last executing test programs: 3m24.906998458s ago: executing program 0 (id=1): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0xff, 0x1, 0x4, 0x800, 0x4, {}, {0x5, 0x2, 0x8, 0x67, 0xb, 0x8, "e58e3cd3"}, 0x1ff, 0x4, {}, 0x6}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x200, 0x0, {0x77359400}, {0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3m22.732178412s ago: executing program 0 (id=16): socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x143041, 0x12a) r1 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 3m21.428880665s ago: executing program 0 (id=19): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file2\x00') 3m19.346609046s ago: executing program 0 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000000000008000000280002"], 0x60}}, 0x0) 3m17.551312951s ago: executing program 0 (id=34): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000780)=""/131, 0x83) 3m17.277990457s ago: executing program 32 (id=34): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000780)=""/131, 0x83) 19.178927964s ago: executing program 5 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r6}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 18.006982243s ago: executing program 5 (id=960): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) accept4$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 15.022867558s ago: executing program 5 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002980)=""/102399, 0x18fff) 14.024276162s ago: executing program 5 (id=969): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) 12.924207699s ago: executing program 2 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) write(0xffffffffffffffff, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000001000), 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0x0, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000), &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 11.605882992s ago: executing program 3 (id=974): mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 11.233039691s ago: executing program 2 (id=975): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000880)=""/94, 0x0, 0x200000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002b64791086050015972e0102030109022400010000000009040000020abf400009050b02000000000009050a02"], 0x0) 10.354036474s ago: executing program 5 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getscheduler(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)}], 0x1}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 9.25815478s ago: executing program 5 (id=978): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xd) 8.118155039s ago: executing program 3 (id=981): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x68, 0x3, 0x2, 0x1, 0xd2e, 0x1, 0x200, 0x5}}}}]}, 0x58}}, 0xc0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.002827832s ago: executing program 3 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r6}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 6.929542108s ago: executing program 2 (id=984): socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 6.892753259s ago: executing program 3 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) write(0xffffffffffffffff, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000001000), 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0x0, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000), &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 5.265365969s ago: executing program 2 (id=988): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xefe, &(0x7f00000005c0)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 5.152811913s ago: executing program 4 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 4.636431076s ago: executing program 1 (id=991): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x4, "8df083d1"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000300), 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 4.407628061s ago: executing program 4 (id=992): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x68, 0x3, 0x2, 0x1, 0xd2e, 0x1, 0x200, 0x5}}}}]}, 0x58}}, 0xc0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.264093705s ago: executing program 4 (id=993): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 3.368610197s ago: executing program 3 (id=994): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) accept4$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.297110459s ago: executing program 4 (id=995): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000880)=""/94, 0x0, 0x200000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002b64791086050015972e0102030109022400010000000009040000020abf400009050b02000000000009050a02"], 0x0) 3.206188131s ago: executing program 2 (id=996): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="5002a6068e52610100907800000b45d6ab70adbe8f7d6bf5cda9149a848d355358e96f403717611fee0424a04cea43d7bd799319aa7096dc985e519b8e6b5a6e4841b40220647b1f23a5c950f04febd8aabe8c487f880185237a1c45f4090b6765609a797e276e74b94d3a3a4a89"], 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) 2.01862775s ago: executing program 3 (id=997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.004000981s ago: executing program 2 (id=998): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x101000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$uac2(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.568342612s ago: executing program 1 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) 567.131727ms ago: executing program 1 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) 524.744698ms ago: executing program 1 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "235bd32fd4b3a8d1"}, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) 463.989249ms ago: executing program 1 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 232.988445ms ago: executing program 4 (id=1003): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x68, 0x3, 0x2, 0x1, 0xd2e, 0x1, 0x200, 0x5}}}}]}, 0x58}}, 0xc0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 186.057816ms ago: executing program 1 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456780\n\x00', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) write(0xffffffffffffffff, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./payload\x00', 0x42, 0x1ff) write(r5, &(0x7f0000001000), 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0x0, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000), &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): [ 75.552391][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.561275][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590218][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.603140][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.613271][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.625008][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.635952][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.646644][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.657403][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.668145][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.682807][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.712874][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.732642][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.743650][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.754618][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.765117][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.775720][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.788093][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.800447][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.812471][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.822850][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.835003][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.845608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.857845][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.869371][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.880219][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.891564][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.899946][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.909774][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.919570][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.928707][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.938060][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.947324][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.992942][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.008184][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.018996][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.773572][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.112054][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 77.192396][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 77.201071][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 77.221202][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 77.240660][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 77.584445][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597921][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613245][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.623602][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751362][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.761660][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.778281][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.807509][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.820681][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.832450][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.845729][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.864572][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.875764][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.889138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.919895][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.923919][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.937267][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.946493][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.950181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.967143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.989318][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.998560][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.009018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.080357][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.096002][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.111691][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.129868][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.145473][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.163373][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.212244][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.227012][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.240777][ T4232] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 78.251434][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.270207][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.310412][ T4232] usb 3-1: config 0 descriptor?? [ 78.371302][ T4295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 78.389401][ T4295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 78.437087][ T4299] capability: warning: `syz.4.10' uses 32-bit capabilities (legacy support in use) [ 78.510451][ T4301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 78.729813][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.912452][ T4313] loop4: detected capacity change from 0 to 512 [ 78.992651][ T4232] usbhid 3-1:0.0: can't add hid device: -32 [ 79.090251][ T4313] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.163601][ T4232] usbhid: probe of 3-1:0.0 failed with error -32 [ 79.296157][ T4234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 79.429141][ T4313] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 79.446077][ T4313] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.660636][ T4313] netlink: 'syz.4.13': attribute type 17 has an invalid length. [ 79.699113][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.981955][ C0] sched: RT throttling activated [ 80.215196][ T4234] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 80.289671][ T4234] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 80.330525][ T4321] Zero length message leads to an empty skb [ 80.369407][ T4234] usb 4-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 80.609646][ T4234] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 80.629822][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.002421][ T4294] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.016297][ T4313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.567625][ T4234] ims_pcu 4-1:1.0: Incorrect number of endpoints on data interface (1) [ 81.576933][ T4234] ims_pcu: probe of 4-1:1.0 failed with error -22 [ 81.594975][ T4234] usb 4-1: USB disconnect, device number 2 [ 81.725701][ T4336] loop0: detected capacity change from 0 to 2048 [ 81.882083][ T4336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.482000][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 82.502002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.511989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.521994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.531993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.541997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.552008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.561998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.571997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.682879][ T4350] "syz.1.17" (4350) uses obsolete ecb(arc4) skcipher [ 83.042002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.289743][ T2286] usb 3-1: USB disconnect, device number 2 [ 83.353782][ T4354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.644142][ T4186] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 83.672895][ T4186] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 85.583366][ T4386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.609739][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.717195][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.846776][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.893495][ T4403] overlayfs: missing 'lowerdir' [ 86.073662][ T26] audit: type=1326 audit(1791404124.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.158889][ T26] audit: type=1326 audit(1791404124.923:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.203312][ T26] audit: type=1326 audit(1791404124.923:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.281849][ T26] audit: type=1326 audit(1791404124.923:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.308725][ T26] audit: type=1326 audit(1791404124.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.352613][ T26] audit: type=1326 audit(1791404124.923:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.412231][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.421116][ T26] audit: type=1326 audit(1791404124.923:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.452270][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.460733][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.462044][ T26] audit: type=1326 audit(1791404124.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.498326][ T26] audit: type=1326 audit(1791404124.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.523163][ T26] audit: type=1326 audit(1791404124.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.3.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f86fc5f0199 code=0x7ffc0000 [ 86.842358][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.864945][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.882182][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 86.906898][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.962378][ T21] usb 2-1: config index 0 descriptor too short (expected 61365, got 181) [ 86.971483][ T21] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 86.987029][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.999520][ T21] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 87.132306][ T21] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 87.146097][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.156316][ T21] usb 2-1: Product: syz [ 87.160617][ T21] usb 2-1: Manufacturer: syz [ 87.197980][ T23] cfg80211: failed to load regulatory.db [ 87.220570][ T21] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 87.227420][ T21] usb 2-1: No streaming interface found for terminal 2. [ 87.240867][ T21] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 87.310877][ T4402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.320281][ T4402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.341055][ T4402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.352154][ T4402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.625375][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.058963][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.067003][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.102218][ T1107] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 88.162937][ T4420] Bluetooth: hci0: command 0x0409 tx timeout [ 88.363416][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.397911][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.702232][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.792286][ T1107] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 88.803946][ T4418] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.819244][ T4418] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.830047][ T4418] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.843532][ T4418] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.862206][ T1107] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 88.870717][ T1107] usb 4-1: can't read configurations, error -71 [ 88.941773][ T4268] usb 2-1: USB disconnect, device number 2 [ 88.967159][ T4423] netlink: 31 bytes leftover after parsing attributes in process `syz.2.46'. [ 89.267954][ T4413] chnl_net:caif_netlink_parms(): no params data found [ 89.559144][ T4450] device syzkaller0 entered promiscuous mode [ 89.679818][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.695996][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.719116][ T4413] device bridge_slave_0 entered promiscuous mode [ 89.789913][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.808125][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.843751][ T4413] device bridge_slave_1 entered promiscuous mode [ 90.056542][ T4464] overlayfs: missing 'lowerdir' [ 90.060901][ T4413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.123506][ T4413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.235883][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 90.276338][ T4413] team0: Port device team_slave_0 added [ 90.353317][ T4413] team0: Port device team_slave_1 added [ 90.486137][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.498061][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.535458][ T4413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.568219][ T4483] netlink: 'syz.4.64': attribute type 10 has an invalid length. [ 90.582345][ T4483] netlink: 55 bytes leftover after parsing attributes in process `syz.4.64'. [ 90.680326][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.697419][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.779377][ T4413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.935642][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.956758][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.081614][ T4496] netlink: 'syz.1.66': attribute type 16 has an invalid length. [ 91.115922][ T4496] netlink: 'syz.1.66': attribute type 17 has an invalid length. [ 91.224739][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.265033][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.345079][ T4496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.505569][ T4413] device hsr_slave_0 entered promiscuous mode [ 91.529834][ T4413] device hsr_slave_1 entered promiscuous mode [ 91.551168][ T4413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.579594][ T4413] Cannot create hsr debugfs directory [ 92.501568][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 92.801618][ T144] device hsr_slave_0 left promiscuous mode [ 92.814076][ T144] device hsr_slave_1 left promiscuous mode [ 92.842397][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.850548][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.921878][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.950651][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.992407][ T144] device bridge_slave_1 left promiscuous mode [ 92.999973][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.047469][ T144] device bridge_slave_0 left promiscuous mode [ 93.054184][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.084851][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.163753][ T144] device veth1_macvtap left promiscuous mode [ 93.180835][ T144] device veth0_macvtap left promiscuous mode [ 93.193970][ T144] device veth1_vlan left promiscuous mode [ 93.200347][ T144] device veth0_vlan left promiscuous mode [ 93.312094][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 93.397994][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.417079][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.432104][ T4420] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.432592][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.448299][ T1107] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 93.450294][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.458046][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.484629][ T1107] usb 4-1: config 0 descriptor?? [ 93.490363][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.561237][ T144] bond0 (unregistering): Released all slaves [ 93.679073][ T4413] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.709317][ T4413] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.735306][ T4413] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.760198][ T4413] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.792338][ T4420] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 93.820890][ T4420] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.860238][ T4420] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.960654][ T1107] input: HID 258a:6a88 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:258A:6A88.0001/input/input6 [ 93.972559][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.012888][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.033005][ T4420] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.035345][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.050176][ T4420] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.084780][ T1107] itetech 0003:258A:6A88.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 94.124628][ T4413] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.198707][ T4420] usb 5-1: Product: syz [ 94.207998][ T4420] usb 5-1: Manufacturer: syz [ 94.212832][ T4420] usb 5-1: SerialNumber: syz [ 94.231659][ T4420] usb 5-1: config 0 descriptor?? [ 94.253064][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.563434][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 94.589356][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.814732][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.822553][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.846145][ T4420] hub 5-1:0.0: bad descriptor, ignoring hub [ 94.872197][ T4420] hub: probe of 5-1:0.0 failed with error -5 [ 94.901595][ T4420] usb 5-1: selecting invalid altsetting 0 [ 95.025103][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.060584][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.116648][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.197215][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.204522][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.258993][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.286690][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.322700][ T4591] tipc: Started in network mode [ 95.328489][ T4591] tipc: Node identity a2d7cfeb4c11, cluster identity 4711 [ 95.346451][ T4591] tipc: Enabled bearer , priority 0 [ 95.372313][ T4420] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 95.381858][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.414348][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.431431][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.513297][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.548834][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.562781][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.563831][ T4189] usb 4-1: USB disconnect, device number 5 [ 95.594259][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.612670][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.636574][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.696986][ T4591] tipc: Disabling bearer [ 95.720746][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.082182][ T4420] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71) [ 96.119508][ T4420] usb 5-1: USB disconnect, device number 2 [ 96.190042][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.217275][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.233681][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.265641][ T4638] netlink: 12030 bytes leftover after parsing attributes in process `syz.2.100'. [ 96.985869][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.044961][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.152826][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.173885][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.229447][ T4413] device veth0_vlan entered promiscuous mode [ 97.245983][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.279675][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.364556][ T4413] device veth1_vlan entered promiscuous mode [ 97.514394][ T4413] device veth0_macvtap entered promiscuous mode [ 97.626348][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.653528][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.684882][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.720656][ T4413] device veth1_macvtap entered promiscuous mode [ 97.819250][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 97.866783][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.905781][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.948047][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.977776][ T4677] ip_tables: iptables: counters copy to user failed while replacing table [ 97.996898][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.028565][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.189875][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.224640][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.262553][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.311801][ T4670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.372617][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.388955][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.419623][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.481658][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.504815][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.511604][ T4670] syz.4.106 (4670) used greatest stack depth: 19360 bytes left [ 98.540951][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.545008][ T4685] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.571088][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.579890][ T4685] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.601448][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.632355][ T4413] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.659571][ T4413] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.689311][ T4413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.723920][ T4413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.756394][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.776810][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.881606][ T4700] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 4700 comm: syz.2.116) [ 98.983634][ T26] kauditd_printk_skb: 120 callbacks suppressed [ 98.983650][ T26] audit: type=1800 audit(1791404137.793:132): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=35370 res=0 errno=0 [ 99.018223][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.073572][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.158581][ T26] audit: type=1326 audit(1791404137.893:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.4.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4b667199 code=0x0 [ 99.159212][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.275865][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.332039][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.344630][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 99.368965][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.177560][ T4721] "syz.5.35" (4721) uses obsolete ecb(arc4) skcipher [ 100.873839][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 100.967356][ T4724] kvm: emulating exchange as write [ 101.642052][ T4268] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.699422][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.957144][ T4268] usb 4-1: Using ep0 maxpacket: 16 [ 101.992521][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 102.119007][ T4760] fuse: Bad value for 'fd' [ 102.122384][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.182439][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.907566][ T4768] "syz.5.129" (4768) uses obsolete ecb(arc4) skcipher [ 103.357578][ T7] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 103.382012][ T7] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 103.413396][ T4268] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.442395][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.450456][ T4268] usb 4-1: Product: syz [ 103.482133][ T4268] usb 4-1: Manufacturer: syz [ 103.486888][ T4268] usb 4-1: SerialNumber: syz [ 103.527897][ T4268] usb 4-1: config 0 descriptor?? [ 103.542296][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 103.564639][ T7] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 103.607551][ T4268] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.637958][ T7] usb 3-1: Manufacturer: syz [ 103.647587][ T4268] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 103.656062][ T7] usb 3-1: SerialNumber: syz [ 103.862176][ T4232] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.977627][ T7] usb 3-1: USB disconnect, device number 3 [ 104.242169][ T4268] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 104.262394][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.322182][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 104.402365][ T4232] usb 5-1: config 5 has an invalid interface number: 29 but max is 0 [ 104.431278][ T4232] usb 5-1: config 5 has no interface number 0 [ 104.451042][ T4232] usb 5-1: config 5 interface 29 has no altsetting 0 [ 104.628157][ T4232] usb 5-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 104.678282][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.717083][ T4232] usb 5-1: Product: syz [ 104.726590][ T4232] usb 5-1: Manufacturer: syz [ 104.758919][ T4232] usb 5-1: SerialNumber: syz [ 104.803588][ T4268] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.852178][ T4268] em28xx 4-1:0.0: board has no eeprom [ 104.962062][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.992174][ T4268] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.022361][ T4268] em28xx 4-1:0.0: dvb set to bulk mode. [ 105.062930][ T4270] em28xx 4-1:0.0: Binding DVB extension [ 105.126750][ T4268] usb 4-1: USB disconnect, device number 6 [ 105.159823][ T4268] em28xx 4-1:0.0: Disconnecting em28xx [ 105.273743][ T4270] em28xx 4-1:0.0: Registering input extension [ 105.313067][ T4268] em28xx 4-1:0.0: Closing input extension [ 105.359048][ T4232] usb 5-1: USB disconnect, device number 3 [ 105.380001][ T4268] em28xx 4-1:0.0: Freeing device [ 105.385496][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.402584][ T7] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 105.425990][ T4812] capability: warning: `syz.5.130' uses deprecated v2 capabilities in a way that may be insecure [ 105.462116][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.565924][ T7] as10x_usb: device has been detected [ 105.585479][ T4820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.592186][ T7] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 105.688702][ T7] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 105.788476][ T7] as10x_usb: error during firmware upload part1 [ 105.812309][ T7] Registered device Abilis Systems DVB-Titan [ 105.887796][ T4828] fuse: Bad value for 'fd' [ 106.502213][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.624536][ T4268] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.802133][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 106.876797][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.145'. [ 106.882701][ T4232] usb 3-1: USB disconnect, device number 4 [ 106.911919][ T4232] Unregistered device Abilis Systems DVB-Titan [ 106.914032][ T4232] as10x_usb: device has been disconnected [ 107.122555][ T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.132076][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.140954][ T7] usb 2-1: Product: syz [ 107.146884][ T7] usb 2-1: Manufacturer: syz [ 107.151794][ T7] usb 2-1: SerialNumber: syz [ 107.173813][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 107.202199][ T4268] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 107.211385][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.219674][ T4268] usb 4-1: Product: syz [ 107.225256][ T4268] usb 4-1: Manufacturer: syz [ 107.230156][ T4268] usb 4-1: SerialNumber: syz [ 107.252062][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.422071][ T4420] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.512615][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 107.673015][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 107.712310][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 107.803282][ T23] usb 6-1: config 4 interface 0 has no altsetting 0 [ 107.810951][ T4420] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.832042][ T4420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.872033][ T4420] usb 5-1: config 0 descriptor?? [ 108.042174][ T23] usb 6-1: string descriptor 0 read error: -22 [ 108.048884][ T23] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 108.058805][ T23] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 108.082030][ T4270] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 108.104216][ T23] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 108.115846][ T4860] xt_hashlimit: size too large, truncated to 1048576 [ 108.126999][ T23] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.153615][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 108.160816][ T23] usb 6-1: media controller created [ 108.203681][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.463432][ T4270] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 108.481258][ T4270] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 108.499571][ T4270] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 108.573850][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.145'. [ 108.683868][ T4270] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 108.699434][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.709637][ T4270] usb 3-1: Product: syz [ 108.722083][ T4270] usb 3-1: Manufacturer: syz [ 108.726891][ T4270] usb 3-1: SerialNumber: syz [ 109.078635][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 109.132872][ T4270] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.162227][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 109.168957][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 109.181189][ T4270] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 109.198148][ T7] r8152-cfgselector 2-1: bad CDC descriptors [ 109.242384][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 109.255574][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 109.269285][ T4270] usb 3-1: USB disconnect, device number 5 [ 109.300805][ T7] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 109.309518][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 109.382300][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 109.424128][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 109.470262][ T23] usb 6-1: USB disconnect, device number 2 [ 109.474403][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 109.582473][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 109.617327][ T4602] udevd[4602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.625761][ T4878] fuse: Bad value for 'fd' [ 109.662249][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 109.723811][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 109.777402][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 109.811060][ T4268] lan78xx: probe of 4-1:1.0 failed with error -71 [ 109.854680][ T4268] usb 4-1: USB disconnect, device number 7 [ 109.998677][ T4270] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.252757][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.283730][ T4270] usb 2-1: Using ep0 maxpacket: 8 [ 110.412512][ T4270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.451095][ T4270] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.484132][ T4270] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 110.502044][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 110.519508][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.554175][ T4270] usb 2-1: config 0 descriptor?? [ 110.622708][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.641902][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.660332][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.671248][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.695259][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.709174][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.982270][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 110.988097][ T23] usbtmc 3-1:16.0: can't read capabilities [ 111.176096][ T23] usb 5-1: USB disconnect, device number 4 [ 111.233102][ T2286] usb 3-1: USB disconnect, device number 6 [ 111.315902][ T4908] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 111.341615][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 111.450518][ T4916] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.614597][ T4189] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.664430][ T4929] fuse: Unknown parameter '0x0000000000000003' [ 111.712183][ T4270] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.872202][ T4189] usb 6-1: Using ep0 maxpacket: 16 [ 111.968379][ T4268] usb 2-1: USB disconnect, device number 4 [ 111.992310][ T4189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.112364][ T4270] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 112.127545][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.156650][ T4270] usb 4-1: config 0 descriptor?? [ 112.162430][ T4189] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.182891][ T4189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.190960][ T4189] usb 6-1: Product: syz [ 112.224104][ T4270] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 112.244643][ T4189] usb 6-1: Manufacturer: syz [ 112.250497][ T4270] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 112.266797][ T4189] usb 6-1: SerialNumber: syz [ 112.305427][ T4189] usb 6-1: config 0 descriptor?? [ 112.322199][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 112.344670][ T4189] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.379809][ T4189] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 112.762436][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.774666][ T7] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 112.816471][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.870264][ T7] usb 5-1: config 0 descriptor?? [ 112.932173][ T4270] usb 4-1: USB disconnect, device number 8 [ 113.047103][ T4189] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 113.078399][ T4954] loop3: detected capacity change from 0 to 1024 [ 114.384793][ T4189] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.389955][ T7] hid-generic 0003:0458:5014.0002: unknown main item tag 0x1 [ 114.401024][ T4189] em28xx 6-1:0.0: board has no eeprom [ 114.604068][ T7] hid-generic 0003:0458:5014.0002: unknown main item tag 0x5 [ 114.715627][ T7] hid-generic 0003:0458:5014.0002: unknown main item tag 0x6 [ 114.740452][ T7] hid-generic 0003:0458:5014.0002: unknown main item tag 0x0 [ 114.759601][ T7] hid-generic 0003:0458:5014.0002: unknown main item tag 0x0 [ 114.790216][ T7] hid-generic 0003:0458:5014.0002: unbalanced collection at end of report description [ 114.832496][ T7] hid-generic: probe of 0003:0458:5014.0002 failed with error -22 [ 114.862000][ T4189] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.863519][ T7] usb 5-1: USB disconnect, device number 5 [ 114.880727][ T4189] em28xx 6-1:0.0: dvb set to bulk mode. [ 114.938949][ T4420] em28xx 6-1:0.0: Binding DVB extension [ 115.161301][ T4189] usb 6-1: USB disconnect, device number 3 [ 115.194144][ T4910] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-19) [ 115.233898][ T4189] em28xx 6-1:0.0: Disconnecting em28xx [ 115.297140][ T4420] em28xx 6-1:0.0: Registering input extension [ 115.311180][ T4189] em28xx 6-1:0.0: Closing input extension [ 115.355287][ T4189] em28xx 6-1:0.0: Freeing device [ 115.516554][ T4959] ODEBUG: Out of memory. ODEBUG disabled [ 116.884123][ T5024] loop2: detected capacity change from 0 to 1024 [ 120.345369][ T5064] "syz.3.196" (5064) uses obsolete ecb(arc4) skcipher [ 121.163029][ T5075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.199'. [ 121.368719][ T5079] KVM: debugfs: duplicate directory 5079-4 [ 121.562127][ T4189] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.852064][ T4189] usb 5-1: Using ep0 maxpacket: 32 [ 122.977983][ T4189] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.995088][ T4189] usb 5-1: config 0 has no interface number 0 [ 123.011992][ T4189] usb 5-1: config 0 interface 184 has no altsetting 0 [ 123.255222][ T4189] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.535024][ T4189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.633449][ T4189] usb 5-1: Product: syz [ 123.688697][ T4189] usb 5-1: Manufacturer: syz [ 123.834907][ T4189] usb 5-1: SerialNumber: syz [ 123.851474][ T4189] usb 5-1: config 0 descriptor?? [ 123.903410][ T4189] smsc75xx v1.0.0 [ 124.483111][ T5112] "syz.2.207" (5112) uses obsolete ecb(arc4) skcipher [ 125.402238][ T4189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.433948][ T4189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.752281][ T4189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 125.777324][ T4189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 125.797612][ T4189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 125.833559][ T4189] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 125.842136][ T4270] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 125.876942][ T4189] usb 5-1: USB disconnect, device number 6 [ 125.961003][ T5153] loop1: detected capacity change from 0 to 1024 [ 126.014322][ T5156] device syzkaller1 entered promiscuous mode [ 126.094315][ T5153] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.202285][ T4270] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 126.222009][ T4270] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.252226][ T4270] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 126.412435][ T4270] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 126.437961][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.468164][ T4270] usb 6-1: Product: syz [ 126.487140][ T4270] usb 6-1: Manufacturer: syz [ 126.491789][ T4270] usb 6-1: SerialNumber: syz [ 127.279966][ T4270] usb 6-1: USB disconnect, device number 4 [ 127.291359][ T4189] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.371785][ T5181] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 127.429511][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 127.454658][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 127.752147][ T4189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.962271][ T4189] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 127.984432][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.017622][ T4189] usb 4-1: Product: syz [ 128.031117][ T4189] usb 4-1: Manufacturer: syz [ 128.047496][ T4189] usb 4-1: SerialNumber: syz [ 128.410659][ T4189] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 128.442053][ T4189] snd-usb-6fire: probe of 4-1:1.0 failed with error -71 [ 128.469035][ T4189] usb 4-1: USB disconnect, device number 9 [ 129.599149][ T5259] loop3: detected capacity change from 0 to 2048 [ 129.700220][ T5259] loop3: p1 < > p4 [ 129.741161][ T5259] loop3: p4 size 8388608 extends beyond EOD, truncated [ 129.787715][ T3559] loop3: p1 < > p4 [ 129.798340][ T3559] loop3: p4 size 8388608 extends beyond EOD, truncated [ 130.827973][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 130.839008][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 130.856247][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 130.905790][ T5286] program syz.5.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.932186][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 131.143648][ T5296] FAULT_INJECTION: forcing a failure. [ 131.143648][ T5296] name failslab, interval 1, probability 0, space 0, times 1 [ 131.189931][ T5296] CPU: 1 PID: 5296 Comm: syz.3.255 Not tainted syzkaller #0 [ 131.197283][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.207377][ T5296] Call Trace: [ 131.210674][ T5296] [ 131.213622][ T5296] dump_stack_lvl+0x188/0x250 [ 131.218352][ T5296] ? show_regs_print_info+0x20/0x20 [ 131.223660][ T5296] ? load_image+0x410/0x410 [ 131.228191][ T5296] ? __might_sleep+0xf0/0xf0 [ 131.232878][ T5296] ? __lock_acquire+0x7d40/0x7d40 [ 131.237930][ T5296] should_fail+0x383/0x4b0 [ 131.242370][ T5296] should_failslab+0x5/0x20 [ 131.246965][ T5296] slab_pre_alloc_hook+0x51/0xc0 [ 131.252000][ T5296] __kmalloc_node+0x6d/0x3a0 [ 131.256695][ T5296] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 131.262959][ T5296] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 131.268827][ T5296] slab_post_alloc_hook+0xba/0x380 [ 131.274147][ T5296] ? ep_insert+0x4a5/0x1930 [ 131.278784][ T5296] kmem_cache_alloc+0x15d/0x280 [ 131.283703][ T5296] ep_insert+0x4a5/0x1930 [ 131.288069][ T5296] ? ep_loop_check+0x180/0x180 [ 131.292852][ T5296] ? mutex_lock_io_nested+0x60/0x60 [ 131.298071][ T5296] ? apparmor_capable+0x12c/0x190 [ 131.303170][ T5296] ? bpf_lsm_capable+0x5/0x10 [ 131.307868][ T5296] ? security_capable+0x85/0xb0 [ 131.312739][ T5296] do_epoll_ctl+0x8bc/0xf20 [ 131.317357][ T5296] __x64_sys_epoll_ctl+0x162/0x1b0 [ 131.322855][ T5296] ? ep_modify+0xa80/0xa80 [ 131.327766][ T5296] ? lockdep_hardirqs_on+0x94/0x140 [ 131.333276][ T5296] do_syscall_64+0x4c/0xa0 [ 131.338423][ T5296] ? clear_bhb_loop+0x30/0x80 [ 131.343468][ T5296] ? clear_bhb_loop+0x30/0x80 [ 131.348428][ T5296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.354586][ T5296] RIP: 0033:0x7f86fc5f0199 [ 131.359397][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.379561][ T5296] RSP: 002b:00007f86fa848028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 131.388261][ T5296] RAX: ffffffffffffffda RBX: 00007f86fc877fa0 RCX: 00007f86fc5f0199 [ 131.396562][ T5296] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 131.404640][ T5296] RBP: 00007f86fc6878e0 R08: 0000000000000000 R09: 0000000000000000 [ 131.412938][ T5296] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 131.421296][ T5296] R13: 00007f86fc878038 R14: 00007f86fc877fa0 R15: 00007fff8f28add8 [ 131.430491][ T5296] [ 131.732201][ T2286] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.992256][ T2286] usb 2-1: Using ep0 maxpacket: 16 [ 132.083548][ T5316] loop3: detected capacity change from 0 to 136 [ 132.123164][ T2286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.315362][ T2286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 132.493709][ T2286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 132.504470][ T2286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 132.650883][ T5321] device syzkaller0 entered promiscuous mode [ 132.693942][ T2286] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 132.713440][ T2286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.768424][ T2286] usb 2-1: Product: syz [ 132.805130][ T5329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.262'. [ 132.852911][ T2286] usb 2-1: Manufacturer: syz [ 132.948609][ T2286] usb 2-1: SerialNumber: syz [ 132.979945][ T2286] usb 2-1: config 0 descriptor?? [ 133.046180][ T2286] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 133.117437][ T2286] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 133.246698][ T4189] usb 2-1: USB disconnect, device number 5 [ 133.273889][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.280279][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.295167][ T4189] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 133.318544][ T4189] omninet 2-1:0.0: device disconnected [ 134.788124][ T5364] loop4: detected capacity change from 0 to 136 [ 134.918839][ T5371] loop1: detected capacity change from 0 to 1024 [ 135.160908][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.278'. [ 136.463583][ T5379] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.610128][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 137.756499][ T5407] loop3: detected capacity change from 0 to 136 [ 138.094776][ T5415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.294'. [ 139.042449][ T5430] syz.5.301 uses obsolete (PF_INET,SOCK_PACKET) [ 139.283341][ T5441] device syzkaller0 entered promiscuous mode [ 140.044726][ T5449] device syzkaller1 entered promiscuous mode [ 141.115958][ T5492] tmpfs: Unexpected value for 'inode32' [ 141.169815][ T5493] device syzkaller0 entered promiscuous mode [ 141.408300][ T5505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.329'. [ 141.769941][ T5526] FAULT_INJECTION: forcing a failure. [ 141.769941][ T5526] name failslab, interval 1, probability 0, space 0, times 0 [ 141.801251][ T5526] CPU: 1 PID: 5526 Comm: syz.4.340 Not tainted syzkaller #0 [ 141.808676][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.819095][ T5526] Call Trace: [ 141.822676][ T5526] [ 141.825801][ T5526] dump_stack_lvl+0x188/0x250 [ 141.830600][ T5526] ? show_regs_print_info+0x20/0x20 [ 141.836091][ T5526] ? load_image+0x410/0x410 [ 141.841160][ T5526] ? __might_sleep+0xf0/0xf0 [ 141.846100][ T5526] ? __lock_acquire+0x7d40/0x7d40 [ 141.851419][ T5526] should_fail+0x383/0x4b0 [ 141.855912][ T5526] should_failslab+0x5/0x20 [ 141.861110][ T5526] slab_pre_alloc_hook+0x51/0xc0 [ 141.866566][ T5526] ? security_inode_alloc+0x30/0x110 [ 141.872710][ T5526] kmem_cache_alloc+0x3d/0x280 [ 141.877760][ T5526] security_inode_alloc+0x30/0x110 [ 141.882913][ T5526] inode_init_always+0x8e5/0xc90 [ 141.888069][ T5526] new_inode_pseudo+0x8e/0x210 [ 141.892871][ T5526] new_inode+0x25/0x1d0 [ 141.897059][ T5526] ? init_timer_key+0x15d/0x2a0 [ 141.901981][ T5526] bdev_alloc+0x20/0x230 [ 141.906407][ T5526] __alloc_disk_node+0xbb/0x4f0 [ 141.911694][ T5526] __blk_alloc_disk+0x2a/0x60 [ 141.916417][ T5526] dm_create+0x57f/0xf90 [ 141.920976][ T5526] dev_create+0x12e/0x2c0 [ 141.925663][ T5526] ? list_devices+0x820/0x820 [ 141.930393][ T5526] ? __might_fault+0xb3/0x110 [ 141.935206][ T5526] ? _copy_from_user+0x111/0x170 [ 141.940475][ T5526] dm_ctl_ioctl+0x947/0xd00 [ 141.945028][ T5526] ? list_devices+0x820/0x820 [ 141.949736][ T5526] ? dm_poll+0x120/0x120 [ 141.954153][ T5526] ? bpf_lsm_file_ioctl+0x5/0x10 [ 141.959133][ T5526] ? security_file_ioctl+0x7c/0xa0 [ 141.964501][ T5526] ? dm_poll+0x120/0x120 [ 141.968975][ T5526] __se_sys_ioctl+0xfa/0x170 [ 141.973785][ T5526] do_syscall_64+0x4c/0xa0 [ 141.978357][ T5526] ? clear_bhb_loop+0x30/0x80 [ 141.983153][ T5526] ? clear_bhb_loop+0x30/0x80 [ 141.988047][ T5526] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.993963][ T5526] RIP: 0033:0x7fae4b667199 [ 141.998579][ T5526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.018991][ T5526] RSP: 002b:00007fae498bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.027525][ T5526] RAX: ffffffffffffffda RBX: 00007fae4b8eefa0 RCX: 00007fae4b667199 [ 142.035585][ T5526] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 142.043589][ T5526] RBP: 00007fae4b6fe8e0 R08: 0000000000000000 R09: 0000000000000000 [ 142.051586][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.059771][ T5526] R13: 00007fae4b8ef038 R14: 00007fae4b8eefa0 R15: 00007ffe92a9d068 [ 142.068561][ T5526] [ 142.909671][ T5551] loop4: detected capacity change from 0 to 8192 [ 143.005201][ T5561] loop4: p1 < > p2 < > [ 143.009620][ T5561] loop4: partition table partially beyond EOD, truncated [ 143.028533][ T5561] loop4: p1 start 83886080 is beyond EOD, truncated [ 143.057947][ T5551] loop4: p1 < > p2 < > [ 143.069282][ T5551] loop4: partition table partially beyond EOD, truncated [ 143.104257][ T5551] loop4: p1 start 83886080 is beyond EOD, truncated [ 143.491002][ T5561] udevd[5561]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 143.599277][ T5561] udevd[5561]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 144.011029][ T5575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 144.147364][ T5575] device hsr_slave_1 left promiscuous mode [ 144.366844][ T5580] net_ratelimit: 1 callbacks suppressed [ 144.366866][ T5580] ip_tables: iptables: counters copy to user failed while replacing table [ 145.310279][ T5636] loop4: detected capacity change from 0 to 1024 [ 146.752142][ T5671] netlink: 108 bytes leftover after parsing attributes in process `syz.3.386'. [ 146.786240][ T5671] netlink: 80 bytes leftover after parsing attributes in process `syz.3.386'. [ 147.263388][ T5690] device syzkaller0 entered promiscuous mode [ 147.622397][ T5700] process 'syz.4.395' launched '/dev/fd/3' with NULL argv: empty string added [ 148.077687][ T4189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.372174][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 148.531387][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.546940][ T4189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 148.577624][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 148.612035][ T4189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 148.812625][ T4189] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 148.832065][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.850765][ T4189] usb 3-1: Product: syz [ 148.860901][ T4189] usb 3-1: Manufacturer: syz [ 148.876426][ T4189] usb 3-1: SerialNumber: syz [ 148.894806][ T4189] usb 3-1: config 0 descriptor?? [ 148.968702][ T4189] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 148.998013][ T4189] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 149.190450][ T23] usb 3-1: USB disconnect, device number 7 [ 149.225375][ T23] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 149.262902][ T23] omninet 3-1:0.0: device disconnected [ 150.600803][ T5762] loop4: detected capacity change from 0 to 1024 [ 150.716396][ T5762] EXT4-fs (loop4): Ignoring removed nobh option [ 150.742393][ T5762] EXT4-fs (loop4): Ignoring removed bh option [ 150.789734][ T5762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 150.798388][ T5762] System zones: 0-1, 3-12 [ 150.821192][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 150.879223][ T5762] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.996473][ T1343] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.242160][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 151.365510][ T1343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.393157][ T1343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 151.426691][ T1343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.455587][ T1343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 151.647121][ T1343] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 151.666368][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.695646][ T1343] usb 3-1: Product: syz [ 151.711839][ T1343] usb 3-1: Manufacturer: syz [ 151.728774][ T1343] usb 3-1: SerialNumber: syz [ 151.749931][ T1343] usb 3-1: config 0 descriptor?? [ 151.808132][ T1343] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 151.837793][ T1343] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 152.012806][ T1343] usb 3-1: USB disconnect, device number 8 [ 152.032397][ T1343] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 152.053707][ T1343] omninet 3-1:0.0: device disconnected [ 152.562067][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.842198][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 152.992130][ T4189] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.000081][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.013023][ T4232] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.024798][ T4232] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.035844][ T4232] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.043659][ T4232] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 153.053422][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.072441][ T4232] usb 5-1: config 0 descriptor?? [ 153.356102][ T4189] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 153.537288][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.556344][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.569986][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x2 [ 153.578340][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.587190][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.596123][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.612328][ T4232] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 153.620701][ T4232] glorious 0003:258A:0033.0003: item fetching failed at offset 10/40 [ 153.630594][ T4232] glorious: probe of 0003:258A:0033.0003 failed with error -22 [ 153.717877][ T5828] tipc: Started in network mode [ 153.727012][ T5828] tipc: Node identity 969eff00e5f5, cluster identity 4711 [ 153.768867][ T5828] tipc: Enabled bearer , priority 0 [ 153.785889][ T5829] device syzkaller0 entered promiscuous mode [ 153.845278][ T5828] tipc: Resetting bearer [ 153.861495][ T7] usb 5-1: USB disconnect, device number 7 [ 153.903764][ T5827] tipc: Resetting bearer [ 153.934046][ T5827] tipc: Disabling bearer [ 154.292122][ T4189] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 154.301436][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 154.312928][ T4189] usb 4-1: Product: syz [ 154.317141][ T4189] usb 4-1: Manufacturer: syz [ 154.321918][ T4189] usb 4-1: SerialNumber: syz [ 154.328680][ T4189] usb 4-1: config 0 descriptor?? [ 154.342230][ T2286] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.592236][ T2286] usb 3-1: Using ep0 maxpacket: 16 [ 154.727537][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.737604][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 154.747856][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 154.764357][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 155.025282][ T2286] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 155.036006][ T2286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.044235][ T2286] usb 3-1: Product: syz [ 155.048940][ T2286] usb 3-1: Manufacturer: syz [ 155.053780][ T2286] usb 3-1: SerialNumber: syz [ 155.068469][ T2286] usb 3-1: config 0 descriptor?? [ 155.127222][ T2286] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 155.151339][ T2286] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 155.327304][ T2286] usb 3-1: USB disconnect, device number 9 [ 155.341211][ T2286] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 155.361148][ T2286] omninet 3-1:0.0: device disconnected [ 155.716171][ T2286] usb 4-1: USB disconnect, device number 10 [ 157.987453][ T1343] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.332487][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 158.452384][ T1343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.470624][ T1343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 158.498519][ T1343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 158.527741][ T1343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 158.723161][ T1343] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 158.754614][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.801613][ T1343] usb 3-1: Product: syz [ 158.822534][ T1343] usb 3-1: Manufacturer: syz [ 158.827726][ T1343] usb 3-1: SerialNumber: syz [ 158.876747][ T1343] usb 3-1: config 0 descriptor?? [ 158.948361][ T1343] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 158.968725][ T1343] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 159.151800][ T5607] usb 3-1: USB disconnect, device number 10 [ 159.173678][ T5607] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 159.200958][ T5607] omninet 3-1:0.0: device disconnected [ 163.615722][ T5974] netlink: 88 bytes leftover after parsing attributes in process `syz.2.496'. [ 169.065700][ T6049] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.093236][ T6049] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.706558][ T6072] loop1: detected capacity change from 0 to 1024 [ 170.425934][ T6061] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 172.660777][ T6126] FAULT_INJECTION: forcing a failure. [ 172.660777][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 172.702017][ T6126] CPU: 1 PID: 6126 Comm: syz.4.547 Not tainted syzkaller #0 [ 172.709443][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.719524][ T6126] Call Trace: [ 172.722825][ T6126] [ 172.725913][ T6126] dump_stack_lvl+0x188/0x250 [ 172.730635][ T6126] ? show_regs_print_info+0x20/0x20 [ 172.735860][ T6126] ? load_image+0x410/0x410 [ 172.740399][ T6126] ? __might_sleep+0xf0/0xf0 [ 172.745009][ T6126] ? __lock_acquire+0x7d40/0x7d40 [ 172.750055][ T6126] ? stack_depot_save+0x41b/0x460 [ 172.755109][ T6126] should_fail+0x383/0x4b0 [ 172.759560][ T6126] should_failslab+0x5/0x20 [ 172.764089][ T6126] slab_pre_alloc_hook+0x51/0xc0 [ 172.769149][ T6126] kmem_cache_alloc_trace+0x47/0x290 [ 172.774626][ T6126] ? mpi_alloc+0x4e/0x130 [ 172.778985][ T6126] mpi_alloc+0x4e/0x130 [ 172.783254][ T6126] mpi_read_raw_from_sgl+0x2c9/0x640 [ 172.788665][ T6126] ? mpi_write_to_sgl+0x790/0x790 [ 172.793944][ T6126] ? memset+0x1e/0x40 [ 172.798039][ T6126] rsa_enc+0x14d/0x3c0 [ 172.802348][ T6126] ? rsa_exit+0x20/0x20 [ 172.806708][ T6126] pkcs1pad_verify+0x465/0x670 [ 172.811502][ T6126] public_key_verify_signature+0x87f/0xd40 [ 172.817344][ T6126] ? public_key_free+0x80/0x80 [ 172.822361][ T6126] ? asymmetric_key_id_same+0x63/0xe0 [ 172.828383][ T6126] x509_check_for_self_signed+0x317/0x420 [ 172.834136][ T6126] x509_cert_parse+0x59c/0x7a0 [ 172.838980][ T6126] x509_key_preparse+0x60/0x5d0 [ 172.844133][ T6126] ? down_read+0x1aa/0x2e0 [ 172.848665][ T6126] asymmetric_key_preparse+0xa5/0x140 [ 172.854163][ T6126] key_create_or_update+0x432/0xa40 [ 172.859387][ T6126] ? security_key_permission+0x7c/0xa0 [ 172.865136][ T6126] ? key_type_put+0x20/0x20 [ 172.869922][ T6126] ? lookup_user_key_possessed+0x40/0x40 [ 172.875681][ T6126] ? __might_fault+0xb3/0x110 [ 172.880740][ T6126] __se_sys_add_key+0x34b/0x410 [ 172.885787][ T6126] ? __x64_sys_add_key+0xc0/0xc0 [ 172.890983][ T6126] ? lockdep_hardirqs_on+0x94/0x140 [ 172.896209][ T6126] ? __x64_sys_add_key+0x1c/0xc0 [ 172.901292][ T6126] do_syscall_64+0x4c/0xa0 [ 172.906627][ T6126] ? clear_bhb_loop+0x30/0x80 [ 172.911517][ T6126] ? clear_bhb_loop+0x30/0x80 [ 172.916228][ T6126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.922329][ T6126] RIP: 0033:0x7fae4b667199 [ 172.927407][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.948098][ T6126] RSP: 002b:00007fae498bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 172.956535][ T6126] RAX: ffffffffffffffda RBX: 00007fae4b8eefa0 RCX: 00007fae4b667199 [ 172.964537][ T6126] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 172.972651][ T6126] RBP: 00007fae4b6fe8e0 R08: 000000003fdda2f5 R09: 0000000000000000 [ 172.981193][ T6126] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 172.989268][ T6126] R13: 00007fae4b8ef038 R14: 00007fae4b8eefa0 R15: 00007ffe92a9d068 [ 172.997394][ T6126] [ 173.081359][ T6131] device syzkaller0 entered promiscuous mode [ 173.398122][ T6152] loop2: detected capacity change from 0 to 136 [ 174.345142][ T6164] loop2: detected capacity change from 0 to 764 [ 174.657820][ T6175] syz.2.563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.223575][ T6194] loop1: detected capacity change from 0 to 136 [ 176.178977][ T6208] FAULT_INJECTION: forcing a failure. [ 176.178977][ T6208] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 176.194037][ T6208] CPU: 0 PID: 6208 Comm: syz.4.575 Not tainted syzkaller #0 [ 176.201481][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.211580][ T6208] Call Trace: [ 176.214987][ T6208] [ 176.217941][ T6208] dump_stack_lvl+0x188/0x250 [ 176.222759][ T6208] ? show_regs_print_info+0x20/0x20 [ 176.227985][ T6208] ? load_image+0x410/0x410 [ 176.232519][ T6208] ? mark_lock+0x94/0x320 [ 176.236870][ T6208] should_fail+0x383/0x4b0 [ 176.241359][ T6208] prepare_alloc_pages+0x1e3/0x5b0 [ 176.246500][ T6208] __alloc_pages+0x11b/0x480 [ 176.251303][ T6208] ? zone_statistics+0x170/0x170 [ 176.256283][ T6208] ? rcu_lock_acquire+0x30/0x30 [ 176.261174][ T6208] ? alloc_pages+0x452/0x560 [ 176.265898][ T6208] __get_free_pages+0x8/0x30 [ 176.270530][ T6208] __tlb_remove_page_size+0x1f2/0x3f0 [ 176.276071][ T6208] unmap_page_range+0xfcf/0x2410 [ 176.281073][ T6208] unmap_vmas+0x131/0x250 [ 176.285616][ T6208] ? unmap_page_range+0x2410/0x2410 [ 176.290846][ T6208] ? __mutex_lock_common+0x435/0x2400 [ 176.296270][ T6208] ? exit_mm_release+0x16/0x30 [ 176.301074][ T6208] exit_mmap+0x3b9/0x640 [ 176.305352][ T6208] ? vm_brk+0x20/0x20 [ 176.309375][ T6208] ? uprobe_clear_state+0x2f6/0x460 [ 176.314610][ T6208] __mmput+0x115/0x390 [ 176.318713][ T6208] exit_mm+0x632/0x7b0 [ 176.323261][ T6208] ? perf_pmu_migrate_context+0xb70/0xb70 [ 176.329754][ T6208] ? do_exit+0x2110/0x2110 [ 176.334223][ T6208] ? __ia32_sys_timer_delete+0x40/0x40 [ 176.339984][ T6208] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 176.345503][ T6208] ? tty_audit_exit+0x149/0x1f0 [ 176.350573][ T6208] do_exit+0x5b8/0x2110 [ 176.354770][ T6208] ? put_task_struct+0x80/0x80 [ 176.359565][ T6208] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.365590][ T6208] ? _raw_spin_lock_irq+0xb7/0xf0 [ 176.370661][ T6208] do_group_exit+0x12c/0x2f0 [ 176.375498][ T6208] ? lockdep_hardirqs_on+0x94/0x140 [ 176.380734][ T6208] get_signal+0x7eb/0x12e0 [ 176.385207][ T6208] arch_do_signal_or_restart+0xe6/0x12a0 [ 176.390881][ T6208] ? futex_exit_release+0x1c0/0x1c0 [ 176.396110][ T6208] ? get_sigframe_size+0x10/0x10 [ 176.401134][ T6208] ? __context_tracking_exit+0x4c/0x80 [ 176.406835][ T6208] ? exit_to_user_mode_loop+0x3b/0x130 [ 176.412327][ T6208] exit_to_user_mode_loop+0x9e/0x130 [ 176.417635][ T6208] exit_to_user_mode_prepare+0xee/0x180 [ 176.423211][ T6208] syscall_exit_to_user_mode+0x16/0x40 [ 176.428701][ T6208] do_syscall_64+0x58/0xa0 [ 176.433216][ T6208] ? clear_bhb_loop+0x30/0x80 [ 176.437908][ T6208] ? clear_bhb_loop+0x30/0x80 [ 176.442627][ T6208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.448902][ T6208] RIP: 0033:0x7fae4b667199 [ 176.453335][ T6208] Code: Unable to access opcode bytes at RIP 0x7fae4b66716f. [ 176.460718][ T6208] RSP: 002b:00007fae498bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.469424][ T6208] RAX: 0000000000000001 RBX: 00007fae4b8eefa8 RCX: 00007fae4b667199 [ 176.477407][ T6208] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae4b8eefac [ 176.485486][ T6208] RBP: 00007fae4b8eefa0 R08: 0003b5fd072330ae R09: 0000000000000000 [ 176.493519][ T6208] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 176.501606][ T6208] R13: 00007fae4b8ef038 R14: 00007ffe92a9cf80 R15: 00007ffe92a9d068 [ 176.510037][ T6208] [ 176.663215][ T1343] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.904083][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 176.991183][ T6232] ip_tables: iptables: counters copy to user failed while replacing table [ 177.003299][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.026137][ T1343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.026890][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.038325][ T1343] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 177.069024][ T6238] loop1: detected capacity change from 0 to 136 [ 177.082267][ T1343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.103720][ T1343] usb 3-1: config 0 descriptor?? [ 177.265966][ T6234] netlink: 'syz.5.582': attribute type 16 has an invalid length. [ 177.820762][ T6234] netlink: 'syz.5.582': attribute type 17 has an invalid length. [ 178.081626][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.116074][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.163247][ T6234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.512226][ T1343] usbhid 3-1:0.0: can't add hid device: -71 [ 178.519550][ T1343] usbhid: probe of 3-1:0.0 failed with error -71 [ 178.607140][ T1343] usb 3-1: USB disconnect, device number 11 [ 179.386776][ T6273] loop1: detected capacity change from 0 to 128 [ 179.448610][ T6275] loop4: detected capacity change from 0 to 136 [ 180.864945][ T2286] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.142040][ T2286] usb 3-1: Using ep0 maxpacket: 16 [ 181.264162][ T2286] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.276263][ T2286] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 181.297609][ T2286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.328747][ T2286] usb 3-1: config 0 descriptor?? [ 181.440958][ T6318] loop1: detected capacity change from 0 to 136 [ 181.478003][ T6321] FAULT_INJECTION: forcing a failure. [ 181.478003][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 181.494059][ T6321] CPU: 0 PID: 6321 Comm: syz.5.613 Not tainted syzkaller #0 [ 181.501536][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.512787][ T6321] Call Trace: [ 181.516834][ T6321] [ 181.519920][ T6321] dump_stack_lvl+0x188/0x250 [ 181.525000][ T6321] ? show_regs_print_info+0x20/0x20 [ 181.531168][ T6321] ? load_image+0x410/0x410 [ 181.535719][ T6321] ? __might_sleep+0xf0/0xf0 [ 181.540829][ T6321] ? __lock_acquire+0x7d40/0x7d40 [ 181.546386][ T6321] should_fail+0x383/0x4b0 [ 181.550851][ T6321] should_failslab+0x5/0x20 [ 181.555608][ T6321] slab_pre_alloc_hook+0x51/0xc0 [ 181.560648][ T6321] __kmalloc+0x6b/0x340 [ 181.564848][ T6321] ? tomoyo_encode+0x28a/0x550 [ 181.569922][ T6321] tomoyo_encode+0x28a/0x550 [ 181.574744][ T6321] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 181.580433][ T6321] tomoyo_path_number_perm+0x251/0x6b0 [ 181.585936][ T6321] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 181.591414][ T6321] ? do_futex+0xd83/0x12b0 [ 181.595925][ T6321] security_file_ioctl+0x6c/0xa0 [ 181.600931][ T6321] __se_sys_ioctl+0x48/0x170 [ 181.605547][ T6321] do_syscall_64+0x4c/0xa0 [ 181.610057][ T6321] ? clear_bhb_loop+0x30/0x80 [ 181.614834][ T6321] ? clear_bhb_loop+0x30/0x80 [ 181.619768][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.626016][ T6321] RIP: 0033:0x7f8fdc5c7199 [ 181.630577][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.650864][ T6321] RSP: 002b:00007f8fda81f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.659730][ T6321] RAX: ffffffffffffffda RBX: 00007f8fdc84efa0 RCX: 00007f8fdc5c7199 [ 181.667713][ T6321] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 181.675949][ T6321] RBP: 00007f8fdc65e8e0 R08: 0000000000000000 R09: 0000000000000000 [ 181.684110][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.692191][ T6321] R13: 00007f8fdc84f038 R14: 00007f8fdc84efa0 R15: 00007ffde45a5908 [ 181.700272][ T6321] [ 181.733540][ T6321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.858405][ T2286] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:258A:6A88.0004/input/input9 [ 182.479706][ T2286] itetech 0003:258A:6A88.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 182.510939][ T6327] batman_adv: batadv0: Adding interface: syzkaller0 [ 182.535189][ T2286] usb 3-1: USB disconnect, device number 12 [ 182.551183][ T6327] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.589369][ T6327] batman_adv: batadv0: Interface activated: syzkaller0 [ 182.666017][ T6326] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 182.738188][ T6334] fido_id[6334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.774594][ T6326] batman_adv: batadv0: Removing interface: syzkaller0 [ 184.831530][ T6402] FAULT_INJECTION: forcing a failure. [ 184.831530][ T6402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.845414][ T6402] CPU: 1 PID: 6402 Comm: syz.1.643 Not tainted syzkaller #0 [ 184.852949][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.863490][ T6402] Call Trace: [ 184.866970][ T6402] [ 184.869917][ T6402] dump_stack_lvl+0x188/0x250 [ 184.874626][ T6402] ? show_regs_print_info+0x20/0x20 [ 184.879847][ T6402] ? load_image+0x410/0x410 [ 184.884379][ T6402] should_fail+0x383/0x4b0 [ 184.888911][ T6402] prepare_alloc_pages+0x1e3/0x5b0 [ 184.894044][ T6402] __alloc_pages+0x11b/0x480 [ 184.898768][ T6402] ? zone_statistics+0x170/0x170 [ 184.903737][ T6402] ? rcu_lock_acquire+0x30/0x30 [ 184.908619][ T6402] ? alloc_pages+0x452/0x560 [ 184.913238][ T6402] __get_free_pages+0x8/0x30 [ 184.917948][ T6402] __tlb_remove_page_size+0x1f2/0x3f0 [ 184.924434][ T6402] unmap_page_range+0xfcf/0x2410 [ 184.929869][ T6402] unmap_vmas+0x131/0x250 [ 184.934876][ T6402] ? unmap_page_range+0x2410/0x2410 [ 184.940522][ T6402] ? __mutex_lock_common+0x435/0x2400 [ 184.946287][ T6402] ? exit_mm_release+0x16/0x30 [ 184.951376][ T6402] exit_mmap+0x3b9/0x640 [ 184.956314][ T6402] ? vm_brk+0x20/0x20 [ 184.961931][ T6402] ? uprobe_clear_state+0x2f6/0x460 [ 184.967167][ T6402] __mmput+0x115/0x390 [ 184.971513][ T6402] exit_mm+0x632/0x7b0 [ 184.975722][ T6402] ? perf_pmu_migrate_context+0xb70/0xb70 [ 184.981465][ T6402] ? do_exit+0x2110/0x2110 [ 184.985896][ T6402] ? __ia32_sys_timer_delete+0x40/0x40 [ 184.991456][ T6402] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 184.997061][ T6402] ? tty_audit_exit+0x149/0x1f0 [ 185.002302][ T6402] do_exit+0x5b8/0x2110 [ 185.006922][ T6402] ? put_task_struct+0x80/0x80 [ 185.012874][ T6402] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 185.019678][ T6402] ? _raw_spin_lock_irq+0xb7/0xf0 [ 185.024824][ T6402] do_group_exit+0x12c/0x2f0 [ 185.030087][ T6402] ? lockdep_hardirqs_on+0x94/0x140 [ 185.035997][ T6402] get_signal+0x7eb/0x12e0 [ 185.040760][ T6402] arch_do_signal_or_restart+0xe6/0x12a0 [ 185.048429][ T6402] ? futex_exit_release+0x1c0/0x1c0 [ 185.054414][ T6402] ? get_sigframe_size+0x10/0x10 [ 185.062056][ T6402] ? __context_tracking_exit+0x4c/0x80 [ 185.069086][ T6402] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 185.075423][ T6402] ? exit_to_user_mode_loop+0x3b/0x130 [ 185.081892][ T6402] exit_to_user_mode_loop+0x9e/0x130 [ 185.087572][ T6402] exit_to_user_mode_prepare+0xee/0x180 [ 185.093226][ T6402] syscall_exit_to_user_mode+0x16/0x40 [ 185.098714][ T6402] do_syscall_64+0x58/0xa0 [ 185.103150][ T6402] ? clear_bhb_loop+0x30/0x80 [ 185.107931][ T6402] ? clear_bhb_loop+0x30/0x80 [ 185.112882][ T6402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.118791][ T6402] RIP: 0033:0x7f1f0ec60199 [ 185.123387][ T6402] Code: Unable to access opcode bytes at RIP 0x7f1f0ec6016f. [ 185.130748][ T6402] RSP: 002b:00007f1f0ceb80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.139420][ T6402] RAX: 0000000000000001 RBX: 00007f1f0eee7fa8 RCX: 00007f1f0ec60199 [ 185.147379][ T6402] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f0eee7fac [ 185.156479][ T6402] RBP: 00007f1f0eee7fa0 R08: 0029db9c4de7696e R09: 0000000000000000 [ 185.165215][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.173729][ T6402] R13: 00007f1f0eee8038 R14: 00007ffcbb045720 R15: 00007ffcbb045808 [ 185.181830][ T6402] [ 185.226833][ T6406] tipc: Started in network mode [ 185.234865][ T6406] tipc: Node identity 6e1abe7f982e, cluster identity 4711 [ 185.246747][ T6406] tipc: Enabled bearer , priority 0 [ 185.261727][ T6406] device syzkaller0 entered promiscuous mode [ 185.288984][ T6406] tipc: Resetting bearer [ 185.303915][ T6405] tipc: Resetting bearer [ 185.318388][ T6405] tipc: Disabling bearer [ 185.474599][ T6410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.530674][ T6410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.673586][ T6417] loop3: detected capacity change from 0 to 512 [ 185.705463][ T6417] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 186.490555][ T4384] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 186.686469][ T6431] tipc: Started in network mode [ 186.701819][ T6431] tipc: Node identity 83, cluster identity 4711 [ 186.712306][ T6431] tipc: Node number set to 131 [ 186.718261][ T6431] tipc: Cannot configure node identity twice [ 186.749771][ T6432] tipc: Enabled bearer , priority 0 [ 186.780414][ T6432] tipc: Resetting bearer [ 186.816033][ T6429] tipc: Disabling bearer [ 188.187059][ T6458] loop4: detected capacity change from 0 to 256 [ 189.169438][ T6477] tipc: Enabled bearer , priority 0 [ 189.209407][ T6477] tipc: Resetting bearer [ 189.247872][ T6476] tipc: Disabling bearer [ 189.864812][ T6495] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.678' resets device [ 190.548168][ T6507] loop1: detected capacity change from 0 to 256 [ 191.402177][ T4232] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.536314][ T6519] tipc: Started in network mode [ 191.542829][ T6519] tipc: Node identity a63a3b50f905, cluster identity 4711 [ 191.556298][ T6519] tipc: Enabled bearer , priority 0 [ 191.572314][ T6519] tipc: Resetting bearer [ 191.590261][ T6518] tipc: Disabling bearer [ 191.609184][ T6521] netlink: 27 bytes leftover after parsing attributes in process `syz.5.687'. [ 191.662105][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 191.672292][ T2286] Bluetooth: hci4: command 0x0406 tx timeout [ 191.681809][ T2286] Bluetooth: hci2: command 0x0406 tx timeout [ 191.682000][ T1343] Bluetooth: hci3: command 0x0406 tx timeout [ 191.711225][ T1343] Bluetooth: hci1: command 0x0406 tx timeout [ 191.782162][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 191.802974][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 191.829714][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.871160][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 192.052248][ T4232] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 192.071609][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.097794][ T4232] usb 3-1: Product: syz [ 192.108674][ T4232] usb 3-1: Manufacturer: syz [ 192.126252][ T4232] usb 3-1: SerialNumber: syz [ 192.146407][ T4232] usb 3-1: config 0 descriptor?? [ 192.203730][ T4232] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 192.225131][ T4232] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 192.405269][ T4189] usb 3-1: USB disconnect, device number 13 [ 192.429451][ T4189] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 192.492420][ T4189] omninet 3-1:0.0: device disconnected [ 192.507743][ T26] audit: type=1326 audit(1791404231.313:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.4.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae4b667199 code=0x0 [ 192.718487][ T6544] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.696' resets device [ 193.412441][ T6549] "syz.5.698" (6549) uses obsolete ecb(arc4) skcipher [ 194.725149][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.732772][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.829031][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 196.572870][ T6587] "syz.4.710" (6587) uses obsolete ecb(arc4) skcipher [ 197.192271][ T4189] Bluetooth: hci5: command 0x1003 tx timeout [ 197.208607][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 197.311054][ T6599] ======================================================= [ 197.311054][ T6599] WARNING: The mand mount option has been deprecated and [ 197.311054][ T6599] and is ignored by this kernel. Remove the mand [ 197.311054][ T6599] option from the mount to silence this warning. [ 197.311054][ T6599] ======================================================= [ 198.143984][ T1343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.502533][ T4270] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 198.542364][ T1343] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.552083][ T1343] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.552123][ T2286] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.562713][ T1343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.562773][ T1343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.591781][ T1343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.712188][ T4270] usb 4-1: device descriptor read/64, error -71 [ 198.732425][ T1343] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.741637][ T1343] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.754655][ T1343] usb 2-1: Product: syz [ 198.759357][ T1343] usb 2-1: Manufacturer: syz [ 198.803941][ T1343] cdc_wdm 2-1:1.0: skipping garbage [ 198.810377][ T1343] cdc_wdm 2-1:1.0: skipping garbage [ 198.812053][ T2286] usb 5-1: Using ep0 maxpacket: 16 [ 198.826299][ T1343] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 198.832586][ T1343] cdc_wdm 2-1:1.0: Unknown control protocol [ 198.942227][ T2286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 198.955992][ T2286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 198.966637][ T2286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 198.980204][ T2286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 199.012057][ T4270] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.103862][ T1343] usb 2-1: USB disconnect, device number 6 [ 199.142174][ T2286] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 199.155869][ T2286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.164446][ T2286] usb 5-1: Product: syz [ 199.168786][ T2286] usb 5-1: Manufacturer: syz [ 199.173954][ T2286] usb 5-1: SerialNumber: syz [ 199.189426][ T2286] usb 5-1: config 0 descriptor?? [ 199.222249][ T4270] usb 4-1: device descriptor read/64, error -71 [ 199.234173][ T2286] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 199.247360][ T2286] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 199.272497][ T2286] Bluetooth: hci5: command 0x1001 tx timeout [ 199.279563][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 199.342837][ T4270] usb usb4-port1: attempt power cycle [ 199.483034][ T1343] usb 5-1: USB disconnect, device number 8 [ 199.521799][ T1343] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 199.536353][ T1343] omninet 5-1:0.0: device disconnected [ 200.372019][ T4270] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 201.038729][ T6627] "syz.1.722" (6627) uses obsolete ecb(arc4) skcipher [ 201.352166][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 201.458873][ T4270] usb 4-1: device descriptor read/8, error -71 [ 202.581343][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.789521][ T6654] gadgetfs: bound to dummy_udc driver [ 204.247824][ T6671] misc userio: Begin command sent, but we're already running [ 205.406977][ T6672] "syz.4.735" (6672) uses obsolete ecb(arc4) skcipher [ 209.238516][ T6717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.722280][ T4232] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.972506][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 212.245328][ T4189] Bluetooth: hci0: command 0x0406 tx timeout [ 213.512168][ T4232] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 213.521303][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.576284][ T4232] usb 3-1: Product: syz [ 213.634633][ T4232] usb 3-1: can't set config #245, error -71 [ 213.650576][ T4232] usb 3-1: USB disconnect, device number 14 [ 213.736161][ T26] audit: type=1800 audit(1791404252.543:135): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.760" name="enable" dev="configfs" ino=47316 res=0 errno=0 [ 213.795657][ T6759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.475130][ T6779] 9pnet_virtio: no channels available for device ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.493852][ T6786] FAULT_INJECTION: forcing a failure. [ 215.493852][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 215.507443][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 215.641115][ T6786] CPU: 1 PID: 6786 Comm: syz.1.770 Not tainted syzkaller #0 [ 215.648550][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.658894][ T6786] Call Trace: [ 215.662180][ T6786] [ 215.665115][ T6786] dump_stack_lvl+0x188/0x250 [ 215.669805][ T6786] ? show_regs_print_info+0x20/0x20 [ 215.675114][ T6786] ? load_image+0x410/0x410 [ 215.679625][ T6786] ? __lock_acquire+0x7d40/0x7d40 [ 215.684661][ T6786] should_fail+0x383/0x4b0 [ 215.689200][ T6786] should_failslab+0x5/0x20 [ 215.693712][ T6786] slab_pre_alloc_hook+0x51/0xc0 [ 215.698653][ T6786] ? key_alloc+0x302/0x1030 [ 215.703156][ T6786] kmem_cache_alloc+0x3d/0x280 [ 215.707923][ T6786] key_alloc+0x302/0x1030 [ 215.712259][ T6786] keyring_alloc+0x41/0xa0 [ 215.716687][ T6786] join_session_keyring+0x139/0x440 [ 215.721894][ T6786] lookup_user_key+0x512/0x1160 [ 215.726760][ T6786] ? lookup_user_key_possessed+0x40/0x40 [ 215.732490][ T6786] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 215.738479][ T6786] ? __might_fault+0xb3/0x110 [ 215.743161][ T6786] ? _copy_from_user+0x111/0x170 [ 215.748107][ T6786] __se_sys_add_key+0x311/0x410 [ 215.753053][ T6786] ? __x64_sys_add_key+0xc0/0xc0 [ 215.758006][ T6786] ? lockdep_hardirqs_on+0x94/0x140 [ 215.763388][ T6786] ? __x64_sys_add_key+0x1c/0xc0 [ 215.768352][ T6786] do_syscall_64+0x4c/0xa0 [ 215.772857][ T6786] ? clear_bhb_loop+0x30/0x80 [ 215.777644][ T6786] ? clear_bhb_loop+0x30/0x80 [ 215.782329][ T6786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.788230][ T6786] RIP: 0033:0x7f1f0ec60199 [ 215.792644][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.812257][ T6786] RSP: 002b:00007f1f0ceb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 215.820681][ T6786] RAX: ffffffffffffffda RBX: 00007f1f0eee7fa0 RCX: 00007f1f0ec60199 [ 215.828668][ T6786] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 215.836641][ T6786] RBP: 00007f1f0ecf78e0 R08: fffffffffffffffd R09: 0000000000000000 [ 215.844827][ T6786] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 215.852987][ T6786] R13: 00007f1f0eee8038 R14: 00007f1f0eee7fa0 R15: 00007ffcbb045808 [ 215.861099][ T6786] [ 216.018702][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.031003][ T26] audit: type=1800 audit(1791404254.843:136): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.768" name="no_out_endpoint" dev="configfs" ino=46073 res=0 errno=0 [ 216.057013][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.091755][ T6787] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.116950][ T6787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 216.178681][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.219855][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.258679][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.886877][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 216.949102][ T6787] dummy0 speed is unknown, defaulting to 1000 [ 219.942246][ T4280] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 220.314675][ T4280] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.333465][ T4280] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.426694][ T4280] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.436154][ T4280] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.447393][ T4280] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.572419][ T4280] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.581544][ T4280] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.621418][ T4280] usb 6-1: Product: syz [ 220.631674][ T6832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 220.632080][ T4280] usb 6-1: Manufacturer: syz [ 220.639622][ T6832] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.675980][ T6836] netlink: 92 bytes leftover after parsing attributes in process `syz.3.783'. [ 220.697873][ T6833] vhci_hcd: xmit failed -107 [ 220.703851][ T4280] cdc_wdm 6-1:1.0: skipping garbage [ 220.709271][ T6832] vhci_hcd vhci_hcd.0: Device attached [ 220.725858][ T4280] cdc_wdm 6-1:1.0: skipping garbage [ 220.755611][ T4280] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 220.761589][ T4280] cdc_wdm 6-1:1.0: Unknown control protocol [ 220.784879][ T1312] vhci_hcd: stop threads [ 220.789255][ T1312] vhci_hcd: release socket [ 220.816974][ T1312] vhci_hcd: disconnect device [ 221.425231][ T5607] usb 6-1: USB disconnect, device number 5 [ 221.617572][ T6851] tipc: Enabled bearer , priority 0 [ 221.625149][ T6851] device syzkaller0 entered promiscuous mode [ 221.641148][ T6851] tipc: Resetting bearer [ 221.842054][ T6850] tipc: Resetting bearer [ 221.865777][ T6850] tipc: Disabling bearer [ 222.120874][ T26] audit: type=1800 audit(1791404260.923:137): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.797" name="enable" dev="configfs" ino=47741 res=0 errno=0 [ 222.357101][ T6871] netlink: 'syz.5.801': attribute type 8 has an invalid length. [ 222.371910][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.801'. [ 222.721554][ T4189] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.002294][ T4189] usb 4-1: Using ep0 maxpacket: 16 [ 223.132854][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.669788][ T4189] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.716790][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.767456][ T4189] usb 4-1: Product: syz [ 225.771676][ T4189] usb 4-1: Manufacturer: syz [ 225.812088][ T4189] usb 4-1: SerialNumber: syz [ 225.835611][ T4189] usb 4-1: config 0 descriptor?? [ 225.862083][ T4189] usb 4-1: can't set config #0, error -71 [ 225.971668][ T4189] usb 4-1: USB disconnect, device number 15 [ 226.004870][ T6902] dummy0 speed is unknown, defaulting to 1000 [ 229.023535][ T6932] tipc: Enabled bearer , priority 0 [ 229.083919][ T6929] tipc: Disabling bearer [ 229.802041][ T4270] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.190358][ T6951] sctp: failed to load transform for md5: -2 [ 230.728564][ T6969] netlink: 'syz.4.829': attribute type 13 has an invalid length. [ 230.772073][ T4270] usb 3-1: Using ep0 maxpacket: 16 [ 230.899211][ T6975] scsi_nl_rcv_msg: discarding partial skb [ 230.905329][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.079646][ T6982] tipc: Enabled bearer , priority 0 [ 231.087555][ T4270] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.131439][ T6984] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 231.158528][ T6984] CIFS: Attempting to mount \\127.0.0.1\share [ 231.165973][ T6984] CIFS: VFS: No username specified [ 231.195460][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.245312][ T6985] device syzkaller0 entered promiscuous mode [ 231.292356][ T4270] usb 3-1: Product: syz [ 231.348770][ T4270] usb 3-1: Manufacturer: syz [ 231.412382][ T4270] usb 3-1: SerialNumber: syz [ 231.467977][ T6982] tipc: Resetting bearer [ 231.511151][ T4270] usb 3-1: config 0 descriptor?? [ 231.646682][ T4270] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.718760][ T4270] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 231.776634][ T6979] tipc: Resetting bearer [ 231.871252][ T6979] tipc: Disabling bearer [ 232.242306][ T4270] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 234.076277][ T7011] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 234.090150][ T4270] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 234.112269][ T4270] em28xx 3-1:0.0: board has no eeprom [ 234.562185][ T4270] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 234.570326][ T4270] em28xx 3-1:0.0: dvb set to bulk mode. [ 234.892152][ T4270] usb 3-1: USB disconnect, device number 15 [ 234.898999][ T4270] em28xx 3-1:0.0: Disconnecting em28xx [ 234.905466][ T4280] em28xx 3-1:0.0: Binding DVB extension [ 235.563250][ T7029] tipc: Enabling of bearer rejected, failed to enable media [ 235.675953][ T4280] em28xx 3-1:0.0: Registering input extension [ 235.696075][ T4270] em28xx 3-1:0.0: Closing input extension [ 235.724572][ T4270] em28xx 3-1:0.0: Freeing device [ 238.359586][ T26] audit: type=1800 audit(1791404277.163:138): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.860" name="enable" dev="configfs" ino=49267 res=0 errno=0 [ 239.912186][ T4230] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.152464][ T4230] usb 6-1: Using ep0 maxpacket: 16 [ 240.292703][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.502875][ T4230] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.546840][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.628152][ T4230] usb 6-1: Product: syz [ 240.674350][ T4230] usb 6-1: Manufacturer: syz [ 240.871534][ T4230] usb 6-1: SerialNumber: syz [ 240.887685][ T4230] usb 6-1: config 0 descriptor?? [ 240.954199][ T4230] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.972030][ T4230] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 241.046626][ T7101] FAULT_INJECTION: forcing a failure. [ 241.046626][ T7101] name fail_futex, interval 1, probability 0, space 0, times 1 [ 241.081202][ T7101] CPU: 0 PID: 7101 Comm: syz.2.856 Not tainted syzkaller #0 [ 241.088670][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.098759][ T7101] Call Trace: [ 241.102053][ T7101] [ 241.104981][ T7101] dump_stack_lvl+0x188/0x250 [ 241.109663][ T7101] ? show_regs_print_info+0x20/0x20 [ 241.114868][ T7101] ? load_image+0x410/0x410 [ 241.119396][ T7101] should_fail+0x383/0x4b0 [ 241.123806][ T7101] get_futex_key+0x1a1/0x12d0 [ 241.128493][ T7101] ? __lock_acquire+0x13b3/0x7d40 [ 241.133504][ T7101] ? futex_wait_restart+0x250/0x250 [ 241.138710][ T7101] futex_wake+0x101/0x540 [ 241.143071][ T7101] ? futex_wait+0x680/0x680 [ 241.147566][ T7101] ? verify_lock_unused+0x140/0x140 [ 241.152928][ T7101] ? exc_page_fault+0x88/0x100 [ 241.157703][ T7101] ? verify_lock_unused+0x140/0x140 [ 241.162901][ T7101] do_futex+0xd83/0x12b0 [ 241.167140][ T7101] ? asm_exc_page_fault+0x22/0x30 [ 241.172213][ T7101] ? futex_exit_release+0x1c0/0x1c0 [ 241.177629][ T7101] ? __context_tracking_exit+0x4c/0x80 [ 241.183119][ T7101] __se_sys_futex+0x389/0x420 [ 241.187797][ T7101] ? __x64_sys_futex+0xf0/0xf0 [ 241.192556][ T7101] ? __x64_sys_futex+0x1d/0xf0 [ 241.197312][ T7101] do_syscall_64+0x4c/0xa0 [ 241.201901][ T7101] ? clear_bhb_loop+0x30/0x80 [ 241.206576][ T7101] ? clear_bhb_loop+0x30/0x80 [ 241.211242][ T7101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.217125][ T7101] RIP: 0033:0x7f77844bb199 [ 241.221531][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.241133][ T7101] RSP: 002b:00007f77827130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.249546][ T7101] RAX: ffffffffffffffda RBX: 00007f7784742fa8 RCX: 00007f77844bb199 [ 241.257506][ T7101] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7784742fac [ 241.265467][ T7101] RBP: 00007f7784742fa0 R08: 0037911d1862aa2c R09: 0000000000000000 [ 241.273441][ T7101] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 241.281400][ T7101] R13: 00007f7784743038 R14: 00007fff53eb7dc0 R15: 00007fff53eb7ea8 [ 241.289403][ T7101] [ 241.742453][ T4230] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 242.272175][ T4230] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 242.280307][ T4230] em28xx 6-1:0.0: board has no eeprom [ 242.402865][ T26] audit: type=1800 audit(1791404281.213:139): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.872" name="enable" dev="configfs" ino=49051 res=0 errno=0 [ 242.742055][ T4230] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 242.760343][ T4230] em28xx 6-1:0.0: dvb set to bulk mode. [ 242.801021][ T4230] em28xx 6-1:0.0: Binding DVB extension [ 243.788990][ T7139] ip_tables: iptables: counters copy to user failed while replacing table [ 244.312339][ T7080] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 244.371497][ T4280] usb 6-1: USB disconnect, device number 6 [ 244.432127][ T4280] em28xx 6-1:0.0: Disconnecting em28xx [ 245.294360][ T4270] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.417754][ T4230] em28xx 6-1:0.0: Registering input extension [ 246.431578][ T4280] em28xx 6-1:0.0: Closing input extension [ 246.456988][ T4280] em28xx 6-1:0.0: Freeing device [ 246.592061][ T4270] usb 5-1: Using ep0 maxpacket: 8 [ 246.694036][ T7166] tmpfs: Bad value for 'mpol' [ 246.775496][ T4270] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 247.011683][ T4270] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 247.080305][ T4270] usb 5-1: config 6 has no interface number 0 [ 247.106740][ T26] audit: type=1800 audit(1791404285.913:140): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.887" name="enable" dev="configfs" ino=49117 res=0 errno=0 [ 247.111160][ T4270] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.212087][ T4270] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.287636][ T4270] usb 5-1: string descriptor 0 read error: -71 [ 247.299938][ T4270] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 248.473029][ T4270] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 248.502221][ T4270] usb 5-1: can't set config #6, error -71 [ 248.521605][ T4270] usb 5-1: USB disconnect, device number 9 [ 249.519582][ T7192] sctp: failed to load transform for md5: -2 [ 249.936075][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.622715][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.732414][ T23] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 250.748474][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=34 [ 250.809871][ T23] usb 5-1: SerialNumber: syz [ 250.917272][ T23] usb 5-1: config 0 descriptor?? [ 251.254339][ T23] smsusb:smsusb_probe: board id=8, interface number 0 [ 251.291697][ T23] smsusb:smsusb_probe: Device initialized with return code -19 [ 252.512510][ T23] usb 5-1: USB disconnect, device number 10 [ 252.602346][ T4280] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 252.814059][ T7232] program syz.2.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.629720][ T26] audit: type=1800 audit(1791404292.433:141): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.902" name="enable" dev="configfs" ino=49466 res=0 errno=0 [ 253.652384][ T4280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.742707][ T4280] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 253.876124][ T4230] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 253.922417][ T4280] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice= 0.40 [ 253.934994][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.956798][ T4280] usb 4-1: Product: syz [ 253.963777][ T4280] usb 4-1: Manufacturer: syz [ 253.970956][ T4280] usb 4-1: SerialNumber: syz [ 254.088457][ T7235] syz.2.906 (7235): drop_caches: 2 [ 254.287251][ T4280] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 254.296489][ T4280] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 254.317036][ T4280] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 254.326342][ T4280] usb 4-1: USB disconnect, device number 16 [ 254.412155][ T4230] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 254.421388][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.429756][ T4230] usb 5-1: Product: syz [ 254.434155][ T4230] usb 5-1: Manufacturer: syz [ 254.438765][ T4230] usb 5-1: SerialNumber: syz [ 254.445826][ T4230] usb 5-1: config 0 descriptor?? [ 254.483938][ T4230] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 254.533289][ T7081] udevd[7081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.969035][ T7266] device syzkaller0 entered promiscuous mode [ 255.062137][ T4230] gspca_m5602: Failed to find a sensor [ 255.068444][ T4230] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 255.103033][ T4230] usb 5-1: USB disconnect, device number 11 [ 256.023792][ T7274] vivid-001: kernel_thread() failed [ 256.092214][ T26] audit: type=1800 audit(1791404294.893:142): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.921" name="enable" dev="configfs" ino=50319 res=0 errno=0 [ 256.182439][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.182572][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.027128][ T7291] 9pnet_virtio: no channels available for device ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 257.113168][ T7298] binder: 7292:7298 ioctl c0306201 0 returned -14 [ 257.238813][ T26] audit: type=1800 audit(1791404296.043:143): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.924" name="no_out_endpoint" dev="configfs" ino=50343 res=0 errno=0 [ 257.552206][ T4230] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 257.812447][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 257.910337][ T7310] device syzkaller0 entered promiscuous mode [ 257.934318][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 257.947679][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 257.960908][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.977253][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 258.142336][ T4230] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 258.152909][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.161095][ T4230] usb 3-1: Product: syz [ 258.166129][ T4230] usb 3-1: Manufacturer: syz [ 258.170922][ T4230] usb 3-1: SerialNumber: syz [ 258.186177][ T4230] usb 3-1: config 0 descriptor?? [ 258.248996][ T4230] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 258.272480][ T4230] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 259.219244][ T4189] usb 3-1: USB disconnect, device number 16 [ 259.332912][ T4189] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 259.347596][ T4189] omninet 3-1:0.0: device disconnected [ 259.427854][ T26] audit: type=1800 audit(1791404298.233:144): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.937" name="enable" dev="configfs" ino=49583 res=0 errno=0 [ 260.449680][ T7345] device syzkaller0 entered promiscuous mode [ 260.833711][ T7357] sctp: failed to load transform for md5: -2 [ 262.944842][ T7377] "syz.5.951" (7377) uses obsolete ecb(arc4) skcipher [ 263.065039][ T26] audit: type=1800 audit(1791404301.833:145): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.950" name="enable" dev="configfs" ino=49651 res=0 errno=0 [ 263.633372][ T26] audit: type=1800 audit(1791404302.403:146): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.955" name="enable" dev="configfs" ino=50462 res=0 errno=0 [ 263.762117][ T4230] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.066623][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 265.192777][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.658692][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 265.695182][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 265.739044][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 266.592353][ T7422] "syz.4.963" (7422) uses obsolete ecb(arc4) skcipher [ 266.838755][ T4230] usb 3-1: string descriptor 0 read error: -71 [ 266.848278][ T4230] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 266.872522][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.942942][ T4230] usb 3-1: config 0 descriptor?? [ 266.962187][ T4230] usb 3-1: can't set config #0, error -71 [ 267.013658][ T4230] usb 3-1: USB disconnect, device number 17 [ 270.042113][ T26] audit: type=1800 audit(1791404308.853:147): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.971" name="enable" dev="configfs" ino=50522 res=0 errno=0 [ 271.556915][ T26] audit: type=1800 audit(1791404310.363:148): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.964" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 273.412296][ T7470] "syz.5.976" (7470) uses obsolete ecb(arc4) skcipher [ 273.687133][ T4280] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 273.972027][ T4280] usb 3-1: Using ep0 maxpacket: 16 [ 274.114104][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.132464][ T4280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 274.171326][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 274.191687][ T4280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 274.402298][ T4280] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 274.411483][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.442277][ T4230] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 274.469590][ T4280] usb 3-1: Product: syz [ 274.550175][ T4280] usb 3-1: Manufacturer: syz [ 274.576136][ T4280] usb 3-1: SerialNumber: syz [ 274.648778][ T4280] usb 3-1: config 0 descriptor?? [ 274.693526][ T4280] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 274.706113][ T4280] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 274.748304][ T7493] Bluetooth: hci5: Frame reassembly failed (-84) [ 274.772321][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 274.895632][ T4280] usb 3-1: USB disconnect, device number 18 [ 274.905605][ T4280] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 274.915138][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.925673][ T4280] omninet 3-1:0.0: device disconnected [ 277.477844][ T4230] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.487599][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.496287][ T4230] usb 5-1: Product: syz [ 277.500623][ T4230] usb 5-1: Manufacturer: syz [ 277.505817][ T4230] usb 5-1: SerialNumber: syz [ 277.521845][ T4230] usb 5-1: config 0 descriptor?? [ 277.686710][ T4230] usb 5-1: can't set config #0, error -71 [ 277.734339][ T4230] usb 5-1: USB disconnect, device number 12 [ 278.469597][ T26] audit: type=1800 audit(1791404317.273:149): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.985" name="enable" dev="configfs" ino=50618 res=0 errno=0 [ 278.672206][ T4280] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 278.684755][ T7547] ksmbd: Unknown IPC event: 6, ignore. [ 278.998567][ T7561] netlink: 36 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.042255][ T4280] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 281.051575][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.060544][ T4280] usb 2-1: Product: syz [ 281.065125][ T4280] usb 2-1: Manufacturer: syz [ 281.069747][ T4280] usb 2-1: SerialNumber: syz [ 281.074241][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 281.085128][ T4280] usb 2-1: config 0 descriptor?? [ 281.143816][ T4280] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 281.242168][ T4230] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 281.332220][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 281.342299][ T4280] (null): failure setting delay to 10us [ 281.348015][ T4280] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5 [ 281.365205][ T4280] usb 2-1: USB disconnect, device number 7 [ 281.452877][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.463123][ T4189] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 281.512135][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 281.822676][ T4230] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 281.840546][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.873061][ T4230] usb 4-1: Product: syz [ 281.877456][ T4230] usb 4-1: Manufacturer: syz [ 281.897696][ T4230] usb 4-1: SerialNumber: syz [ 281.956083][ T4230] usb 4-1: config 0 descriptor?? [ 282.036755][ T4230] gspca_main: sq930x-2.14.0 probing 2770:930c [ 282.348082][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 282.358462][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 282.369188][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 282.532554][ T23] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 282.547761][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.556256][ T23] usb 5-1: Product: syz [ 282.560726][ T23] usb 5-1: Manufacturer: syz [ 282.572233][ T23] usb 5-1: SerialNumber: syz [ 282.586510][ T23] usb 5-1: config 0 descriptor?? [ 282.634334][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 282.648323][ T23] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 282.684705][ T23] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 282.752314][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.769495][ T23] usb 5-1: USB disconnect, device number 13 [ 282.795176][ T26] audit: type=1800 audit(1791404321.593:150): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1004" name="enable" dev="configfs" ino=50703 res=0 errno=0 [ 282.798701][ T23] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 282.831773][ T23] omninet 5-1:0.0: device disconnected [ 282.895887][ T7596] ------------[ cut here ]------------ [ 282.906643][ T7596] fmt: 'level=%s [ 282.906643][ T7596] ' current_buffer: ' <...>-5351 [001] ..... 134.151201: dwc3_ctrl_req: Get Device Status(Length = 0) [ 282.906643][ T7596] <...>-1970561396 [001] .p.35 134.206493: Unknown type 25955 [ 282.906643][ T7596] -0 [001] ..... 134.231725: initcall_level: level=' [ 282.906729][ T7596] WARNING: CPU: 1 PID: 7596 at kernel/trace/trace.c:3867 trace_check_vprintf+0xd4a/0x1080 [ 282.942126][ T4230] gspca_sq930x: ucbus_write failed -71 [ 282.955572][ T7596] Modules linked in: [ 282.959618][ T7596] CPU: 1 PID: 7596 Comm: syz.4.1005 Not tainted syzkaller #0 [ 282.967531][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.978223][ T7596] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 282.984831][ T4189] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.994178][ T7596] Code: e8 3b 41 fc ff c6 05 f7 8e fa 0b 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 283.014822][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.023191][ T4189] usb 3-1: Product: syz [ 283.027646][ T4189] usb 3-1: Manufacturer: syz [ 283.032214][ T7596] RSP: 0018:ffffc900036afa20 EFLAGS: 00010246 [ 283.033048][ T4189] usb 3-1: SerialNumber: syz [ 283.039371][ T7596] RAX: 73ac8babdae1bd00 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.053065][ T4189] usb 3-1: config 0 descriptor?? [ 283.068081][ T7596] RDX: ffffc9000de39000 RSI: 0000000000008e37 RDI: 0000000000008e38 [ 283.077720][ T7596] RBP: ffff88804b7640d8 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 283.086997][ T7596] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffffff8a200540 [ 283.098105][ T4189] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.108446][ T7596] R13: ffffc900036afb60 R14: dffffc0000000000 R15: 0000000000000002 [ 283.116702][ T4189] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 283.123335][ T7596] FS: 00007fae498bf6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 283.133257][ T7596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.140186][ T7596] CR2: 00007f7784508880 CR3: 000000005ee10000 CR4: 00000000003506e0 [ 283.148884][ T7596] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.157383][ T7596] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.165973][ T7596] Call Trace: [ 283.169399][ T7596] [ 283.174794][ T7596] trace_event_printf+0xea/0x140 [ 283.180121][ T7596] ? trace_print_seq+0x160/0x160 [ 283.185184][ T7596] ? trace_raw_output_prep+0x200/0x200 [ 283.190760][ T7596] trace_raw_output_initcall_level+0x93/0xd0 [ 283.196897][ T7596] tracing_read_pipe+0x52f/0xae0 [ 283.202030][ T7596] ? s_show+0x300/0x300 [ 283.202120][ T4230] gspca_sq930x: Sensor ov9630 not yet treated [ 283.206313][ T7596] vfs_read+0x2ff/0xd50 [ 283.206359][ T7596] ? __lock_acquire+0x7d40/0x7d40 [ 283.206388][ T7596] ? kernel_read+0x1e0/0x1e0 [ 283.206420][ T7596] ? mutex_lock_nested+0x17/0x20 [ 283.218435][ T4230] sq930x: probe of 4-1:0.0 failed with error -22 [ 283.221904][ T7596] ? __fdget_pos+0x2bf/0x370 [ 283.243271][ T7596] ? ksys_read+0x70/0x260 [ 283.247468][ T4230] usb 4-1: USB disconnect, device number 17 [ 283.247751][ T7596] ksys_read+0x153/0x260 [ 283.258757][ T7596] ? vfs_write+0xd70/0xd70 [ 283.263793][ T7596] ? lockdep_hardirqs_on+0x94/0x140 [ 283.269372][ T7596] do_syscall_64+0x4c/0xa0 [ 283.274482][ T7596] ? clear_bhb_loop+0x30/0x80 [ 283.279844][ T7596] ? clear_bhb_loop+0x30/0x80 [ 283.298071][ T7596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.312076][ T7596] RIP: 0033:0x7fae4b667199 [ 283.316726][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.336981][ T7596] RSP: 002b:00007fae498bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.345664][ T7596] RAX: ffffffffffffffda RBX: 00007fae4b8eefa0 RCX: 00007fae4b667199 [ 283.353927][ T7596] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 283.362195][ T7596] RBP: 00007fae4b6fe8e0 R08: 0000000000000000 R09: 0000000000000000 [ 283.370589][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.378904][ T7596] R13: 00007fae4b8ef038 R14: 00007fae4b8eefa0 R15: 00007ffe92a9d068 [ 283.387327][ T7596] [ 283.390476][ T7596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 283.397855][ T7596] CPU: 1 PID: 7596 Comm: syz.4.1005 Not tainted syzkaller #0 [ 283.405348][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 283.415551][ T7596] Call Trace: [ 283.418838][ T7596] [ 283.421794][ T7596] dump_stack_lvl+0x188/0x250 [ 283.426508][ T7596] ? show_regs_print_info+0x20/0x20 [ 283.431718][ T7596] ? load_image+0x410/0x410 [ 283.436335][ T7596] panic+0x2f8/0x850 [ 283.440247][ T7596] ? bpf_jit_dump+0xd0/0xd0 [ 283.444942][ T7596] ? trace_check_vprintf+0xd4a/0x1080 [ 283.450408][ T7596] __warn+0x248/0x2b0 [ 283.454430][ T7596] ? trace_check_vprintf+0xd4a/0x1080 [ 283.459983][ T7596] report_bug+0x1b9/0x2e0 [ 283.464332][ T7596] handle_bug+0x3a/0x70 [ 283.468635][ T7596] exc_invalid_op+0x16/0x40 [ 283.473155][ T7596] asm_exc_invalid_op+0x16/0x20 [ 283.478037][ T7596] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 283.484022][ T7596] Code: e8 3b 41 fc ff c6 05 f7 8e fa 0b 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 283.503809][ T7596] RSP: 0018:ffffc900036afa20 EFLAGS: 00010246 [ 283.509978][ T7596] RAX: 73ac8babdae1bd00 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.518247][ T7596] RDX: ffffc9000de39000 RSI: 0000000000008e37 RDI: 0000000000008e38 [ 283.526966][ T7596] RBP: ffff88804b7640d8 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 283.535149][ T7596] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffffff8a200540 [ 283.543247][ T7596] R13: ffffc900036afb60 R14: dffffc0000000000 R15: 0000000000000002 [ 283.551355][ T7596] trace_event_printf+0xea/0x140 [ 283.556311][ T7596] ? trace_print_seq+0x160/0x160 [ 283.561296][ T7596] ? trace_raw_output_prep+0x200/0x200 [ 283.566813][ T7596] trace_raw_output_initcall_level+0x93/0xd0 [ 283.572922][ T7596] tracing_read_pipe+0x52f/0xae0 [ 283.577894][ T7596] ? s_show+0x300/0x300 [ 283.582097][ T7596] vfs_read+0x2ff/0xd50 [ 283.586255][ T7596] ? __lock_acquire+0x7d40/0x7d40 [ 283.591288][ T7596] ? kernel_read+0x1e0/0x1e0 [ 283.595915][ T7596] ? mutex_lock_nested+0x17/0x20 [ 283.601050][ T7596] ? __fdget_pos+0x2bf/0x370 [ 283.605641][ T7596] ? ksys_read+0x70/0x260 [ 283.610070][ T7596] ksys_read+0x153/0x260 [ 283.614349][ T7596] ? vfs_write+0xd70/0xd70 [ 283.618813][ T7596] ? lockdep_hardirqs_on+0x94/0x140 [ 283.624228][ T7596] do_syscall_64+0x4c/0xa0 [ 283.628948][ T7596] ? clear_bhb_loop+0x30/0x80 [ 283.633888][ T7596] ? clear_bhb_loop+0x30/0x80 [ 283.638694][ T7596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.644698][ T7596] RIP: 0033:0x7fae4b667199 [ 283.649260][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.669095][ T7596] RSP: 002b:00007fae498bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.677847][ T7596] RAX: ffffffffffffffda RBX: 00007fae4b8eefa0 RCX: 00007fae4b667199 [ 283.685893][ T7596] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 283.693967][ T7596] RBP: 00007fae4b6fe8e0 R08: 0000000000000000 R09: 0000000000000000 [ 283.702238][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.710397][ T7596] R13: 00007fae4b8ef038 R14: 00007fae4b8eefa0 R15: 00007ffe92a9d068 [ 283.718379][ T7596] [ 283.721677][ T7596] Kernel Offset: disabled [ 283.726658][ T7596] Rebooting in 86400 seconds..