787][ T8228] ? fdget+0x1ac/0x250 [ 203.431810][ T8228] ksys_write+0x150/0x270 [ 203.431830][ T8228] ? __pfx_ksys_write+0x10/0x10 [ 203.431859][ T8228] do_syscall_64+0x166/0x520 [ 203.431875][ T8228] ? trace_irq_disable+0x3b/0x140 [ 203.431892][ T8228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.431911][ T8228] ? clear_bhb_loop+0x70/0xc0 [ 203.431931][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.431950][ T8228] RIP: 0033:0x7f153159e159 [ 203.431967][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.431981][ T8228] RSP: 002b:00007f15324d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.432002][ T8228] RAX: ffffffffffffffda RBX: 00007f1531825fa0 RCX: 00007f153159e159 [ 203.432016][ T8228] RDX: 00000000000000a0 RSI: 0000200000000100 RDI: 0000000000000003 [ 203.432027][ T8228] RBP: 00007f15324d8090 R08: 0000000000000000 R09: 0000000000000000 [ 203.432039][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.432050][ T8228] R13: 00007f1531826038 R14: 00007f1531825fa0 R15: 00007ffed8266f68 [ 203.432079][ T8228] [ 203.640325][ T5345] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 203.819672][ T5345] usb 1-1: New USB device found: idVendor=28bd, idProduct=0074, bcdDevice=0.00 [ 203.826106][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.826126][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.826163][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.826192][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.845887][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.845909][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.845947][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.845970][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.869538][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.869560][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.869598][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.869623][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.878439][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.878460][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.878497][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.878520][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.886762][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.886783][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.886820][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.886843][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.894587][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.894609][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.894645][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.894668][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.897716][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.897735][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.897771][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.897794][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.912661][ T5345] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 203.912682][ T5345] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 203.912718][ T5345] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.912741][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.257605][ T8234] vxcan0: tx address claim with dest, not broadcast [ 204.535597][ T1768] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 204.702623][ T1768] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.704382][ T1768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.716901][ T1768] usb 4-1: config 0 descriptor?? [ 204.758867][ T1768] cp210x 4-1:0.0: cp210x converter detected [ 205.006663][ T1768] usb 4-1: cp210x converter now attached to ttyUSB0 [ 205.692046][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 205.852928][ T10] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 205.856084][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.856112][ T10] usb 2-1: Product: syz [ 205.856125][ T10] usb 2-1: Manufacturer: syz [ 205.856139][ T10] usb 2-1: SerialNumber: syz [ 206.318127][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 206.318186][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 206.320704][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 206.320753][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 206.321680][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.323643][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 206.610825][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 206.622751][ T5345] usb 1-1: config 0 descriptor?? [ 206.633927][ T5345] usb 1-1: can't set config #0, error -71 [ 206.643696][ T4929] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 206.646768][ T5345] usb 1-1: USB disconnect, device number 47 [ 206.863232][ T8253] gadgetfs: bound to dummy_udc driver [ 207.549723][ T5345] usb 4-1: USB disconnect, device number 42 [ 207.577434][ T5345] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.578368][ T5345] cp210x 4-1:0.0: device disconnected [ 207.910538][ T8276] binder: Failure in copy_transaction_data: EFAULT [ 208.118436][ T8281] gadgetfs: bound to dummy_udc driver [ 208.391899][ T8282] overlayfs: failed to resolve 'lower1': -2 [ 208.413410][ T8284] device-mapper: ioctl: Invalid ioctl structure: name m, dev 320000 [ 208.685086][ T8288] syzkaller1: entered promiscuous mode [ 208.685302][ T8288] syzkaller1: entered allmulticast mode [ 208.747516][ T8287] dlm: Unknown command passed to DLM device : 3 [ 208.747516][ T8287] [ 208.887398][ T5686] usb 2-1: USB disconnect, device number 47 [ 209.026056][ T5693] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 209.113895][ T5345] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 209.242582][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 209.273220][ T5345] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.274206][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.278946][ T5345] usb 3-1: config 0 descriptor?? [ 209.309796][ T5345] cp210x 3-1:0.0: cp210x converter detected [ 209.412145][ T5693] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 209.463989][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.464015][ T5693] usb 1-1: Product: syz [ 209.464029][ T5693] usb 1-1: Manufacturer: syz [ 209.464042][ T5693] usb 1-1: SerialNumber: syz [ 209.486537][ T5693] usb 1-1: config 0 descriptor?? [ 209.544628][ T5345] usb 3-1: cp210x converter now attached to ttyUSB0 [ 209.966475][ T8306] gadgetfs: bound to dummy_udc driver [ 209.991524][ T5693] airspy 1-1:0.0: Board ID: 00 [ 209.991543][ T5693] airspy 1-1:0.0: Firmware version: [ 210.425188][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.439568][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.489625][ T8318] FAULT_INJECTION: forcing a failure. [ 210.489625][ T8318] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.489656][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.3.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.489681][ T8318] Tainted: [L]=SOFTLOCKUP [ 210.489688][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.489698][ T8318] Call Trace: [ 210.489705][ T8318] [ 210.489713][ T8318] dump_stack_lvl+0xe8/0x150 [ 210.489738][ T8318] should_fail_ex+0x3eb/0x540 [ 210.489763][ T8318] get_futex_key+0x8e2/0x1580 [ 210.489793][ T8318] ? __pfx_get_futex_key+0x10/0x10 [ 210.489822][ T8318] futex_wake+0x119/0x5f0 [ 210.489846][ T8318] ? __pfx_futex_wake+0x10/0x10 [ 210.489871][ T8318] ? mm_exit_exec_release+0x20/0x290 [ 210.489896][ T8318] do_futex+0x458/0x4e0 [ 210.489918][ T8318] ? __pfx_do_futex+0x10/0x10 [ 210.489936][ T8318] ? __might_fault+0xaf/0x130 [ 210.489955][ T8318] mm_exit_exec_release+0x10d/0x290 [ 210.489974][ T8318] exit_mm+0x50/0x240 [ 210.489991][ T8318] do_exit+0x6a8/0x2380 [ 210.490013][ T8318] ? __pfx_do_exit+0x10/0x10 [ 210.490031][ T8318] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.490057][ T8318] do_group_exit+0x22d/0x2f0 [ 210.490073][ T8318] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.490095][ T8318] get_signal+0x1216/0x12c0 [ 210.490131][ T8318] arch_do_signal_or_restart+0xbb/0x860 [ 210.490160][ T8318] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.490196][ T8318] exit_to_user_mode_loop+0x10e/0x770 [ 210.490214][ T8318] ? rcu_is_watching+0x16/0xb0 [ 210.490236][ T8318] do_syscall_64+0x328/0x520 [ 210.490253][ T8318] ? trace_irq_disable+0x3b/0x140 [ 210.490269][ T8318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.490287][ T8318] ? clear_bhb_loop+0x70/0xc0 [ 210.490307][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.490326][ T8318] RIP: 0033:0x7fa90ab9e159 [ 210.490343][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.490358][ T8318] RSP: 002b:00007fa90ba4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.490378][ T8318] RAX: fffffffffffffe00 RBX: 00007fa90ae25fa8 RCX: 00007fa90ab9e159 [ 210.490391][ T8318] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa90ae25fa8 [ 210.490403][ T8318] RBP: 00007fa90ae25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 210.490414][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.490425][ T8318] R13: 00007fa90ae26038 R14: 00007ffcaf4cb040 R15: 00007ffcaf4cb128 [ 210.490453][ T8318] [ 210.971390][ T5686] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 211.087402][ T8322] dvmrp0: entered allmulticast mode [ 211.303896][ T5686] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 211.308369][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.308392][ T5686] usb 4-1: Product: syz [ 211.308406][ T5686] usb 4-1: Manufacturer: syz [ 211.308419][ T5686] usb 4-1: SerialNumber: syz [ 211.394812][ T5693] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 211.409833][ T5693] airspy 1-1:0.0: Registered as swradio24 [ 211.409853][ T5693] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 211.437914][ T5693] usb 1-1: USB disconnect, device number 48 [ 211.590304][ T4929] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 211.891212][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 211.891271][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 211.894688][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 211.894739][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.895406][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.900840][ T5686] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 212.125386][ T5686] usb 3-1: USB disconnect, device number 40 [ 212.135043][ T5686] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.149713][ T5686] cp210x 3-1:0.0: device disconnected [ 212.442099][ T8332] gadgetfs: bound to dummy_udc driver [ 212.595236][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 212.689711][ T8339] device-mapper: ioctl: Invalid ioctl structure: name m, dev 32 [ 212.756009][ T10] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 212.758744][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 212.759750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.759771][ T10] usb 1-1: SerialNumber: syz [ 213.446960][ T8359] FAULT_INJECTION: forcing a failure. [ 213.446960][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 213.446991][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz.1.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.447017][ T8359] Tainted: [L]=SOFTLOCKUP [ 213.447023][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.447035][ T8359] Call Trace: [ 213.447042][ T8359] [ 213.447050][ T8359] dump_stack_lvl+0xe8/0x150 [ 213.447077][ T8359] should_fail_ex+0x3eb/0x540 [ 213.447103][ T8359] should_failslab+0xa8/0x100 [ 213.447125][ T8359] __kmalloc_cache_noprof+0x9e/0x600 [ 213.447146][ T8359] ? proc_thread_self_get_link+0xfc/0x190 [ 213.447164][ T8359] ? proc_thread_self_get_link+0xfc/0x190 [ 213.447184][ T8359] ? __task_pid_nr_ns+0x399/0x470 [ 213.447207][ T8359] proc_thread_self_get_link+0xfc/0x190 [ 213.447227][ T8359] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 213.447248][ T8359] pick_link+0x77d/0xfd0 [ 213.447277][ T8359] step_into_slowpath+0x58a/0x820 [ 213.447299][ T8359] ? __pfx_step_into_slowpath+0x10/0x10 [ 213.447328][ T8359] link_path_walk+0xd50/0x1910 [ 213.447365][ T8359] path_openat+0x1c4/0x1da0 [ 213.447401][ T8359] do_file_open+0x23e/0x4a0 [ 213.447428][ T8359] ? __pfx_do_file_open+0x10/0x10 [ 213.447468][ T8359] ? _raw_spin_unlock+0x28/0x50 [ 213.447486][ T8359] ? alloc_fd+0x6af/0x760 [ 213.447522][ T8359] do_sys_openat2+0x115/0x200 [ 213.447542][ T8359] ? __se_sys_futex+0x3a8/0x450 [ 213.447561][ T8359] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.447583][ T8359] ? rcu_is_watching+0x16/0xb0 [ 213.447603][ T8359] __x64_sys_openat+0x138/0x170 [ 213.447626][ T8359] do_syscall_64+0x166/0x520 [ 213.447644][ T8359] ? trace_irq_disable+0x3b/0x140 [ 213.447662][ T8359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.447681][ T8359] ? clear_bhb_loop+0x70/0xc0 [ 213.447702][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.447722][ T8359] RIP: 0033:0x7f551615e98e [ 213.447741][ T8359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.447757][ T8359] RSP: 002b:00007f5517137ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.447778][ T8359] RAX: ffffffffffffffda RBX: 00007f55171386c0 RCX: 00007f551615e98e [ 213.447793][ T8359] RDX: 0000000000000002 RSI: 00007f5517137f90 RDI: ffffffffffffff9c [ 213.447806][ T8359] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 213.447818][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.447830][ T8359] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 213.447860][ T8359] [ 213.771500][ T5686] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 214.037172][ T5686] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 214.038601][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.038632][ T5686] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 214.038663][ T5686] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 214.158952][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 214.187415][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.187439][ T5686] usb 2-1: SerialNumber: syz [ 214.215857][ T5686] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 214.215878][ T5686] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 214.215902][ T5686] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 214.228546][ T5686] usb 4-1: USB disconnect, device number 43 [ 214.270786][ T10] usb 1-1: USB disconnect, device number 49 [ 214.434462][ T1768] usb 2-1: USB disconnect, device number 49 [ 214.682563][ T8373] gadgetfs: bound to dummy_udc driver [ 215.551382][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 215.551441][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 215.551471][ T8394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 215.893151][ T8399] FAULT_INJECTION: forcing a failure. [ 215.893151][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 215.893184][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.1.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.893217][ T8399] Tainted: [L]=SOFTLOCKUP [ 215.893225][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.893236][ T8399] Call Trace: [ 215.893243][ T8399] [ 215.893251][ T8399] dump_stack_lvl+0xe8/0x150 [ 215.893278][ T8399] should_fail_ex+0x3eb/0x540 [ 215.893304][ T8399] should_failslab+0xa8/0x100 [ 215.893325][ T8399] __kmalloc_noprof+0xf9/0x710 [ 215.893345][ T8399] ? reserve_sfa_size+0xd5/0x400 [ 215.893363][ T8399] ? reserve_sfa_size+0xd5/0x400 [ 215.893387][ T8399] reserve_sfa_size+0xd5/0x400 [ 215.893405][ T8399] ? __kmalloc_cache_noprof+0x31c/0x600 [ 215.893424][ T8399] ? __kmalloc_cache_noprof+0x148/0x600 [ 215.893442][ T8399] ? nf_ct_tmpl_alloc+0x7e/0x230 [ 215.893463][ T8399] __add_action+0x29/0x120 [ 215.893484][ T8399] ovs_nla_add_action+0x28/0x40 [ 215.893505][ T8399] ovs_ct_copy_action+0x1634/0x1b50 [ 215.893538][ T8399] ? __pfx_ovs_ct_copy_action+0x10/0x10 [ 215.893583][ T8399] __ovs_nla_copy_actions+0xe3b/0x3820 [ 215.893612][ T8399] ? is_bpf_text_address+0x26/0x2b0 [ 215.893634][ T8399] ? __pfx___ovs_nla_copy_actions+0x10/0x10 [ 215.893654][ T8399] ? __kernel_text_address+0xd/0x30 [ 215.893674][ T8399] ? unwind_get_return_address+0x4d/0x90 [ 215.893692][ T8399] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.893712][ T8399] ? arch_stack_walk+0xfb/0x150 [ 215.893741][ T8399] ? stack_trace_save+0xa9/0x100 [ 215.893759][ T8399] ? __pfx_stack_trace_save+0x10/0x10 [ 215.893779][ T8399] ? stack_depot_save_flags+0x33/0x7f0 [ 215.893804][ T8399] ? kasan_save_track+0x4f/0x80 [ 215.893821][ T8399] ? kasan_save_track+0x3e/0x80 [ 215.893838][ T8399] ? __kasan_kmalloc+0x93/0xb0 [ 215.893859][ T8399] ? __kmalloc_noprof+0x366/0x710 [ 215.893875][ T8399] ? ovs_nla_copy_actions+0x68/0x3d0 [ 215.893892][ T8399] ? ovs_packet_cmd_execute+0x66e/0xf10 [ 215.893910][ T8399] ? genl_family_rcv_msg_doit+0x233/0x340 [ 215.893928][ T8399] ? genl_rcv_msg+0x614/0x7a0 [ 215.893943][ T8399] ? netlink_rcv_skb+0x226/0x4a0 [ 215.893960][ T8399] ? genl_rcv+0x28/0x40 [ 215.893975][ T8399] ? netlink_unicast+0x7bd/0x940 [ 215.893990][ T8399] ? netlink_sendmsg+0x7c3/0xae0 [ 215.894005][ T8399] ? sock_sendmsg_nosec+0x14e/0x190 [ 215.894022][ T8399] ? __sys_sendto+0x408/0x5a0 [ 215.894039][ T8399] ? __x64_sys_sendto+0xde/0x100 [ 215.894055][ T8399] ? do_syscall_64+0x166/0x520 [ 215.894071][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.894126][ T8399] ? rcu_is_watching+0x16/0xb0 [ 215.894145][ T8399] ? trace_kmalloc+0x2a/0xf0 [ 215.894166][ T8399] ? __kmalloc_noprof+0x387/0x710 [ 215.894184][ T8399] ? __kmalloc_noprof+0x1a6/0x710 [ 215.894206][ T8399] ? ovs_nla_copy_actions+0x68/0x3d0 [ 215.894223][ T8399] ? ovs_nla_copy_actions+0x68/0x3d0 [ 215.894245][ T8399] ovs_nla_copy_actions+0x237/0x3d0 [ 215.894271][ T8399] ovs_packet_cmd_execute+0x66e/0xf10 [ 215.894299][ T8399] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 215.894322][ T8399] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 215.894340][ T8399] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 215.894368][ T8399] genl_family_rcv_msg_doit+0x233/0x340 [ 215.894394][ T8399] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.894426][ T8399] ? bpf_lsm_capable+0x9/0x20 [ 215.894442][ T8399] ? security_capable+0x7e/0x2c0 [ 215.894468][ T8399] genl_rcv_msg+0x614/0x7a0 [ 215.894492][ T8399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.894509][ T8399] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 215.894532][ T8399] ? __asan_memcpy+0x40/0x70 [ 215.894557][ T8399] netlink_rcv_skb+0x226/0x4a0 [ 215.894578][ T8399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.894597][ T8399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.894632][ T8399] ? down_read+0x2b9/0x320 [ 215.894654][ T8399] genl_rcv+0x28/0x40 [ 215.894670][ T8399] netlink_unicast+0x7bd/0x940 [ 215.894699][ T8399] netlink_sendmsg+0x7c3/0xae0 [ 215.894723][ T8399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.894750][ T8399] ? apparmor_socket_sendmsg+0x98/0x360 [ 215.894772][ T8399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.894789][ T8399] sock_sendmsg_nosec+0x14e/0x190 [ 215.894811][ T8399] __sys_sendto+0x408/0x5a0 [ 215.894833][ T8399] ? __pfx___sys_sendto+0x10/0x10 [ 215.894871][ T8399] ? __pfx___se_sys_futex+0x10/0x10 [ 215.894888][ T8399] ? fd_install+0x95/0x4e0 [ 215.894913][ T8399] __x64_sys_sendto+0xde/0x100 [ 215.894935][ T8399] do_syscall_64+0x166/0x520 [ 215.894952][ T8399] ? trace_irq_disable+0x3b/0x140 [ 215.894969][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.894988][ T8399] ? clear_bhb_loop+0x70/0xc0 [ 215.895009][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.895028][ T8399] RIP: 0033:0x7f551619e159 [ 215.895046][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.895061][ T8399] RSP: 002b:00007f5517138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.895082][ T8399] RAX: ffffffffffffffda RBX: 00007f5516425fa0 RCX: 00007f551619e159 [ 215.895096][ T8399] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 215.895109][ T8399] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 215.895121][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.895133][ T8399] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 215.895163][ T8399] [ 215.945851][ T8402] gadgetfs: bound to dummy_udc driver [ 216.002846][ T8404] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 216.098957][ T1768] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 216.322318][ T1768] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 216.521342][ T1768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.521368][ T1768] usb 4-1: Product: syz [ 216.521381][ T1768] usb 4-1: Manufacturer: syz [ 216.521394][ T1768] usb 4-1: SerialNumber: syz [ 216.884595][ T8415] netlink: 666 bytes leftover after parsing attributes in process `syz.1.847'. [ 216.976511][ T32] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 217.137431][ T32] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 217.139883][ T32] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.140861][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.140882][ T32] usb 1-1: SerialNumber: syz [ 217.263689][ T1768] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 217.263744][ T1768] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 217.264627][ T1768] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 217.278366][ T1768] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 217.288721][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 217.447184][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 217.457284][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.457329][ T10] usb 2-1: New USB device found: idVendor=04b4, idProduct=0384, bcdDevice=3.73 [ 217.464022][ T10] usb 2-1: config 4 has an invalid interface number: 235 but max is 0 [ 217.464045][ T10] usb 2-1: config 4 has no interface number 0 [ 217.469162][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.469183][ T10] usb 2-1: Product: syz [ 217.469196][ T10] usb 2-1: Manufacturer: syz [ 217.469208][ T10] usb 2-1: SerialNumber: syz [ 217.626007][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 217.791987][ T8429] overlayfs: failed to resolve './bus': -2 [ 218.131867][ T32] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 218.151299][ T32] usb 1-1: USB disconnect, device number 50 [ 219.015714][ T8442] gadgetfs: bound to dummy_udc driver [ 219.051018][ T1768] usb 4-1: USB disconnect, device number 44 [ 219.287213][ T8444] loop0: detected capacity change from 0 to 1 [ 219.422947][ T8450] netlink: 'syz.0.854': attribute type 20 has an invalid length. [ 219.923745][ T8454] FAULT_INJECTION: forcing a failure. [ 219.923745][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 219.923778][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.0.856 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.923806][ T8454] Tainted: [L]=SOFTLOCKUP [ 219.923813][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.923825][ T8454] Call Trace: [ 219.923832][ T8454] [ 219.923840][ T8454] dump_stack_lvl+0xe8/0x150 [ 219.923865][ T8454] should_fail_ex+0x3eb/0x540 [ 219.923896][ T8454] should_failslab+0xa8/0x100 [ 219.923916][ T8454] ? __pfx_mqueue_fill_super+0x10/0x10 [ 219.923936][ T8454] __kmalloc_cache_noprof+0x9e/0x600 [ 219.923956][ T8454] ? sget_fc+0x78f/0x1a60 [ 219.923973][ T8454] ? sget_fc+0x78f/0x1a60 [ 219.923992][ T8454] ? __pfx_mqueue_fill_super+0x10/0x10 [ 219.924013][ T8454] sget_fc+0x78f/0x1a60 [ 219.924039][ T8454] ? __pfx_set_anon_super_fc+0x10/0x10 [ 219.924060][ T8454] ? __pfx_sget_fc+0x10/0x10 [ 219.924078][ T8454] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 219.924097][ T8454] ? __kmalloc_cache_noprof+0x148/0x600 [ 219.924122][ T8454] ? __pfx_mqueue_fill_super+0x10/0x10 [ 219.924142][ T8454] get_tree_nodev+0x2a/0x150 [ 219.924162][ T8454] vfs_get_tree+0x92/0x2a0 [ 219.924183][ T8454] fc_mount_longterm+0x1c/0x100 [ 219.924204][ T8454] mq_init_ns+0x508/0x770 [ 219.924225][ T8454] copy_ipcs+0x460/0x6c0 [ 219.924248][ T8454] create_new_namespaces+0x210/0x6b0 [ 219.924270][ T8454] ? security_capable+0x7e/0x2c0 [ 219.924296][ T8454] unshare_nsproxy_namespaces+0x144/0x190 [ 219.924319][ T8454] ksys_unshare+0x53c/0x890 [ 219.924341][ T8454] ? __pfx_ksys_unshare+0x10/0x10 [ 219.924362][ T8454] ? rcu_is_watching+0x16/0xb0 [ 219.924390][ T8454] __x64_sys_unshare+0x38/0x50 [ 219.924405][ T8454] do_syscall_64+0x166/0x520 [ 219.924420][ T8454] ? trace_irq_disable+0x3b/0x140 [ 219.924437][ T8454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.924457][ T8454] ? clear_bhb_loop+0x70/0xc0 [ 219.924478][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.924497][ T8454] RIP: 0033:0x7f096699e159 [ 219.924515][ T8454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.924531][ T8454] RSP: 002b:00007f0967835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 219.924560][ T8454] RAX: ffffffffffffffda RBX: 00007f0966c25fa0 RCX: 00007f096699e159 [ 219.924575][ T8454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 219.924588][ T8454] RBP: 00007f0966a3506b R08: 0000000000000000 R09: 0000000000000000 [ 219.924599][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.924611][ T8454] R13: 00007f0966c26038 R14: 00007f0966c25fa0 R15: 00007ffe58e91918 [ 219.924641][ T8454] [ 220.380743][ T10] uvcvideo 2-1:4.235: Found UVC 0.00 device syz (04b4:0384) [ 220.380777][ T10] uvcvideo 2-1:4.235: No valid video chain found. [ 220.381490][ T10] usb 2-1: can't set first interface for hiFace device. [ 220.381515][ T10] snd-usb-hiface 2-1:4.235: probe with driver snd-usb-hiface failed with error -5 [ 220.417142][ T10] usb 2-1: USB disconnect, device number 50 [ 220.739410][ T5764] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 220.825218][ T8461] block nbd2: shutting down sockets [ 220.902972][ T5764] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 220.908901][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.936711][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 220.949694][ T5764] usb 1-1: config 0 descriptor?? [ 220.966312][ T5764] cp210x 1-1:0.0: cp210x converter detected [ 221.096117][ T10] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 221.119599][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.119625][ T10] usb 2-1: Product: syz [ 221.119639][ T10] usb 2-1: Manufacturer: syz [ 221.119652][ T10] usb 2-1: SerialNumber: syz [ 221.203809][ T5764] usb 1-1: cp210x converter now attached to ttyUSB0 [ 221.280460][ T8472] gadgetfs: bound to dummy_udc driver [ 221.588485][ T8476] comedi comedi2: comedi_config --init_data is deprecated [ 221.812701][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 221.812763][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 221.813384][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.817378][ T8483] binder: Failure in copy_transaction_data: EINVAL [ 221.851209][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 221.938422][ T8481] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 222.328747][ T8491] loop3: detected capacity change from 0 to 7 [ 222.343809][ T8491] Dev loop3: unable to read RDB block 7 [ 222.343851][ T8491] loop3: unable to read partition table [ 222.347391][ T8491] loop3: partition table beyond EOD, truncated [ 222.348626][ T8491] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.802189][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 222.802436][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.873'. [ 222.877513][ T8502] gadgetfs: bound to dummy_udc driver [ 223.133486][ T8508] syzkaller1: entered promiscuous mode [ 223.133653][ T8508] syzkaller1: entered allmulticast mode [ 223.429582][ T8511] jffs2: notice: (8511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 223.701865][ T5612] usb 1-1: USB disconnect, device number 51 [ 223.715681][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 223.729233][ T5612] cp210x 1-1:0.0: device disconnected [ 223.992925][ T5693] usb 2-1: USB disconnect, device number 51 [ 224.271783][ T8530] netlink: 'syz.2.882': attribute type 39 has an invalid length. [ 224.438605][ T8533] gadgetfs: bound to dummy_udc driver [ 224.916200][ T32] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 225.044550][ T5693] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 225.062772][ T5612] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 225.087730][ T32] usb 2-1: New USB device found: idVendor=1d34, idProduct=000a, bcdDevice=0.00 [ 225.090647][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.090673][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.090706][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.094500][ T32] usb 2-1: config 0 descriptor?? [ 225.205331][ T5693] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 225.212187][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.212209][ T5693] usb 3-1: Product: syz [ 225.212222][ T5693] usb 3-1: Manufacturer: syz [ 225.212235][ T5693] usb 3-1: SerialNumber: syz [ 225.248592][ T5612] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 225.253544][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.253583][ T5612] usb 1-1: Product: syz [ 225.253596][ T5612] usb 1-1: Manufacturer: syz [ 225.253609][ T5612] usb 1-1: SerialNumber: syz [ 225.741385][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 225.741443][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 225.776936][ T32] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -71 [ 225.793540][ T32] usb 2-1: USB disconnect, device number 52 [ 225.951920][ T5612] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 225.951976][ T5612] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 225.987673][ T5612] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 225.991713][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.016878][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.020443][ T5612] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 226.591351][ T8546] vxcan0: tx address claim with dest, not broadcast [ 226.667412][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 226.734015][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.563309][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.579127][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.802227][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 227.803915][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 227.806876][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 227.806927][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 227.807592][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 227.824228][ T5693] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 227.839789][ T5693] usb 3-1: USB disconnect, device number 41 [ 228.026947][ T32] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 228.073930][ T5693] usb 1-1: USB disconnect, device number 52 [ 228.196974][ T32] usb 4-1: device descriptor read/64, error -71 [ 228.217032][ T8562] gadgetfs: bound to dummy_udc driver [ 228.434310][ T8564] hub 8-0:1.0: USB hub found [ 228.436327][ T8564] hub 8-0:1.0: 1 port detected [ 228.485583][ T32] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 228.645655][ T32] usb 4-1: device descriptor read/64, error -71 [ 228.667939][ T13] IPVS: starting estimator thread 0... [ 228.671700][ T8568] IPVS: lc: FWM 3 0x00000003 - no destination available [ 228.769733][ T8569] IPVS: using max 29 ests per chain, 69600 per kthread [ 228.776089][ T32] usb usb4-port1: attempt power cycle [ 228.838021][ T5693] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 228.870451][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 228.871924][ T4929] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 229.032569][ T5693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.032617][ T5693] usb 3-1: New USB device found: idVendor=17cc, idProduct=1021, bcdDevice=0.40 [ 229.036197][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.036220][ T5693] usb 3-1: Product: syz [ 229.036233][ T5693] usb 3-1: Manufacturer: syz [ 229.036247][ T5693] usb 3-1: SerialNumber: syz [ 229.147927][ T32] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 229.173893][ T32] usb 4-1: device descriptor read/8, error -71 [ 229.306256][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.317994][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.436375][ T32] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 229.458465][ T32] usb 4-1: device descriptor read/8, error -71 [ 229.535193][ T5701] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 229.579258][ T32] usb usb4-port1: unable to enumerate USB device [ 229.629468][ T8578] debugfs: 'ç–½mÔ%A¯úÆÿAO!Ôû¥' already exists in 'ieee80211' [ 229.693861][ T5701] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9170, bcdDevice=1.08 [ 229.697803][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.697825][ T5701] usb 1-1: Product: syz [ 229.697838][ T5701] usb 1-1: Manufacturer: syz [ 229.697852][ T5701] usb 1-1: SerialNumber: syz [ 229.881124][ T5693] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.884064][ T5693] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 229.886313][ T5701] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 229.897214][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.898518][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.899572][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.908191][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.909527][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.914972][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.919969][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 229.923689][ T5693] usb 3-1: unable to issue vendor read request (ret = -71) [ 230.196744][ T5693] usb 3-1: USB disconnect, device number 42 [ 230.518428][ T5686] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 230.518451][ T5686] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 230.527749][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.789089][ T5693] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 230.821038][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.823893][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.834951][ T5701] usb 1-1: USB disconnect, device number 53 [ 230.836886][ C1] device 1-1 is not registered [ 231.044107][ T5693] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 231.057075][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.057099][ T5693] usb 3-1: Product: syz [ 231.057111][ T5693] usb 3-1: Manufacturer: syz [ 231.057124][ T5693] usb 3-1: SerialNumber: syz [ 231.326810][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 231.326865][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 231.326883][ T5693] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 231.408325][ T8585] gadgetfs: bound to dummy_udc driver [ 231.541685][ T5693] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 231.711059][ T5686] usb 1-1: firmware upload failed (-110). [ 232.920703][ T8602] binder: Failure in copy_transaction_data: EINVAL [ 233.285232][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 233.285553][ T8609] openvswitch: netlink: EtherType 500 is less than min 600 [ 233.517436][ T8611] FAULT_INJECTION: forcing a failure. [ 233.517436][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 233.517469][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: syz.1.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.517496][ T8611] Tainted: [L]=SOFTLOCKUP [ 233.517502][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.517514][ T8611] Call Trace: [ 233.517523][ T8611] [ 233.517531][ T8611] dump_stack_lvl+0xe8/0x150 [ 233.517557][ T8611] should_fail_ex+0x3eb/0x540 [ 233.517583][ T8611] should_failslab+0xa8/0x100 [ 233.517603][ T8611] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 233.517626][ T8611] ? __d_alloc+0x37/0x7f0 [ 233.517642][ T8611] ? __d_alloc+0x37/0x7f0 [ 233.517665][ T8611] __d_alloc+0x37/0x7f0 [ 233.517688][ T8611] __d_alloc_parallel+0xde/0x1700 [ 233.517711][ T8611] ? lock_acquire+0x115/0x350 [ 233.517738][ T8611] ? __d_lookup+0x66/0x790 [ 233.517758][ T8611] ? __pfx___d_alloc_parallel+0x10/0x10 [ 233.517776][ T8611] ? __d_lookup+0x6f3/0x790 [ 233.517794][ T8611] ? d_lookup+0x1f/0xa0 [ 233.517814][ T8611] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 233.517833][ T8611] ? lockdep_hardirqs_on+0x7b/0x110 [ 233.517858][ T8611] lookup_open+0x2c2/0x1970 [ 233.517900][ T8611] path_openat+0x673/0x1da0 [ 233.517937][ T8611] do_file_open+0x23e/0x4a0 [ 233.517961][ T8611] ? __pfx_do_file_open+0x10/0x10 [ 233.517988][ T8611] ? __pfx_kfree_link+0x10/0x10 [ 233.518015][ T8611] ? _raw_spin_unlock+0x28/0x50 [ 233.518034][ T8611] ? alloc_fd+0x6af/0x760 [ 233.518063][ T8611] do_sys_openat2+0x115/0x200 [ 233.518083][ T8611] ? __se_sys_futex+0x3a8/0x450 [ 233.518101][ T8611] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.518125][ T8611] ? rcu_is_watching+0x16/0xb0 [ 233.518149][ T8611] __x64_sys_openat+0x138/0x170 [ 233.518173][ T8611] do_syscall_64+0x166/0x520 [ 233.518190][ T8611] ? trace_irq_disable+0x3b/0x140 [ 233.518206][ T8611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.518226][ T8611] ? clear_bhb_loop+0x70/0xc0 [ 233.518247][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.518267][ T8611] RIP: 0033:0x7f551615e98e [ 233.518290][ T8611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.518307][ T8611] RSP: 002b:00007f5517137f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.518333][ T8611] RAX: ffffffffffffffda RBX: 00007f55171386c0 RCX: 00007f551615e98e [ 233.518348][ T8611] RDX: 0000000000000000 RSI: 00007f55162347a6 RDI: ffffffffffffff9c [ 233.518361][ T8611] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 233.518373][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.518384][ T8611] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 233.518413][ T8611] [ 233.819341][ T5686] usb 3-1: USB disconnect, device number 43 [ 234.023214][ T8618] netlink: 260 bytes leftover after parsing attributes in process `syz.2.914'. [ 234.302009][ T8624] Bluetooth: hci0: unsupported parameter 5135 [ 234.302032][ T8624] Bluetooth: hci0: unsupported parameter 8192 [ 234.302045][ T8624] Bluetooth: hci0: unsupported parameter 5135 [ 234.302056][ T8624] Bluetooth: hci0: unsupported parameter 8192 [ 234.413635][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.3.915'. [ 234.478957][ T8622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.879224][ T8638] netlink: 104 bytes leftover after parsing attributes in process `syz.3.920'. [ 235.072009][ T8641] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 235.072036][ T8641] CIFS: Unable to determine destination address [ 235.336563][ T1768] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 235.499793][ T1768] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 235.505087][ T1768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.505112][ T1768] usb 2-1: Product: syz [ 235.505125][ T1768] usb 2-1: Manufacturer: syz [ 235.505139][ T1768] usb 2-1: SerialNumber: syz [ 235.604427][ T8656] netlink: 'syz.3.926': attribute type 16 has an invalid length. [ 235.604450][ T8656] netlink: 164 bytes leftover after parsing attributes in process `syz.3.926'. [ 235.822136][ T1768] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 235.822198][ T1768] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 235.822217][ T1768] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 235.823959][ T1768] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 236.261194][ T8670] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 236.365054][ T1768] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 236.523628][ T1768] usb 4-1: New USB device found: idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 236.531182][ T1768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.531228][ T1768] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.550385][ T1768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.550410][ T1768] usb 4-1: Product: syz [ 236.550423][ T1768] usb 4-1: Manufacturer: syz [ 236.550435][ T1768] usb 4-1: SerialNumber: syz [ 236.572584][ T1768] r8152-cfgselector 4-1: Unknown version 0x0000 [ 236.588370][ T1768] r8152 4-1:1.0: Expected endpoints are not found [ 236.818113][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.818768][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.215700][ T8683] netlink: 17 bytes leftover after parsing attributes in process `syz.0.936'. [ 237.309711][ T8683] netlink: 17 bytes leftover after parsing attributes in process `syz.0.936'. [ 237.604302][ T5693] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 237.739449][ T5693] usb 3-1: device descriptor read/64, error -71 [ 237.815164][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.815799][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.962266][ T8692] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.962405][ T8693] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.996691][ T5693] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 238.148189][ T5693] usb 3-1: device descriptor read/64, error -71 [ 238.155367][ T5701] wiimote 0005:057E:0330.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 238.194617][ T5701] wiimote 0005:057E:0330.0008: New device registered [ 238.266164][ T5693] usb usb3-port1: attempt power cycle [ 238.371235][ T5764] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 238.404116][ T5701] usb 2-1: USB disconnect, device number 53 [ 238.509746][ T5764] usb 1-1: device descriptor read/64, error -71 [ 238.647812][ T5693] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 238.669720][ T5693] usb 3-1: device descriptor read/8, error -71 [ 238.765394][ T5764] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 238.915049][ T5764] usb 1-1: device descriptor read/64, error -71 [ 238.936320][ T5693] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 238.958228][ T5693] usb 3-1: device descriptor read/8, error -71 [ 239.033493][ T5764] usb usb1-port1: attempt power cycle [ 239.075608][ T5693] usb usb3-port1: unable to enumerate USB device [ 239.243034][ T5612] r8152-cfgselector 4-1: USB disconnect, device number 49 [ 239.299758][ T32] wiimote 0005:057E:0330.0008: detected device: Nintendo Wii Remote Plus (Gen 2) [ 239.396505][ T5764] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 239.428334][ T5764] usb 1-1: device descriptor read/8, error -71 [ 239.464809][ T32] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input16 [ 239.503751][ T32] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input17 [ 239.512203][ T32] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input15 [ 239.622751][ T8712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.945'. [ 239.685247][ T5764] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 239.755870][ T5764] usb 1-1: device descriptor read/8, error -71 [ 239.867271][ T5764] usb usb1-port1: unable to enumerate USB device [ 240.464694][ T990] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 240.649300][ T990] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 240.663673][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.663698][ T990] usb 4-1: Product: syz [ 240.663711][ T990] usb 4-1: Manufacturer: syz [ 240.663723][ T990] usb 4-1: SerialNumber: syz [ 240.928069][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 240.928121][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 240.928139][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 240.942796][ T990] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 240.964713][ T8724] netlink: 168 bytes leftover after parsing attributes in process `syz.2.949'. [ 241.190886][ T8693] wiimote 0005:057E:0330.0008: Device removed [ 241.400606][ T5764] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 241.511302][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 241.555939][ T5764] usb 2-1: New USB device found: idVendor=056a, idProduct=0019, bcdDevice=0.00 [ 241.556941][ T5764] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.556969][ T5764] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.556992][ T5764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.557021][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.564445][ T5764] usb 2-1: config 0 descriptor?? [ 241.971179][ T5701] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 242.083579][ T5764] wacom 0003:056A:0019.0009: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 242.109332][ T5764] wacom 0003:056A:0019.0009: hidraw1: USB HID v36.2c Joystick [HID 056a:0019] on usb-dummy_hcd.1-1/input0 [ 242.128842][ T5764] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0019.0009/input/input18 [ 242.133863][ T5701] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 242.155251][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.155312][ T5701] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.155348][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.177459][ T5701] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 242.342172][ T5764] usb 2-1: USB disconnect, device number 54 [ 242.399456][ T8739] fido_id[8739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 243.113640][ T4929] Bluetooth: hci0: unexpected event for opcode 0x203d [ 243.119191][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 243.458705][ T5701] usb 4-1: USB disconnect, device number 50 [ 244.024753][ T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.024797][ T51] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.024829][ T51] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.024858][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.284370][ T8765] overlayfs: upper fs does not support tmpfile. [ 244.312998][ T8765] overlayfs: upper fs does not support tmpfile. [ 244.493129][ T5701] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 244.664592][ T5701] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 244.665854][ T5701] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.665883][ T5701] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 244.665920][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.873624][ T5764] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 244.946986][ T1768] usb 3-1: USB disconnect, device number 48 [ 245.044970][ T5764] usb 4-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 245.055224][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.070521][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.070545][ T5764] usb 4-1: Product: syz [ 245.070559][ T5764] usb 4-1: Manufacturer: syz [ 245.070572][ T5764] usb 4-1: SerialNumber: syz [ 245.077503][ T5764] usb 4-1: config 0 descriptor?? [ 245.088921][ T5764] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 245.088970][ T5764] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 247.605029][ T8793] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 247.621452][ T8793] netlink: Unknown nat attribute (0) [ 247.621483][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.636651][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 247.669651][ T5701] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 247.706030][ T5701] usb 2-1: USB disconnect, device number 55 [ 247.921979][ T5693] usb 4-1: USB disconnect, device number 51 [ 248.016050][ T8795] syzkaller1: entered promiscuous mode [ 248.016306][ T8795] syzkaller1: entered allmulticast mode [ 248.364027][ T8806] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 248.364050][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.971'. [ 248.413294][ T8805] binder: Failure in copy_transaction_data: EINVAL [ 249.432068][ T990] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 249.467292][ T8822] [ 249.469651][ T8822] ====================================================== [ 249.476661][ T8822] WARNING: possible circular locking dependency detected [ 249.483685][ T8822] syzkaller #0 Tainted: G L [ 249.489750][ T8822] ------------------------------------------------------ [ 249.496770][ T8822] syz.1.976/8822 is trying to acquire lock: [ 249.502664][ T8822] ffff8880788b51c0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 249.512167][ T8822] [ 249.512167][ T8822] but task is already holding lock: [ 249.519524][ T8822] ffff88807823f960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 249.529273][ T8822] [ 249.529273][ T8822] which lock already depends on the new lock. [ 249.529273][ T8822] [ 249.539678][ T8822] [ 249.539678][ T8822] the existing dependency chain (in reverse order) is: [ 249.548687][ T8822] [ 249.548687][ T8822] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 249.556511][ T8822] __d_alloc_parallel+0xc32/0x1700 [ 249.562150][ T8822] __lookup_slow+0x82/0x2f0 [ 249.567172][ T8822] lookup_slow+0x59/0x80 [ 249.571934][ T8822] link_path_walk+0xd22/0x1910 [ 249.577217][ T8822] path_openat+0x1c4/0x1da0 [ 249.582239][ T8822] do_file_open+0x23e/0x4a0 [ 249.587265][ T8822] do_sys_openat2+0x115/0x200 [ 249.592467][ T8822] __x64_sys_openat+0x138/0x170 [ 249.597839][ T8822] do_syscall_64+0x166/0x520 [ 249.602948][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.609362][ T8822] [ 249.609362][ T8822] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 249.617798][ T8822] __lock_acquire+0x164c/0x2de0 [ 249.623172][ T8822] lock_acquire+0x115/0x350 [ 249.628191][ T8822] down_read+0x45/0x320 [ 249.632873][ T8822] lookup_slow+0x46/0x80 [ 249.637636][ T8822] ovl_lookup_single+0x323/0xe90 [ 249.643100][ T8822] ovl_lookup_layer+0x377/0x440 [ 249.648469][ T8822] ovl_lookup+0x5e5/0x1c80 [ 249.653389][ T8822] lookup_open+0x94b/0x1970 [ 249.658396][ T8822] path_openat+0x673/0x1da0 [ 249.663405][ T8822] do_file_open+0x23e/0x4a0 [ 249.668414][ T8822] do_sys_openat2+0x115/0x200 [ 249.673597][ T8822] __x64_sys_openat+0x138/0x170 [ 249.678957][ T8822] do_syscall_64+0x166/0x520 [ 249.684061][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.690475][ T8822] [ 249.690475][ T8822] other info that might help us debug this: [ 249.690475][ T8822] [ 249.700694][ T8822] Possible unsafe locking scenario: [ 249.700694][ T8822] [ 249.708131][ T8822] CPU0 CPU1 [ 249.713484][ T8822] ---- ---- [ 249.718838][ T8822] lock(DCACHE_PAR_LOOKUP); [ 249.723419][ T8822] lock(&type->i_mutex_dir_key#5); [ 249.731131][ T8822] lock(DCACHE_PAR_LOOKUP); [ 249.738230][ T8822] rlock(&type->i_mutex_dir_key#5); [ 249.743504][ T8822] [ 249.743504][ T8822] *** DEADLOCK *** [ 249.743504][ T8822] [ 249.751632][ T8822] locks held by syz.1.976/8822: 3, last CPU#0: [ 249.757771][ T8822] #0: ffff888055b5a460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 249.766988][ T8822] #1: ffff888012d8de58 (&ovl_i_mutex_dir_key[depth]){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 249.777414][ T8822] #2: ffff88807823f960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 249.787578][ T8822] [ 249.787578][ T8822] stack backtrace: [ 249.793456][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.1.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.804294][ T8822] Tainted: [L]=SOFTLOCKUP [ 249.808602][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.818640][ T8822] Call Trace: [ 249.821907][ T8822] [ 249.824823][ T8822] dump_stack_lvl+0xe8/0x150 [ 249.829402][ T8822] print_circular_bug+0x2e2/0x300 [ 249.834416][ T8822] check_noncircular+0x12f/0x150 [ 249.839343][ T8822] __lock_acquire+0x164c/0x2de0 [ 249.844183][ T8822] ? lock_acquire+0x115/0x350 [ 249.848853][ T8822] lock_acquire+0x115/0x350 [ 249.853342][ T8822] ? lookup_slow+0x46/0x80 [ 249.857747][ T8822] down_read+0x45/0x320 [ 249.861891][ T8822] ? lookup_slow+0x46/0x80 [ 249.866288][ T8822] ? d_lookup+0x8a/0xa0 [ 249.870429][ T8822] lookup_slow+0x46/0x80 [ 249.874658][ T8822] ovl_lookup_single+0x323/0xe90 [ 249.879598][ T8822] ? __pfx_ovl_lookup_single+0x10/0x10 [ 249.885046][ T8822] ? tomoyo_path_number_perm+0x219/0x5f0 [ 249.890666][ T8822] ? tomoyo_path_number_perm+0x219/0x5f0 [ 249.896286][ T8822] ovl_lookup_layer+0x377/0x440 [ 249.901121][ T8822] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.907089][ T8822] ovl_lookup+0x5e5/0x1c80 [ 249.911494][ T8822] ? make_vfsuid+0x49/0xa0 [ 249.915909][ T8822] ? __pfx_ovl_lookup+0x10/0x10 [ 249.920742][ T8822] ? ovl_permission+0x187/0x300 [ 249.925587][ T8822] ? __pfx_ovl_permission+0x10/0x10 [ 249.930767][ T8822] ? from_kgid+0x1c6/0x660 [ 249.935169][ T8822] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 249.940616][ T8822] ? __pfx_from_kgid+0x10/0x10 [ 249.945367][ T8822] ? inode_permission+0x2b8/0x600 [ 249.950374][ T8822] ? bpf_lsm_inode_create+0x9/0x20 [ 249.955467][ T8822] ? security_inode_create+0xc3/0x340 [ 249.960825][ T8822] lookup_open+0x94b/0x1970 [ 249.965322][ T8822] path_openat+0x673/0x1da0 [ 249.969813][ T8822] do_file_open+0x23e/0x4a0 [ 249.974300][ T8822] ? __pfx_do_file_open+0x10/0x10 [ 249.979312][ T8822] ? _raw_spin_unlock+0x28/0x50 [ 249.984148][ T8822] ? alloc_fd+0x6af/0x760 [ 249.988464][ T8822] do_sys_openat2+0x115/0x200 [ 249.993140][ T8822] ? __se_sys_futex+0x3a8/0x450 [ 249.997978][ T8822] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.003162][ T8822] ? rcu_is_watching+0x16/0xb0 [ 250.007915][ T8822] __x64_sys_openat+0x138/0x170 [ 250.012756][ T8822] do_syscall_64+0x166/0x520 [ 250.017333][ T8822] ? trace_irq_disable+0x3b/0x140 [ 250.022339][ T8822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.028401][ T8822] ? clear_bhb_loop+0x70/0xc0 [ 250.033068][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.038944][ T8822] RIP: 0033:0x7f551619e159 [ 250.043352][ T8822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.062943][ T8822] RSP: 002b:00007f5517138028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.071346][ T8822] RAX: ffffffffffffffda RBX: 00007f5516425fa0 RCX: 00007f551619e159 [ 250.079310][ T8822] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 250.087269][ T8822] RBP: 00007f551623506b R08: 0000000000000000 R09: 0000000000000000 [ 250.095224][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.103180][ T8822] R13: 00007f5516426038 R14: 00007f5516425fa0 R15: 00007fff8fc5af68 [ 250.111148][ T8822] [ 250.309410][ T990] usb 4-1: not running at top speed; connect to a high speed hub [ 250.309437][ T990] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 250.310253][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.314504][ T990] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 250.322865][ T990] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 250.602979][ T5764] usb 4-1: USB disconnect, device number 52 [ 250.631326][ T5764] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 250.632040][ T5764] cyberjack 4-1:1.0: device disconnected [ 250.808504][ T1768] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 250.969941][ T1768] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 250.971185][ T1768] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.972018][ T1768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 250.972037][ T1768] usb 1-1: SerialNumber: syz [ 251.818915][ T1768] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 252.060210][ T1768] usb 1-1: USB disconnect, device number 58 [ 252.062879][ T1768] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device