last executing test programs: 24.826605107s ago: executing program 3 (id=2476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x2e, 0x4, 0x0, {0x5, 0x9, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) 24.562299396s ago: executing program 3 (id=2477): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203fe031000000033bd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000007000000000000000000000000000102000000000000000200010000000002000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) (async) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4001) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) pselect6(0x40, &(0x7f0000000300)={0x0, 0x2, 0x8f43, 0x4, 0x0, 0x8000000000000001, 0x0, 0xfffffffffffffff0}, &(0x7f0000000600)={0x100000000, 0x7ff, 0xe, 0x0, 0x401, 0x2, 0x6, 0x3}, &(0x7f0000000680)={0x9, 0xfffffffffffffffc, 0x40, 0xa41, 0xfd1, 0x9, 0xec00000000000000, 0xfc9a}, &(0x7f00000006c0), &(0x7f0000000840)={&(0x7f0000000780)={[0x7ff]}, 0x8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) (async) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xc0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b"}, {0x2, 0x0, 0x1ff, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x10001545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={0x194, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb18"}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "a0ecd06dd0b6f2aa4cc96cd7055256"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 24.324676351s ago: executing program 3 (id=2479): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)={0x40, r0, 0x70b, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (fail_nth: 9) 24.146436221s ago: executing program 3 (id=2480): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c48b1f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.503613777s ago: executing program 3 (id=2482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x6) 23.242619401s ago: executing program 3 (id=2484): landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 4.196198513s ago: executing program 1 (id=2558): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0x2e) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xe, 0xd34, 0x200, 0x401, 0x1ff, 0xe8d1, 0x2, 0x400, r2}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x200}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xffff, 0x2, [0x7b, 0x1]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0x9fc2}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) setsockopt(r0, 0x100, 0x3, &(0x7f0000000000)="06a0864cccd96034298c6aee8cbe0dba05de1e9d08ef4b3726bfce56", 0x1c) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000180)=0x23f7) 4.106984566s ago: executing program 1 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d0020"], 0xa3) 3.23838947s ago: executing program 0 (id=2563): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 3.080847171s ago: executing program 0 (id=2565): unshare(0x24020400) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) (async) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x118, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa2}}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.955370324s ago: executing program 1 (id=2567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff2001"], 0xa3) 2.874446968s ago: executing program 0 (id=2568): r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) syz_clone3(&(0x7f0000003c40)={0x82020000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000003c00)=[r0, 0x0, 0x0], 0x3}, 0x58) 2.602057007s ago: executing program 0 (id=2569): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.433143402s ago: executing program 1 (id=2570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x6) 2.371841711s ago: executing program 2 (id=2571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8c, 0x0, 0xfff}]}) (fail_nth: 2) 2.202512447s ago: executing program 1 (id=2572): syz_usb_connect$uac1(0x3, 0x79, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x2305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x5, 0xf0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x4, {0x7, 0x25, 0x1, 0xc, 0xa, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0xc0, 0x2, {0x7, 0x25, 0x1, 0x4, 0x2}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x111, 0x5, 0xfc, 0x8, 0x8, 0x6}, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="050f30000314100a62e20000000f00ff00003f00003f00000003100b14100400635f8c47947a9defc50dea3e7d81f0e4"], 0x1, [{0xa7, &(0x7f0000000700)=@string={0xa7, 0x3, "b3fdfd92efb2ea2e418496ecf629d12e8bfe6f7fb84dcbef558386e4937cc018d24371ce38df864b979a2f5fa9a25eef46db855d1d151bd895d9334490724b635de16bafd28db2743cf838ecc7ab2d5f805bf4f7ec30aae4511f04d1c21e70e02ea7c3cfa2541eec5c627a5996bd8ed8b3c8263bcf4ff2f89ba477e34f8f5d34480b5a5d36ac9efb79e3711b7324a66d62eda23dbc3e4a0572ee7d6de56f177fd20904f8e6"}}]}) 1.849363965s ago: executing program 0 (id=2573): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b30, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000003e40)={0x0, 0x400, 0x2, @thr={0x0, &(0x7f00000001c0)="ccd68d3f1d899fd8b0891263f86707a1c30e628233aba2c3841b30bd4358e5e30afdd16f06b226087f263f431ccb7f97514442556744eca2b371c92e2e320be8a5d920cf01048109ab2878ea23b28fb348"}}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$inet(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000680)="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", 0xffffff52}, {0x0}], 0x2}, 0x404c0c4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}], 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000001cb, 0x12) 1.762692201s ago: executing program 2 (id=2574): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x13f, 0x6}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r4, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.28712179s ago: executing program 2 (id=2575): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x85, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) 1.123292329s ago: executing program 2 (id=2576): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x1e, 0x9, 0x8}}) (fail_nth: 2) 647.720246ms ago: executing program 1 (id=2577): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f00000001c0)={0x40, 0x13, 0x65, "6200f955b78627e4eaabfaffffffffffffffd3e2b37878c0157858cd197e202013d5c56af965da21b611042de9b2c6d0dda9cd02bc54318686c13ee4efb29a3bd0a147561a11bef0d2f9eb46226932b4f91bc99d12699b266eedf4e1043d133880fd2599ff"}, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff2001"], 0xa3) 386.511367ms ago: executing program 2 (id=2578): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x85, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (fail_nth: 3) 125.180732ms ago: executing program 2 (id=2579): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f00000029c0)) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000500)=0x5bbe, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x30, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd0f8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0x8, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x3, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x155555555555569f}) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$getregs(0xc, r3, 0x8, &(0x7f0000000c00)=""/4096) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f00000029c0)) (async) socket(0x11, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000500)=0x5bbe, 0x4) (async) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x30, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd0f8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0x8, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x3, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x155555555555569f}) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) ptrace$getregs(0xc, r3, 0x8, &(0x7f0000000c00)=""/4096) (async) 0s ago: executing program 0 (id=2580): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 520.380635][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 520.380647][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.385246][ T32] usb 4-1: config 0 descriptor?? [ 520.411692][ T821] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 520.634142][ T5629] usb 4-1: USB disconnect, device number 18 [ 520.637937][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 520.663184][ T821] usb 2-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 520.663211][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.663228][ T821] usb 2-1: Product: syz [ 520.663241][ T821] usb 2-1: Manufacturer: syz [ 520.663253][ T821] usb 2-1: SerialNumber: syz [ 520.898768][ T821] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 520.899142][ T821] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 520.899156][ T821] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 520.899595][ T821] usb 2-1: unit 6 not found! [ 520.971473][ T821] usb 2-1: USB disconnect, device number 122 [ 521.034744][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.291140][T22235] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 521.291159][T22235] overlayfs: failed to set xattr on upper [ 521.291164][T22235] overlayfs: ...falling back to redirect_dir=nofollow. [ 521.291169][T22235] overlayfs: ...falling back to index=off. [ 521.291173][T22235] overlayfs: ...falling back to uuid=null. [ 521.332542][T22235] overlayfs: failed to resolve './file1/file0': -2 [ 521.723357][ T821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 521.929228][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 521.932070][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.987554][ T821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 521.987583][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.987602][ T821] usb 4-1: Product: syz [ 521.987617][ T821] usb 4-1: Manufacturer: syz [ 521.987631][ T821] usb 4-1: SerialNumber: syz [ 521.993071][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.003643][ T821] usb 4-1: config 0 descriptor?? [ 522.026337][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.027637][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.028890][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.164360][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.181961][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.186908][ T5629] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 522.268506][ T821] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.278503][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.312227][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.315961][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.385934][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 522.386048][ T5629] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 522.386073][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.499076][ T5629] usb 3-1: config 0 descriptor?? [ 522.500515][T22253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 523.021042][T22285] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 523.021071][T22285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 523.144081][T22285] vhci_hcd vhci_hcd.0: Device attached [ 523.350675][ T32] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 523.400433][ T5633] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 523.436975][ T821] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 523.443382][ T32] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 523.469676][ T821] usb 4-1: USB disconnect, device number 19 [ 523.605608][ T5633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.605644][ T5633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.606460][ T5633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.606507][ T5633] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 523.606528][ T5633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.677145][ T5629] usbhid 3-1:0.0: can't add hid device: -71 [ 523.677254][ T5629] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.753142][ T5633] usb 1-1: config 0 descriptor?? [ 523.756287][ T5629] usb 3-1: USB disconnect, device number 31 [ 524.109871][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 524.392578][ T5633] hid-multitouch 0003:0457:07DA.0019: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 524.509226][T22292] vhci_hcd: connection reset by peer [ 524.530121][ T5633] usb 1-1: USB disconnect, device number 17 [ 524.637584][ T3321] vhci_hcd vhci_hcd.0: stop threads [ 524.641160][ T3321] vhci_hcd vhci_hcd.0: release socket [ 524.675354][T13225] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 524.696973][ T3321] vhci_hcd vhci_hcd.0: disconnect device [ 524.823082][ T5642] Bluetooth: hci4: command tx timeout [ 524.894021][T13225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.894046][T13225] usb 4-1: config 0 has no interfaces? [ 524.894086][T13225] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 524.894098][T13225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.901079][T13225] usb 4-1: config 0 descriptor?? [ 525.205014][ T5723] usb 4-1: USB disconnect, device number 20 [ 525.308800][T22394] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 525.308818][T22394] overlayfs: failed to set xattr on upper [ 525.308822][T22394] overlayfs: ...falling back to redirect_dir=nofollow. [ 525.308827][T22394] overlayfs: ...falling back to index=off. [ 525.308831][T22394] overlayfs: ...falling back to uuid=null. [ 525.353551][T22394] overlayfs: failed to resolve './file1/file0': -2 [ 526.270216][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2328'. [ 526.663246][ T5629] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 526.696486][T22246] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.696767][T22246] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.696997][T22246] bridge_slave_0: entered allmulticast mode [ 526.699651][T22246] bridge_slave_0: entered promiscuous mode [ 526.705433][T22246] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.705795][T22246] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.706091][T22246] bridge_slave_1: entered allmulticast mode [ 526.709214][T22246] bridge_slave_1: entered promiscuous mode [ 526.812167][T13225] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 526.839345][T22246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.856591][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 526.856641][ T5629] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 526.856663][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.871730][T22246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.933273][ T5629] usb 4-1: config 0 descriptor?? [ 526.934421][T22466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.978918][T22525] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 526.978943][T22525] overlayfs: failed to set xattr on upper [ 526.978951][T22525] overlayfs: ...falling back to redirect_dir=nofollow. [ 526.978966][T22525] overlayfs: ...falling back to index=off. [ 526.978972][T22525] overlayfs: ...falling back to uuid=null. [ 526.979005][T22525] overlayfs: conflicting lowerdir path [ 527.010562][T13225] usb 3-1: Using ep0 maxpacket: 16 [ 527.078395][ T5642] Bluetooth: hci4: command tx timeout [ 527.079389][T13225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.079438][T13225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.079464][T13225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.079485][T13225] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.079509][T13225] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.105509][T13225] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.105539][T13225] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.105556][T13225] usb 3-1: Manufacturer: syz [ 527.182817][T13225] usb 3-1: config 0 descriptor?? [ 527.527033][T13225] rc_core: IR keymap rc-hauppauge not found [ 527.527055][T13225] Registered IR keymap rc-empty [ 527.564246][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.585340][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.638606][T13225] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 527.667006][T13225] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 527.689893][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.711577][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.740658][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.755022][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.769976][T22246] team0: Port device team_slave_0 added [ 527.782429][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.794232][T22246] team0: Port device team_slave_1 added [ 527.802445][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.822197][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.841229][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.866071][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.884703][T13225] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.897653][ T5633] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 527.916998][T13225] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 527.917022][T13225] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.968552][T13225] usb 3-1: USB disconnect, device number 32 [ 528.071483][ T5633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.071511][ T5633] usb 1-1: config 0 has no interfaces? [ 528.071606][ T5633] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 528.071629][ T5633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.143167][ T5629] usbhid 4-1:0.0: can't add hid device: -71 [ 528.143263][ T5629] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 528.178742][ T5629] usb 4-1: USB disconnect, device number 21 [ 528.195412][ T5633] usb 1-1: config 0 descriptor?? [ 528.416569][ T37] usb 1-1: USB disconnect, device number 18 [ 528.534489][T22246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.534502][T22246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.534517][T22246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.608041][T22246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.608053][T22246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.608068][T22246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.033174][ T1170] bridge_slave_1: left allmulticast mode [ 529.033421][ T1170] bridge_slave_1: left promiscuous mode [ 529.054518][ T32] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 529.077694][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.250650][ T1170] bridge_slave_0: left allmulticast mode [ 529.250674][ T1170] bridge_slave_0: left promiscuous mode [ 529.250863][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.273767][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'. [ 529.330410][ T5642] Bluetooth: hci4: command tx timeout [ 530.148416][ T5723] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 530.192325][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.278943][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.301339][ T1170] bond0 (unregistering): Released all slaves [ 530.314267][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 530.314315][ T5723] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 530.314337][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.322329][ T5723] usb 1-1: config 0 descriptor?? [ 530.324888][T22662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 530.415070][T22246] hsr_slave_0: entered promiscuous mode [ 530.500812][T22246] hsr_slave_1: entered promiscuous mode [ 530.502247][T22246] debugfs: 'hsr0' already exists in 'hsr' [ 530.502264][T22246] Cannot create hsr debugfs directory [ 531.561951][T22692] FAULT_INJECTION: forcing a failure. [ 531.561951][T22692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.561986][T22692] CPU: 1 UID: 0 PID: 22692 Comm: syz.2.2341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.562010][T22692] Tainted: [L]=SOFTLOCKUP [ 531.562021][T22692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.562031][T22692] Call Trace: [ 531.562039][T22692] [ 531.562048][T22692] dump_stack_lvl+0xe8/0x150 [ 531.562071][T22692] should_fail_ex+0x46b/0x600 [ 531.562097][T22692] _copy_to_user+0x31/0xb0 [ 531.562114][T22692] simple_read_from_buffer+0xe1/0x170 [ 531.562142][T22692] proc_fail_nth_read+0x1be/0x230 [ 531.562163][T22692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.562183][T22692] ? rw_verify_area+0x2ac/0x4e0 [ 531.562201][T22692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.562221][T22692] vfs_read+0x212/0xa80 [ 531.562247][T22692] ? __pfx_vfs_read+0x10/0x10 [ 531.562268][T22692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.562290][T22692] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.562308][T22692] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 531.562325][T22692] ? mutex_lock_nested+0x152/0x1d0 [ 531.562339][T22692] ? fdget_pos+0x252/0x320 [ 531.562359][T22692] ksys_read+0x156/0x270 [ 531.562378][T22692] ? __pfx_ksys_read+0x10/0x10 [ 531.562402][T22692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.562420][T22692] do_syscall_64+0x15f/0x560 [ 531.562443][T22692] ? clear_bhb_loop+0x40/0x90 [ 531.562463][T22692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.562477][T22692] RIP: 0033:0x7fda6fb7d68e [ 531.562491][T22692] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.562505][T22692] RSP: 002b:00007fda6de15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.562522][T22692] RAX: ffffffffffffffda RBX: 00007fda6de166c0 RCX: 00007fda6fb7d68e [ 531.562534][T22692] RDX: 000000000000000f RSI: 00007fda6de160a0 RDI: 000000000000000b [ 531.562544][T22692] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 531.562555][T22692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.562566][T22692] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 531.562591][T22692] [ 531.578778][ T5642] Bluetooth: hci4: command tx timeout [ 531.773176][ T5633] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 531.827402][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 531.827518][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 531.842901][ T5723] usb 1-1: USB disconnect, device number 19 [ 531.959296][ T5633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.959324][ T5633] usb 4-1: config 0 has no interfaces? [ 531.959353][ T5633] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 531.959374][ T5633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.007105][ T5633] usb 4-1: config 0 descriptor?? [ 532.255091][ T5723] usb 4-1: USB disconnect, device number 22 [ 532.697257][T22754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 532.697283][T22754] overlayfs: failed to set xattr on upper [ 532.697291][T22754] overlayfs: ...falling back to redirect_dir=nofollow. [ 532.697300][T22754] overlayfs: ...falling back to index=off. [ 532.697308][T22754] overlayfs: ...falling back to uuid=null. [ 532.697344][T22754] overlayfs: conflicting lowerdir path [ 533.061633][T22772] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2350'. [ 533.075583][T22772] netlink: 'syz.0.2350': attribute type 21 has an invalid length. [ 533.100825][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.162527][T22772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2350'. [ 533.162594][T22765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 533.636508][ T5633] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 533.814225][ T5633] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 533.814255][ T5633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.814273][ T5633] usb 1-1: Product: syz [ 533.814286][ T5633] usb 1-1: Manufacturer: syz [ 533.814300][ T5633] usb 1-1: SerialNumber: syz [ 533.878563][ T5633] usb 1-1: config 0 descriptor?? [ 533.890629][ T5633] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 533.890747][ T5633] dvb-usb: bulk message failed: -22 (4/0) [ 533.890762][ T5633] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 533.890880][ T5633] dvb-usb: bulk message failed: -22 (5/0) [ 533.890893][ T5633] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 533.972288][ T5633] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 533.980978][ T5633] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 534.005886][ T5629] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 534.105503][ T5638] usb 1-1: USB disconnect, device number 20 [ 534.186915][ T5629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.186940][ T5629] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 534.186987][ T5629] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 534.187008][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.234719][ T5629] usb 4-1: config 0 descriptor?? [ 534.260995][ T5629] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 534.261024][ T5629] dvb-usb: bulk message failed: -22 (3/0) [ 534.315936][ T5629] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 534.316884][ T5629] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 534.316938][ T5629] usb 4-1: media controller created [ 534.333648][ T5629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.439441][ T5633] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 534.446413][ T5629] dvb-usb: bulk message failed: -22 (6/0) [ 534.446491][ T5629] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 534.477878][ T5629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 534.482702][T22811] netlink: 'syz.3.2353': attribute type 21 has an invalid length. [ 534.484833][ T5629] dvb-usb: schedule remote query interval to 150 msecs. [ 534.484855][ T5629] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 534.570300][T22877] dvb-usb: bulk message failed: -22 (2/0) [ 534.570364][T22877] dvb-usb: bulk message failed: -22 (4/0) [ 534.629249][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 534.629298][ T5633] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 534.629320][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.650672][ T5633] usb 3-1: config 0 descriptor?? [ 534.651695][T22845] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.662845][ T5638] dvb-usb: bulk message failed: -22 (1/0) [ 534.662874][ T5638] dvb-usb: error while querying for an remote control event. [ 534.833577][ T5629] dvb-usb: bulk message failed: -22 (1/0) [ 534.906339][ T5629] dvb-usb: error while querying for an remote control event. [ 535.097510][ T5629] dvb-usb: bulk message failed: -22 (1/0) [ 535.097544][ T5629] dvb-usb: error while querying for an remote control event. [ 535.146328][T22811] netlink: 'syz.3.2353': attribute type 6 has an invalid length. [ 535.146351][T22811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2353'. [ 535.262004][ T5638] dvb-usb: bulk message failed: -22 (1/0) [ 535.262038][ T5638] dvb-usb: error while querying for an remote control event. [ 535.365580][ T5638] usb 4-1: USB disconnect, device number 23 [ 535.393538][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 535.515291][ T5629] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 535.517315][T22910] overlayfs: failed to resolve './bus': -2 [ 535.520862][ T5633] usbhid 3-1:0.0: can't add hid device: -71 [ 535.520963][ T5633] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.562694][ T5633] usb 3-1: USB disconnect, device number 33 [ 535.667038][ T5638] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 535.683487][ T5629] usb 1-1: Using ep0 maxpacket: 16 [ 535.689281][ T5629] usb 1-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 535.689309][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.689327][ T5629] usb 1-1: Product: syz [ 535.689338][ T5629] usb 1-1: Manufacturer: syz [ 535.689348][ T5629] usb 1-1: SerialNumber: syz [ 536.021453][ T5629] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 536.039341][ T5629] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 536.039367][ T5629] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 536.039873][ T5629] usb 1-1: unit 6 not found! [ 536.198889][ T5638] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 536.254553][ T5629] usb 1-1: USB disconnect, device number 21 [ 536.363568][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.420016][ T1170] hsr_slave_0: left promiscuous mode [ 536.433982][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.434008][ T5638] usb 4-1: config 0 has no interfaces? [ 536.434036][ T5638] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 536.434058][ T5638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.439047][ T5638] usb 4-1: config 0 descriptor?? [ 536.463361][ T1170] hsr_slave_1: left promiscuous mode [ 536.478922][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.508754][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.665711][ T5629] usb 4-1: USB disconnect, device number 24 [ 537.046790][T22993] overlayfs: failed to resolve './bus': -2 [ 537.331793][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 537.403442][T23001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'. [ 537.417245][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 537.427834][ T5723] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 537.591921][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 537.591968][ T5723] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 537.591989][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.595242][T23004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 537.597140][ T5723] usb 1-1: config 0 descriptor?? [ 537.598918][T22995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 538.129851][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 538.129971][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 538.149728][ T5723] usb 1-1: USB disconnect, device number 22 [ 538.756717][ T37] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 538.996832][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 539.071156][ T37] usb 3-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 539.071183][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.071202][ T37] usb 3-1: Product: syz [ 539.071215][ T37] usb 3-1: Manufacturer: syz [ 539.071227][ T37] usb 3-1: SerialNumber: syz [ 539.125441][T23055] overlayfs: failed to resolve './bus': -2 [ 539.390805][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 539.409977][ T37] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 539.410486][ T37] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 539.410509][ T37] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 539.412193][ T37] usb 3-1: unit 6 not found! [ 539.593010][ T37] usb 3-1: USB disconnect, device number 34 [ 539.692078][ T5638] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 539.824394][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.870504][ T5638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.870529][ T5638] usb 1-1: config 0 has no interfaces? [ 539.870558][ T5638] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 539.870579][ T5638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.878877][ T5638] usb 1-1: config 0 descriptor?? [ 540.145103][ T5638] usb 1-1: USB disconnect, device number 23 [ 541.198679][ T5638] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 541.250014][T23153] overlayfs: failed to resolve './file1': -2 [ 541.344693][T23153] overlayfs: failed to resolve './file1/file0': -2 [ 541.361350][ T5638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 541.361398][ T5638] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 541.361418][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.369904][ T5638] usb 3-1: config 0 descriptor?? [ 541.372887][T23138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 541.843674][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 541.933396][T23180] fuse: Bad value for 'rootmode' [ 542.176876][ T37] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 542.210768][ T5638] usbhid 3-1:0.0: can't add hid device: -71 [ 542.210877][ T5638] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 542.281454][ T5638] usb 3-1: USB disconnect, device number 35 [ 542.325458][ T1170] IPVS: stop unused estimator thread 0... [ 542.358571][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 542.359697][ T37] usb 1-1: config 5 has an invalid interface number: 215 but max is 1 [ 542.359722][ T37] usb 1-1: config 5 has an invalid interface number: 19 but max is 1 [ 542.359740][ T37] usb 1-1: config 5 has no interface number 0 [ 542.359805][ T37] usb 1-1: config 5 has no interface number 1 [ 542.359871][ T37] usb 1-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 542.359890][ T37] usb 1-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 542.359914][ T37] usb 1-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 542.359937][ T37] usb 1-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 542.359959][ T37] usb 1-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 542.359978][ T37] usb 1-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 542.359998][ T37] usb 1-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 542.360017][ T37] usb 1-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 542.360048][ T37] usb 1-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 542.360068][ T37] usb 1-1: config 5 interface 215 has no altsetting 0 [ 542.360083][ T37] usb 1-1: config 5 interface 19 has no altsetting 0 [ 542.362710][ T37] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 542.362735][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.362763][ T37] usb 1-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 542.362785][ T37] usb 1-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 542.362810][ T37] usb 1-1: SerialNumber: ы [ 542.603729][T23182] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 542.836422][ T5633] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 542.998670][ T5633] usb 4-1: Using ep0 maxpacket: 32 [ 543.000979][ T5633] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 543.001027][ T5633] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 543.001051][ T5633] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.001076][ T5633] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 543.019371][ T5633] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 543.019400][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.019418][ T5633] usb 4-1: Product: syz [ 543.019431][ T5633] usb 4-1: Manufacturer: syz [ 543.019444][ T5633] usb 4-1: SerialNumber: syz [ 543.198950][ T37] usb 1-1: USB disconnect, device number 24 [ 543.212559][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 543.232414][T13225] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 543.287548][ T5633] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input48 [ 543.403793][T13225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.403820][T13225] usb 3-1: config 0 has no interfaces? [ 543.403848][T13225] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 543.403870][T13225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.420356][ T5633] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 543.420376][ T5633] (id 0x00) [ 543.463717][T13225] usb 3-1: config 0 descriptor?? [ 543.571784][ T5633] rc_core: IR keymap rc-imon-pad not found [ 543.571804][ T5633] Registered IR keymap rc-empty [ 543.571878][ T5633] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 543.571895][ T5633] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 543.636375][ T5633] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 543.664541][ T5633] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input49 [ 543.707654][ T37] usb 3-1: USB disconnect, device number 36 [ 543.713729][ T5633] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:25> initialized [ 543.845105][T23203] imon:vfd_write: invalid payload size [ 543.846135][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 544.490327][T23275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 544.565264][T22246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 544.606348][T22246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.607440][T22246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 544.659369][T22246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.660785][T22246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 544.688918][T22246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.689987][T22246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 544.741303][T22246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.957854][T23291] overlayfs: failed to resolve './file1': -2 [ 544.980143][T22246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.994417][T23291] overlayfs: failed to resolve './file1/file0': -2 [ 545.008192][T22246] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.081685][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.081816][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.164788][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.164952][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.683937][ T5638] usb 4-1: USB disconnect, device number 25 [ 545.747850][ T37] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 545.911040][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 545.911090][ T37] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 545.911113][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.972872][ T37] usb 1-1: config 0 descriptor?? [ 545.979793][T23299] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 546.040681][ T5723] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 546.235652][ T5723] usb 3-1: not running at top speed; connect to a high speed hub [ 546.255141][ T5723] usb 3-1: config 5 has an invalid interface number: 215 but max is 1 [ 546.255166][ T5723] usb 3-1: config 5 has an invalid interface number: 19 but max is 1 [ 546.255336][ T5723] usb 3-1: config 5 has no interface number 0 [ 546.255352][ T5723] usb 3-1: config 5 has no interface number 1 [ 546.255401][ T5723] usb 3-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 546.255424][ T5723] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 546.255510][ T5723] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 546.255534][ T5723] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 546.255558][ T5723] usb 3-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 546.255577][ T5723] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 546.255598][ T5723] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 546.255675][ T5723] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 546.255709][ T5723] usb 3-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 546.255731][ T5723] usb 3-1: config 5 interface 215 has no altsetting 0 [ 546.255747][ T5723] usb 3-1: config 5 interface 19 has no altsetting 0 [ 546.281298][ T5723] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 546.281328][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.281406][ T5723] usb 3-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 546.281429][ T5723] usb 3-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 546.281453][ T5723] usb 3-1: SerialNumber: ы [ 546.309756][T23314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.349132][T22246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.482827][ T5638] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 546.679077][ T5723] usb 3-1: USB disconnect, device number 37 [ 546.683154][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.683181][ T5638] usb 4-1: config 0 has no interfaces? [ 546.683209][ T5638] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 546.683231][ T5638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.771484][ T5638] usb 4-1: config 0 descriptor?? [ 546.898380][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 546.898459][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 546.915470][ T37] usb 1-1: USB disconnect, device number 25 [ 546.999504][ T5614] usb 4-1: USB disconnect, device number 26 [ 547.059330][T22246] veth0_vlan: entered promiscuous mode [ 547.086221][T22246] veth1_vlan: entered promiscuous mode [ 547.163033][T22246] veth0_macvtap: entered promiscuous mode [ 547.227699][T22246] veth1_macvtap: entered promiscuous mode [ 547.298663][T22246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.337605][T22246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.356997][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.359879][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.359939][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.359971][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.578809][ T5638] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 547.827762][ T5638] usb 3-1: Using ep0 maxpacket: 32 [ 547.875713][ T5638] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 547.875740][ T5638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.875758][ T5638] usb 3-1: Product: syz [ 547.875771][ T5638] usb 3-1: Manufacturer: syz [ 547.875783][ T5638] usb 3-1: SerialNumber: syz [ 547.888221][ T5638] usb 3-1: config 0 descriptor?? [ 548.137295][T23375] program syz.2.2398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.138137][T23375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 548.157121][ T5638] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 548.157148][ T5638] airspy 3-1:0.0: Could not detect board [ 548.157260][ T5638] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 548.285522][ T5638] usb 3-1: USB disconnect, device number 38 [ 548.708069][T23400] vlan0: entered promiscuous mode [ 548.708239][T23400] vlan0: entered allmulticast mode [ 548.708247][T23400] veth0_vlan: entered allmulticast mode [ 548.975233][ T3338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.975254][ T3338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.143861][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.143880][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.613272][ T5614] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 549.624227][ T5629] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 549.711274][ T5638] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 549.754253][ T5614] usb 3-1: device descriptor read/64, error -71 [ 549.778099][ T5629] usb 4-1: device descriptor read/64, error -71 [ 549.786834][ T5723] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 549.883995][ T5638] usb 1-1: Using ep0 maxpacket: 16 [ 549.889160][ T5638] usb 1-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 549.889186][ T5638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.889196][ T5638] usb 1-1: Product: syz [ 549.889203][ T5638] usb 1-1: Manufacturer: syz [ 549.889210][ T5638] usb 1-1: SerialNumber: syz [ 549.962536][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 549.962584][ T5723] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 549.962615][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.968731][ T5723] usb 2-1: config 0 descriptor?? [ 549.969854][T23446] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 550.014081][ T5614] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 550.071054][ T5629] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 550.142436][ T5638] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 550.142922][ T5638] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 550.142945][ T5638] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 550.143448][ T5638] usb 1-1: unit 6 not found! [ 550.180092][ T5614] usb 3-1: device descriptor read/64, error -71 [ 550.223913][ T5629] usb 4-1: device descriptor read/64, error -71 [ 550.290611][ T5638] usb 1-1: USB disconnect, device number 26 [ 550.296163][ T5614] usb usb3-port1: attempt power cycle [ 550.354656][ T5629] usb usb4-port1: attempt power cycle [ 550.357571][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.675000][ T5614] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 550.698396][ T5614] usb 3-1: device descriptor read/8, error -71 [ 550.728899][ T5629] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 550.754370][ T5629] usb 4-1: device descriptor read/8, error -71 [ 550.956926][ T5723] usbhid 2-1:0.0: can't add hid device: -71 [ 550.957045][ T5723] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.958812][ T5614] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 550.994995][ T5723] usb 2-1: USB disconnect, device number 123 [ 551.014043][ T5614] usb 3-1: device descriptor read/8, error -71 [ 551.023052][ T5629] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 551.060878][ T5629] usb 4-1: device descriptor read/8, error -71 [ 551.130213][ T5614] usb usb3-port1: unable to enumerate USB device [ 551.174519][ T5629] usb usb4-port1: unable to enumerate USB device [ 551.328364][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.451798][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.453632][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.463322][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.521956][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.751272][T23506] FAULT_INJECTION: forcing a failure. [ 551.751272][T23506] name failslab, interval 1, probability 0, space 0, times 0 [ 551.751295][T23506] CPU: 0 UID: 0 PID: 23506 Comm: syz.1.2408 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.751310][T23506] Tainted: [L]=SOFTLOCKUP [ 551.751313][T23506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.751319][T23506] Call Trace: [ 551.751324][T23506] [ 551.751330][T23506] dump_stack_lvl+0xe8/0x150 [ 551.751348][T23506] should_fail_ex+0x46b/0x600 [ 551.751366][T23506] should_failslab+0xa8/0x100 [ 551.751379][T23506] kmem_cache_alloc_noprof+0x87/0x680 [ 551.751391][T23506] ? dst_alloc+0x105/0x170 [ 551.751400][T23506] ? fib_lookup+0x76/0x440 [ 551.751413][T23506] dst_alloc+0x105/0x170 [ 551.751444][T23506] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 551.751461][T23506] ? ip_route_output_key_hash+0xd8/0x2a0 [ 551.751474][T23506] ip_route_output_key_hash+0x18d/0x2a0 [ 551.751487][T23506] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 551.751507][T23506] tcp_v4_connect+0x74e/0x19b0 [ 551.751532][T23506] ? __pfx_tcp_v4_connect+0x10/0x10 [ 551.751550][T23506] __inet_stream_connect+0x25a/0xdd0 [ 551.751569][T23506] ? __pfx___inet_stream_connect+0x10/0x10 [ 551.751580][T23506] ? __local_bh_enable+0x1e1/0x2f0 [ 551.751599][T23506] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 551.751613][T23506] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.751630][T23506] inet_stream_connect+0x66/0xa0 [ 551.751643][T23506] __sys_connect+0x315/0x450 [ 551.751692][T23506] ? __pfx___sys_connect+0x10/0x10 [ 551.751711][T23506] ? __pfx_ksys_write+0x10/0x10 [ 551.751726][T23506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.751737][T23506] __x64_sys_connect+0x7a/0x90 [ 551.751750][T23506] do_syscall_64+0x15f/0x560 [ 551.751763][T23506] ? trace_irq_disable+0x3b/0x140 [ 551.751775][T23506] ? clear_bhb_loop+0x40/0x90 [ 551.751787][T23506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.751797][T23506] RIP: 0033:0x7fd91140ce59 [ 551.751808][T23506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.751816][T23506] RSP: 002b:00007fd90f65e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 551.751828][T23506] RAX: ffffffffffffffda RBX: 00007fd911685fa0 RCX: 00007fd91140ce59 [ 551.751835][T23506] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 551.751842][T23506] RBP: 00007fd90f65e090 R08: 0000000000000000 R09: 0000000000000000 [ 551.751848][T23506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.751854][T23506] R13: 00007fd911686038 R14: 00007fd911685fa0 R15: 00007ffed723f858 [ 551.751870][T23506] [ 552.641886][T23591] FAULT_INJECTION: forcing a failure. [ 552.641886][T23591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.641909][T23591] CPU: 0 UID: 0 PID: 23591 Comm: syz.3.2414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.641924][T23591] Tainted: [L]=SOFTLOCKUP [ 552.641928][T23591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.641934][T23591] Call Trace: [ 552.641939][T23591] [ 552.641943][T23591] dump_stack_lvl+0xe8/0x150 [ 552.641961][T23591] should_fail_ex+0x46b/0x600 [ 552.641978][T23591] _copy_to_user+0x31/0xb0 [ 552.641991][T23591] simple_read_from_buffer+0xe1/0x170 [ 552.642011][T23591] proc_fail_nth_read+0x1be/0x230 [ 552.642025][T23591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.642037][T23591] ? rw_verify_area+0x2ac/0x4e0 [ 552.642049][T23591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.642061][T23591] vfs_read+0x212/0xa80 [ 552.642076][T23591] ? __pfx_vfs_read+0x10/0x10 [ 552.642089][T23591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.642103][T23591] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.642117][T23591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 552.642130][T23591] ? mutex_lock_nested+0x152/0x1d0 [ 552.642140][T23591] ? fdget_pos+0x252/0x320 [ 552.642154][T23591] ksys_read+0x156/0x270 [ 552.642167][T23591] ? __pfx_ksys_read+0x10/0x10 [ 552.642182][T23591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.642193][T23591] do_syscall_64+0x15f/0x560 [ 552.642206][T23591] ? trace_irq_disable+0x3b/0x140 [ 552.642218][T23591] ? clear_bhb_loop+0x40/0x90 [ 552.642230][T23591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.642240][T23591] RIP: 0033:0x7f5c00a2d68e [ 552.642250][T23591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.642259][T23591] RSP: 002b:00007f5bfecbdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.642272][T23591] RAX: ffffffffffffffda RBX: 00007f5bfecbe6c0 RCX: 00007f5c00a2d68e [ 552.642279][T23591] RDX: 000000000000000f RSI: 00007f5bfecbe0a0 RDI: 0000000000000003 [ 552.642285][T23591] RBP: 00007f5bfecbe090 R08: 0000000000000000 R09: 0000000000000000 [ 552.642292][T23591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.642298][T23591] R13: 00007f5c00ce6038 R14: 00007f5c00ce5fa0 R15: 00007ffe15bf8258 [ 552.642313][T23591] [ 552.886397][ T5614] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 553.072900][ T5614] usb 3-1: unable to get BOS descriptor or descriptor too short [ 553.076121][ T5614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.076145][ T5614] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.076191][ T5614] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 553.076229][ T5614] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 553.076267][ T5614] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 553.076290][ T5614] usb 3-1: config 1 interface 1 has no altsetting 0 [ 553.080187][ T5614] usb 3-1: string descriptor 0 read error: -22 [ 553.080302][ T5614] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 553.080315][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.120855][T23623] fuse: Bad value for 'fd' [ 553.203397][T23630] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 553.757963][T23492] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.758558][T23492] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.758965][T23492] bridge_slave_0: entered allmulticast mode [ 553.772820][ T5630] Bluetooth: hci1: command tx timeout [ 553.804746][T23492] bridge_slave_0: entered promiscuous mode [ 553.861757][T23492] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.862148][T23492] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.862646][T23492] bridge_slave_1: entered allmulticast mode [ 553.889057][T23492] bridge_slave_1: entered promiscuous mode [ 554.006691][T23577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.010248][T23577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.149656][ T5614] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 554.199726][T23492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.202095][ T5629] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 554.229391][T23492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.354160][ T5629] usb 2-1: device descriptor read/64, error -71 [ 554.617758][ T5614] usb 3-1: USB disconnect, device number 43 [ 554.619025][ T5629] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 554.735349][T23691] FAULT_INJECTION: forcing a failure. [ 554.735349][T23691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.735384][T23691] CPU: 0 UID: 0 PID: 23691 Comm: syz.3.2420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.735409][T23691] Tainted: [L]=SOFTLOCKUP [ 554.735416][T23691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.735427][T23691] Call Trace: [ 554.735435][T23691] [ 554.735443][T23691] dump_stack_lvl+0xe8/0x150 [ 554.735470][T23691] should_fail_ex+0x46b/0x600 [ 554.735499][T23691] _copy_to_user+0x31/0xb0 [ 554.735518][T23691] simple_read_from_buffer+0xe1/0x170 [ 554.735549][T23691] proc_fail_nth_read+0x1be/0x230 [ 554.735572][T23691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.735595][T23691] ? rw_verify_area+0x2ac/0x4e0 [ 554.735616][T23691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.735637][T23691] vfs_read+0x212/0xa80 [ 554.735664][T23691] ? __pfx_vfs_read+0x10/0x10 [ 554.735686][T23691] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.735710][T23691] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.735733][T23691] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 554.735752][T23691] ? mutex_lock_nested+0x152/0x1d0 [ 554.735765][T23691] ? fdget_pos+0x252/0x320 [ 554.735790][T23691] ksys_read+0x156/0x270 [ 554.735811][T23691] ? __pfx_ksys_read+0x10/0x10 [ 554.735837][T23691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.735855][T23691] do_syscall_64+0x15f/0x560 [ 554.735874][T23691] ? trace_irq_disable+0x3b/0x140 [ 554.735891][T23691] ? clear_bhb_loop+0x40/0x90 [ 554.735907][T23691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.735919][T23691] RIP: 0033:0x7f5c00a2d68e [ 554.735933][T23691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.735945][T23691] RSP: 002b:00007f5bfec9cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.735962][T23691] RAX: ffffffffffffffda RBX: 00007f5bfec9d6c0 RCX: 00007f5c00a2d68e [ 554.735978][T23691] RDX: 000000000000000f RSI: 00007f5bfec9d0a0 RDI: 0000000000000004 [ 554.735989][T23691] RBP: 00007f5bfec9d090 R08: 0000000000000000 R09: 0000000000000000 [ 554.736001][T23691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.736012][T23691] R13: 00007f5c00ce6128 R14: 00007f5c00ce6090 R15: 00007ffe15bf8258 [ 554.736042][T23691] [ 554.748820][T23492] team0: Port device team_slave_0 added [ 554.774903][T23492] team0: Port device team_slave_1 added [ 554.793066][ T5629] usb 2-1: device descriptor read/64, error -71 [ 554.910503][ T5629] usb usb2-port1: attempt power cycle [ 555.289269][ T5629] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 555.319521][ T5629] usb 2-1: device descriptor read/8, error -71 [ 555.357238][T23492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.357252][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.357272][T23492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.439175][T23492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.439187][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.439202][T23492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.549171][ T4953] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 555.583022][ T5629] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 555.605812][ T5629] usb 2-1: device descriptor read/8, error -71 [ 555.690853][T23492] hsr_slave_0: entered promiscuous mode [ 555.692354][T23492] hsr_slave_1: entered promiscuous mode [ 555.693424][T23492] debugfs: 'hsr0' already exists in 'hsr' [ 555.693451][T23492] Cannot create hsr debugfs directory [ 555.715452][ T4953] usb 3-1: Using ep0 maxpacket: 16 [ 555.731239][ T4953] usb 3-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 555.731269][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.731287][ T4953] usb 3-1: Product: syz [ 555.731299][ T4953] usb 3-1: Manufacturer: syz [ 555.731311][ T4953] usb 3-1: SerialNumber: syz [ 555.736455][ T5629] usb usb2-port1: unable to enumerate USB device [ 556.014884][ T5630] Bluetooth: hci1: command tx timeout [ 556.019178][ T4953] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 556.021232][ T4953] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 556.021256][ T4953] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 556.021762][ T4953] usb 3-1: unit 6 not found! [ 556.297584][ T4953] usb 3-1: USB disconnect, device number 44 [ 556.377495][T23849] fuse: Bad value for 'fd' [ 556.613544][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.127276][ T32] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 558.257724][T23932] fuse: Bad value for 'fd' [ 558.271848][ T5630] Bluetooth: hci1: command tx timeout [ 558.345152][ T32] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 558.345183][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.345201][ T32] usb 3-1: Product: syz [ 558.345223][ T32] usb 3-1: Manufacturer: syz [ 558.345236][ T32] usb 3-1: SerialNumber: syz [ 558.358811][ T32] usb 3-1: config 0 descriptor?? [ 558.401392][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 558.784930][ T32] usb 3-1: USB disconnect, device number 45 [ 558.885466][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.212304][ T32] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 559.373293][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 559.375258][ T32] usb 3-1: config index 0 descriptor too short (expected 27, got 18) [ 559.375310][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.377836][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.377866][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.377886][ T32] usb 3-1: Product: syz [ 559.377900][ T32] usb 3-1: Manufacturer: syz [ 559.377912][ T32] usb 3-1: SerialNumber: syz [ 559.382102][ T32] usb 3-1: config 0 descriptor?? [ 559.704247][T23998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.138842][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 560.337025][T24029] FAULT_INJECTION: forcing a failure. [ 560.337025][T24029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.337059][T24029] CPU: 0 UID: 0 PID: 24029 Comm: syz.3.2446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.337084][T24029] Tainted: [L]=SOFTLOCKUP [ 560.337091][T24029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.337102][T24029] Call Trace: [ 560.337109][T24029] [ 560.337117][T24029] dump_stack_lvl+0xe8/0x150 [ 560.337158][T24029] should_fail_ex+0x46b/0x600 [ 560.337188][T24029] _copy_to_user+0x31/0xb0 [ 560.337210][T24029] simple_read_from_buffer+0xe1/0x170 [ 560.337242][T24029] proc_fail_nth_read+0x1be/0x230 [ 560.337265][T24029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.337287][T24029] ? rw_verify_area+0x2ac/0x4e0 [ 560.337307][T24029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.337328][T24029] vfs_read+0x212/0xa80 [ 560.337354][T24029] ? __pfx_vfs_read+0x10/0x10 [ 560.337373][T24029] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 560.337396][T24029] ? lockdep_hardirqs_on+0x7a/0x110 [ 560.337416][T24029] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 560.337437][T24029] ? mutex_lock_nested+0x152/0x1d0 [ 560.337453][T24029] ? fdget_pos+0x252/0x320 [ 560.337475][T24029] ksys_read+0x156/0x270 [ 560.337497][T24029] ? __pfx_ksys_read+0x10/0x10 [ 560.337521][T24029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.337539][T24029] do_syscall_64+0x15f/0x560 [ 560.337559][T24029] ? trace_irq_disable+0x3b/0x140 [ 560.337579][T24029] ? clear_bhb_loop+0x40/0x90 [ 560.337599][T24029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.337617][T24029] RIP: 0033:0x7f5c00a2d68e [ 560.337635][T24029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 560.337650][T24029] RSP: 002b:00007f5bfecbdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.337669][T24029] RAX: ffffffffffffffda RBX: 00007f5bfecbe6c0 RCX: 00007f5c00a2d68e [ 560.337681][T24029] RDX: 000000000000000f RSI: 00007f5bfecbe0a0 RDI: 000000000000000b [ 560.337692][T24029] RBP: 00007f5bfecbe090 R08: 0000000000000000 R09: 0000000000000000 [ 560.337704][T24029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.337715][T24029] R13: 00007f5c00ce6038 R14: 00007f5c00ce5fa0 R15: 00007ffe15bf8258 [ 560.337758][T24029] [ 560.522994][ T5630] Bluetooth: hci1: command tx timeout [ 561.342000][T23492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.384260][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.385252][T23492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.447807][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.454390][T23492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.531834][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.543012][T23492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.671176][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 561.671219][T24071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2453'. [ 561.754048][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.119249][ T37] usb 3-1: USB disconnect, device number 46 [ 562.361908][T23492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.372389][T24098] FAULT_INJECTION: forcing a failure. [ 562.372389][T24098] name failslab, interval 1, probability 0, space 0, times 0 [ 562.372422][T24098] CPU: 0 UID: 0 PID: 24098 Comm: syz.1.2456 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.372442][T24098] Tainted: [L]=SOFTLOCKUP [ 562.372447][T24098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.372455][T24098] Call Trace: [ 562.372462][T24098] [ 562.372469][T24098] dump_stack_lvl+0xe8/0x150 [ 562.372494][T24098] should_fail_ex+0x46b/0x600 [ 562.372519][T24098] should_failslab+0xa8/0x100 [ 562.372540][T24098] kmem_cache_alloc_noprof+0x87/0x680 [ 562.372558][T24098] ? fuse_get_req+0x6c3/0xac0 [ 562.372580][T24098] fuse_get_req+0x6c3/0xac0 [ 562.372609][T24098] ? kasan_save_track+0x4f/0x80 [ 562.372622][T24098] ? kasan_save_track+0x3e/0x80 [ 562.372634][T24098] ? __kasan_kmalloc+0x93/0xb0 [ 562.372646][T24098] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 562.372661][T24098] ? __pfx_fuse_get_req+0x10/0x10 [ 562.372674][T24098] ? vfs_open+0x3b/0x350 [ 562.372691][T24098] ? path_openat+0x2eea/0x3960 [ 562.372705][T24098] ? do_file_open+0x23e/0x4a0 [ 562.372717][T24098] ? do_sys_openat2+0x115/0x200 [ 562.372728][T24098] ? __x64_sys_openat+0x138/0x170 [ 562.372739][T24098] ? do_syscall_64+0x15f/0x560 [ 562.372756][T24098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.372778][T24098] fuse_chan_send+0x2d6/0x1aa0 [ 562.372799][T24098] ? from_kgid+0x1ca/0x660 [ 562.372812][T24098] ? __pfx_fuse_chan_send+0x10/0x10 [ 562.372826][T24098] ? __pfx_from_kgid+0x10/0x10 [ 562.372841][T24098] ? rcu_is_watching+0x15/0xb0 [ 562.372859][T24098] ? pid_nr_ns+0xd4/0x150 [ 562.372875][T24098] ? fuse_req_prep+0x5e0/0x8e0 [ 562.372897][T24098] ? __fuse_simple_request+0x7a/0xb0 [ 562.372913][T24098] fuse_file_open+0x559/0x950 [ 562.372937][T24098] ? __pfx_fuse_file_open+0x10/0x10 [ 562.372968][T24098] ? __pfx_apparmor_file_open+0x10/0x10 [ 562.372990][T24098] ? mnt_get_write_access+0x66/0x2d0 [ 562.373009][T24098] fuse_open+0x374/0x760 [ 562.373027][T24098] ? __pfx_fuse_open+0x10/0x10 [ 562.373041][T24098] do_dentry_open+0x83d/0x13e0 [ 562.373069][T24098] vfs_open+0x3b/0x350 [ 562.373087][T24098] ? path_openat+0x2ed3/0x3960 [ 562.373105][T24098] path_openat+0x2eea/0x3960 [ 562.373145][T24098] ? __pfx_path_openat+0x10/0x10 [ 562.373165][T24098] ? kasan_save_track+0x4f/0x80 [ 562.373178][T24098] ? kasan_save_track+0x3e/0x80 [ 562.373192][T24098] ? __kasan_slab_alloc+0x6c/0x80 [ 562.373214][T24098] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.373237][T24098] do_file_open+0x23e/0x4a0 [ 562.373253][T24098] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.373274][T24098] ? __pfx_do_file_open+0x10/0x10 [ 562.373287][T24098] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 562.373316][T24098] ? alloc_fd+0x679/0x6f0 [ 562.373343][T24098] do_sys_openat2+0x115/0x200 [ 562.373358][T24098] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.373378][T24098] ? ksys_write+0x248/0x270 [ 562.373395][T24098] ? __pfx_ksys_write+0x10/0x10 [ 562.373413][T24098] __x64_sys_openat+0x138/0x170 [ 562.373429][T24098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.373443][T24098] do_syscall_64+0x15f/0x560 [ 562.373461][T24098] ? trace_irq_disable+0x3b/0x140 [ 562.373477][T24098] ? clear_bhb_loop+0x40/0x90 [ 562.373495][T24098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.373511][T24098] RIP: 0033:0x7fd91140ce59 [ 562.373527][T24098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.373541][T24098] RSP: 002b:00007fd90f63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.373558][T24098] RAX: ffffffffffffffda RBX: 00007fd911686090 RCX: 00007fd91140ce59 [ 562.373569][T24098] RDX: 0000000000024c01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 562.373580][T24098] RBP: 00007fd90f63d090 R08: 0000000000000000 R09: 0000000000000000 [ 562.373600][T24098] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 562.373609][T24098] R13: 00007fd911686128 R14: 00007fd911686090 R15: 00007ffed723f858 [ 562.373633][T24098] [ 562.417435][T23492] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.545588][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.545740][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.641116][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.641303][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.393173][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 563.393201][T24120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2461'. [ 563.694970][T24126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 564.102062][T24144] FAULT_INJECTION: forcing a failure. [ 564.102062][T24144] name failslab, interval 1, probability 0, space 0, times 0 [ 564.102096][T24144] CPU: 1 UID: 0 PID: 24144 Comm: syz.1.2463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.102120][T24144] Tainted: [L]=SOFTLOCKUP [ 564.102126][T24144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.102136][T24144] Call Trace: [ 564.102143][T24144] [ 564.102152][T24144] dump_stack_lvl+0xe8/0x150 [ 564.102176][T24144] should_fail_ex+0x46b/0x600 [ 564.102205][T24144] should_failslab+0xa8/0x100 [ 564.102227][T24144] kmem_cache_alloc_noprof+0x87/0x680 [ 564.102246][T24144] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 564.102273][T24144] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 564.102305][T24144] mmu_topup_memory_caches+0x21/0x170 [ 564.102330][T24144] kvm_mmu_load+0x9d/0x2320 [ 564.102350][T24144] ? kvm_msr_allowed+0x9a/0x490 [ 564.102372][T24144] ? kvm_msr_allowed+0x9a/0x490 [ 564.102391][T24144] ? kvm_msr_allowed+0x3f4/0x490 [ 564.102410][T24144] ? kvm_msr_allowed+0x9a/0x490 [ 564.102431][T24144] ? kvm_apic_has_interrupt+0x73c/0x770 [ 564.102456][T24144] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 564.102479][T24144] vcpu_run+0x5c68/0x7830 [ 564.102528][T24144] ? ___ratelimit+0x1ea/0x8d0 [ 564.102577][T24144] ? __pfx_vcpu_run+0x10/0x10 [ 564.102594][T24144] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 564.102625][T24144] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 564.102656][T24144] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 564.102683][T24144] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 564.102701][T24144] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 564.102722][T24144] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.102750][T24144] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.102771][T24144] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.102794][T24144] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.102815][T24144] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 564.102838][T24144] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.102856][T24144] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.102877][T24144] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.102898][T24144] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.102919][T24144] ? rt_write_unlock+0x190/0x230 [ 564.102941][T24144] kvm_vcpu_ioctl+0xa65/0xfe0 [ 564.102972][T24144] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 564.103019][T24144] ? __fget_files+0x2a/0x420 [ 564.103040][T24144] ? __fget_files+0x2a/0x420 [ 564.103053][T24144] ? __fget_files+0x3a6/0x420 [ 564.103068][T24144] ? __fget_files+0x2a/0x420 [ 564.103088][T24144] ? bpf_lsm_file_ioctl+0x9/0x20 [ 564.103112][T24144] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 564.103139][T24144] __se_sys_ioctl+0xff/0x170 [ 564.103159][T24144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.103177][T24144] do_syscall_64+0x15f/0x560 [ 564.103196][T24144] ? trace_irq_disable+0x3b/0x140 [ 564.103216][T24144] ? clear_bhb_loop+0x40/0x90 [ 564.103237][T24144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.103255][T24144] RIP: 0033:0x7fd91140ce59 [ 564.103272][T24144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.103287][T24144] RSP: 002b:00007fd90f63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.103307][T24144] RAX: ffffffffffffffda RBX: 00007fd911686090 RCX: 00007fd91140ce59 [ 564.103320][T24144] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 564.103330][T24144] RBP: 00007fd90f63d090 R08: 0000000000000000 R09: 0000000000000000 [ 564.103342][T24144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.103352][T24144] R13: 00007fd911686128 R14: 00007fd911686090 R15: 00007ffed723f858 [ 564.103380][T24144] [ 564.169060][T24150] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2464'. [ 564.194023][T24151] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 564.194023][T24151] program syz.3.2464 not setting count and/or reply_len properly [ 564.474632][ T32] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 564.568887][T23492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.637770][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 564.640806][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 564.644356][ T32] usb 4-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 564.644384][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.644410][ T32] usb 4-1: Product: syz [ 564.644423][ T32] usb 4-1: Manufacturer: syz [ 564.644436][ T32] usb 4-1: SerialNumber: syz [ 564.821924][T23492] veth0_vlan: entered promiscuous mode [ 564.993189][T23492] veth1_vlan: entered promiscuous mode [ 565.019203][ T32] usb 4-1: unit 5 not found! [ 565.098826][ T32] usb 4-1: can't set first interface for hiFace device. [ 565.098861][ T32] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 565.109110][T23492] veth0_macvtap: entered promiscuous mode [ 565.128821][ T32] usb 4-1: USB disconnect, device number 31 [ 565.147096][T23492] veth1_macvtap: entered promiscuous mode [ 565.186908][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.307834][T23492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.340411][T23492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.602775][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 565.602816][T24200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2469'. [ 565.624149][ T1033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.625293][ T1033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.625750][ T1033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.626623][ T1033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.636478][T24230] fuse: Bad value for 'user_id' [ 566.636497][T24230] fuse: Bad value for 'user_id' [ 567.473678][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.473697][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.732826][T24271] FAULT_INJECTION: forcing a failure. [ 567.732826][T24271] name failslab, interval 1, probability 0, space 0, times 0 [ 567.732852][T24271] CPU: 0 UID: 0 PID: 24271 Comm: syz.3.2479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 567.732868][T24271] Tainted: [L]=SOFTLOCKUP [ 567.732871][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.732878][T24271] Call Trace: [ 567.732883][T24271] [ 567.732889][T24271] dump_stack_lvl+0xe8/0x150 [ 567.732906][T24271] should_fail_ex+0x46b/0x600 [ 567.732923][T24271] should_failslab+0xa8/0x100 [ 567.732937][T24271] __kmalloc_cache_noprof+0x84/0x690 [ 567.732949][T24271] ? mutex_lock_nested+0x168/0x1d0 [ 567.732960][T24271] ? nl80211_vendor_cmd_dump+0x1d7/0x15d0 [ 567.732972][T24271] nl80211_vendor_cmd_dump+0x1d7/0x15d0 [ 567.732989][T24271] ? rcu_is_watching+0x15/0xb0 [ 567.733004][T24271] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 567.733015][T24271] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 567.733031][T24271] genl_dumpit+0x10b/0x1b0 [ 567.733045][T24271] netlink_dump+0x702/0xe10 [ 567.733065][T24271] ? __pfx_netlink_dump+0x10/0x10 [ 567.733086][T24271] ? genl_start+0x499/0x6c0 [ 567.733101][T24271] __netlink_dump_start+0x5cb/0x7e0 [ 567.733119][T24271] genl_family_rcv_msg_dumpit+0x213/0x310 [ 567.733133][T24271] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 567.733148][T24271] ? __pfx_genl_start+0x10/0x10 [ 567.733158][T24271] ? __pfx_genl_dumpit+0x10/0x10 [ 567.733167][T24271] ? __pfx_genl_done+0x10/0x10 [ 567.733180][T24271] ? bpf_lsm_capable+0x9/0x20 [ 567.733195][T24271] ? security_capable+0x7e/0x2c0 [ 567.733214][T24271] genl_rcv_msg+0x5e8/0x7a0 [ 567.733229][T24271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.733238][T24271] ? ref_tracker_free+0x673/0x820 [ 567.733261][T24271] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 567.733271][T24271] ? ____sys_sendmsg+0x55c/0x870 [ 567.733285][T24271] ? ___sys_sendmsg+0x2a5/0x360 [ 567.733305][T24271] netlink_rcv_skb+0x232/0x4b0 [ 567.733319][T24271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.733331][T24271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.733356][T24271] genl_rcv+0x28/0x40 [ 567.733366][T24271] netlink_unicast+0x780/0x920 [ 567.733385][T24271] netlink_sendmsg+0x813/0xb40 [ 567.733405][T24271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.733420][T24271] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 567.733435][T24271] ? aa_sock_msg_perm+0x122/0x200 [ 567.733445][T24271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.733459][T24271] sock_sendmsg_nosec+0x112/0x150 [ 567.733472][T24271] ____sys_sendmsg+0x55c/0x870 [ 567.733489][T24271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.733508][T24271] ? import_iovec+0x73/0xa0 [ 567.733521][T24271] ___sys_sendmsg+0x2a5/0x360 [ 567.733535][T24271] ? __lock_acquire+0x6b5/0x2d10 [ 567.733549][T24271] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.733582][T24271] ? __fget_files+0x2a/0x420 [ 567.733592][T24271] ? __fget_files+0x3a6/0x420 [ 567.733607][T24271] __x64_sys_sendmsg+0x1c3/0x2a0 [ 567.733623][T24271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.733642][T24271] ? __pfx_ksys_write+0x10/0x10 [ 567.733659][T24271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.733670][T24271] do_syscall_64+0x15f/0x560 [ 567.733684][T24271] ? trace_irq_disable+0x3b/0x140 [ 567.733696][T24271] ? clear_bhb_loop+0x40/0x90 [ 567.733708][T24271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.733718][T24271] RIP: 0033:0x7f5c00a6ce59 [ 567.733730][T24271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.733738][T24271] RSP: 002b:00007f5bfecbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.733750][T24271] RAX: ffffffffffffffda RBX: 00007f5c00ce5fa0 RCX: 00007f5c00a6ce59 [ 567.733758][T24271] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 567.733765][T24271] RBP: 00007f5bfecbe090 R08: 0000000000000000 R09: 0000000000000000 [ 567.733771][T24271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.733777][T24271] R13: 00007f5c00ce6038 R14: 00007f5c00ce5fa0 R15: 00007ffe15bf8258 [ 567.733794][T24271] [ 567.875882][ T4953] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 568.052181][ T4953] usb 2-1: not running at top speed; connect to a high speed hub [ 568.054650][ T4953] usb 2-1: config 5 has an invalid interface number: 215 but max is 1 [ 568.054677][ T4953] usb 2-1: config 5 has an invalid interface association descriptor of length 7, skipping [ 568.054694][ T4953] usb 2-1: config 5 has an invalid interface number: 19 but max is 1 [ 568.054713][ T4953] usb 2-1: config 5 has no interface number 0 [ 568.054727][ T4953] usb 2-1: config 5 has no interface number 1 [ 568.054786][ T4953] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 568.054808][ T4953] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 568.054834][ T4953] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 568.054858][ T4953] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 568.054887][ T4953] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 568.054906][ T4953] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 568.054926][ T4953] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 568.054947][ T4953] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 568.054979][ T4953] usb 2-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 568.055002][ T4953] usb 2-1: config 5 interface 215 has no altsetting 0 [ 568.055017][ T4953] usb 2-1: config 5 interface 19 has no altsetting 0 [ 568.057749][ T4953] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 568.057774][ T4953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.057793][ T4953] usb 2-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 568.057814][ T4953] usb 2-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 568.057839][ T4953] usb 2-1: SerialNumber: ы [ 568.177863][T24261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.475056][ T3338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.475070][ T3338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.617732][ T4953] usb 2-1: USB disconnect, device number 2 [ 568.820459][T24309] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 569.078279][ T5723] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 569.207345][T24324] hugetlbfs: syz.2.2487 (24324): Using mlock ulimits for SHM_HUGETLB is obsolete [ 569.244682][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.244709][ T5723] usb 1-1: config 0 has no interfaces? [ 569.244738][ T5723] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 569.244760][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.320212][ T5723] usb 1-1: config 0 descriptor?? [ 569.508155][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.595171][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.596946][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.617653][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.618819][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.861209][ T5614] usb 1-1: USB disconnect, device number 27 [ 570.671927][ T5723] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 570.843742][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 570.845841][ T5723] usb 3-1: config 1 interface 0 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.845874][ T5723] usb 3-1: config 1 interface 0 has no altsetting 0 [ 570.848229][ T5723] usb 3-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 570.848257][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.848276][ T5723] usb 3-1: Product: syz [ 570.848290][ T5723] usb 3-1: Manufacturer: syz [ 570.848303][ T5723] usb 3-1: SerialNumber: syz [ 571.171223][ T5723] usbhid 3-1:1.0: can't add hid device: -71 [ 571.171333][ T5723] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 571.242322][ T5723] usb 3-1: USB disconnect, device number 47 [ 571.252940][ T3324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.344217][ T37] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 571.521481][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 571.530218][ T37] usb 2-1: config 5 has an invalid interface number: 215 but max is 1 [ 571.530246][ T37] usb 2-1: config 5 has an invalid interface association descriptor of length 7, skipping [ 571.530261][ T37] usb 2-1: config 5 has an invalid interface number: 19 but max is 1 [ 571.530279][ T37] usb 2-1: config 5 has no interface number 0 [ 571.530292][ T37] usb 2-1: config 5 has no interface number 1 [ 571.530335][ T37] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 571.530356][ T37] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 571.530379][ T37] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 571.530399][ T37] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 571.530420][ T37] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 571.530437][ T37] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 571.530456][ T37] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 571.530476][ T37] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 571.530505][ T37] usb 2-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 571.530526][ T37] usb 2-1: config 5 interface 215 has no altsetting 0 [ 571.530541][ T37] usb 2-1: config 5 interface 19 has no altsetting 0 [ 571.533390][ T37] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 571.533418][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.533436][ T37] usb 2-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 571.533458][ T37] usb 2-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 571.533485][ T37] usb 2-1: SerialNumber: ы [ 571.791573][T24383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 571.989934][T24417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 572.036827][T24422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 572.036860][T24422] overlayfs: failed to set xattr on upper [ 572.036868][T24422] overlayfs: ...falling back to redirect_dir=nofollow. [ 572.036876][T24422] overlayfs: ...falling back to index=off. [ 572.036883][T24422] overlayfs: ...falling back to uuid=null. [ 572.059577][ T5630] Bluetooth: hci2: command tx timeout [ 572.084196][T24425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 572.084223][T24425] overlayfs: failed to set xattr on upper [ 572.084231][T24425] overlayfs: ...falling back to redirect_dir=nofollow. [ 572.084239][T24425] overlayfs: ...falling back to index=off. [ 572.084245][T24425] overlayfs: ...falling back to uuid=null. [ 572.084281][T24425] overlayfs: conflicting lowerdir path [ 572.166774][ T37] usb 2-1: USB disconnect, device number 3 [ 572.361298][ T3324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.722942][ T37] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 572.895278][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.895304][ T37] usb 3-1: config 0 has no interfaces? [ 572.895335][ T37] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 572.895357][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.904101][ T3324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.960765][ T37] usb 3-1: config 0 descriptor?? [ 573.184320][T24446] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 573.184320][T24446] program syz.2.2498 not setting count and/or reply_len properly [ 573.186695][ T5638] usb 3-1: USB disconnect, device number 48 [ 573.498892][T24505] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 573.498892][T24505] program syz.1.2501 not setting count and/or reply_len properly [ 573.705169][T24510] FAULT_INJECTION: forcing a failure. [ 573.705169][T24510] name failslab, interval 1, probability 0, space 0, times 0 [ 573.705192][T24510] CPU: 0 UID: 0 PID: 24510 Comm: syz.1.2502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 573.705208][T24510] Tainted: [L]=SOFTLOCKUP [ 573.705211][T24510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.705218][T24510] Call Trace: [ 573.705223][T24510] [ 573.705228][T24510] dump_stack_lvl+0xe8/0x150 [ 573.705245][T24510] should_fail_ex+0x46b/0x600 [ 573.705263][T24510] should_failslab+0xa8/0x100 [ 573.705277][T24510] kmem_cache_alloc_noprof+0x87/0x680 [ 573.705288][T24510] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 573.705308][T24510] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 573.705328][T24510] mmu_topup_memory_caches+0x21/0x170 [ 573.705343][T24510] kvm_mmu_load+0x9d/0x2320 [ 573.705356][T24510] ? kvm_msr_allowed+0x9a/0x490 [ 573.705371][T24510] ? kvm_msr_allowed+0x9a/0x490 [ 573.705385][T24510] ? kvm_msr_allowed+0x3f4/0x490 [ 573.705399][T24510] ? kvm_msr_allowed+0x9a/0x490 [ 573.705415][T24510] ? kvm_apic_has_interrupt+0x73c/0x770 [ 573.705439][T24510] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 573.705454][T24510] vcpu_run+0x5c68/0x7830 [ 573.705484][T24510] ? ___ratelimit+0x1ea/0x8d0 [ 573.705513][T24510] ? __pfx_vcpu_run+0x10/0x10 [ 573.705523][T24510] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 573.705534][T24510] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 573.705552][T24510] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 573.705570][T24510] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 573.705580][T24510] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 573.705596][T24510] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.705614][T24510] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.705628][T24510] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.705642][T24510] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.705655][T24510] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 573.705669][T24510] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 573.705681][T24510] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.705696][T24510] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.705716][T24510] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.705730][T24510] ? rt_write_unlock+0x190/0x230 [ 573.705742][T24510] kvm_vcpu_ioctl+0xa65/0xfe0 [ 573.705761][T24510] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 573.705799][T24510] ? __fget_files+0x2a/0x420 [ 573.705813][T24510] ? __fget_files+0x2a/0x420 [ 573.705822][T24510] ? __fget_files+0x3a6/0x420 [ 573.705831][T24510] ? __fget_files+0x2a/0x420 [ 573.705846][T24510] ? bpf_lsm_file_ioctl+0x9/0x20 [ 573.705868][T24510] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 573.705890][T24510] __se_sys_ioctl+0xff/0x170 [ 573.705910][T24510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.705926][T24510] do_syscall_64+0x15f/0x560 [ 573.705947][T24510] ? trace_irq_disable+0x3b/0x140 [ 573.705965][T24510] ? clear_bhb_loop+0x40/0x90 [ 573.705986][T24510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.705997][T24510] RIP: 0033:0x7fd91140ce59 [ 573.706008][T24510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.706017][T24510] RSP: 002b:00007fd90f63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.706029][T24510] RAX: ffffffffffffffda RBX: 00007fd911686090 RCX: 00007fd91140ce59 [ 573.706036][T24510] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 573.706043][T24510] RBP: 00007fd90f63d090 R08: 0000000000000000 R09: 0000000000000000 [ 573.706049][T24510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.706056][T24510] R13: 00007fd911686128 R14: 00007fd911686090 R15: 00007ffed723f858 [ 573.706072][T24510] [ 573.937771][T24519] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 574.299574][ T5630] Bluetooth: hci2: command tx timeout [ 574.327945][ T3324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.591223][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 574.591265][T24564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2506'. [ 574.771527][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.774977][T24325] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.775213][T24325] bridge_slave_0: entered allmulticast mode [ 574.782245][T24325] bridge_slave_0: entered promiscuous mode [ 574.792921][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.793279][T24325] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.793571][T24325] bridge_slave_1: entered allmulticast mode [ 574.796714][T24325] bridge_slave_1: entered promiscuous mode [ 574.964534][ T4953] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 574.999068][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.999145][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.019797][ T5638] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 575.055020][T24325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.065579][T24325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.147331][ T4953] usb 3-1: not running at top speed; connect to a high speed hub [ 575.148972][ T4953] usb 3-1: config 5 has an invalid interface number: 215 but max is 1 [ 575.149002][ T4953] usb 3-1: config 5 has an invalid interface association descriptor of length 7, skipping [ 575.149019][ T4953] usb 3-1: config 5 has an invalid interface number: 19 but max is 1 [ 575.149029][ T4953] usb 3-1: config 5 has no interface number 0 [ 575.149037][ T4953] usb 3-1: config 5 has no interface number 1 [ 575.149069][ T4953] usb 3-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 575.149082][ T4953] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 575.149096][ T4953] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 575.149109][ T4953] usb 3-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 575.149135][ T4953] usb 3-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 575.149145][ T4953] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 575.149155][ T4953] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 575.149168][ T4953] usb 3-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 575.149187][ T4953] usb 3-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 575.149199][ T4953] usb 3-1: config 5 interface 215 has no altsetting 0 [ 575.149208][ T4953] usb 3-1: config 5 interface 19 has no altsetting 0 [ 575.151700][ T4953] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 575.151727][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.151738][ T4953] usb 3-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 575.151750][ T4953] usb 3-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 575.151764][ T4953] usb 3-1: SerialNumber: ы [ 575.219845][ T5638] usb 1-1: Using ep0 maxpacket: 16 [ 575.223835][ T5638] usb 1-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 575.223863][ T5638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.223876][ T5638] usb 1-1: Product: syz [ 575.223884][ T5638] usb 1-1: Manufacturer: syz [ 575.223891][ T5638] usb 1-1: SerialNumber: syz [ 575.470145][T24570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.636129][ T5638] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 575.636701][ T5638] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 575.636723][ T5638] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 575.865776][ T5638] usb 1-1: USB disconnect, device number 28 [ 575.904926][ T4953] usb 3-1: USB disconnect, device number 49 [ 576.020613][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.066855][ T5614] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 576.189009][T24325] team0: Port device team_slave_0 added [ 576.245564][T24325] team0: Port device team_slave_1 added [ 576.278131][ T5614] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.278156][ T5614] usb 2-1: config 0 has no interfaces? [ 576.278173][ T5614] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 576.278184][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.293567][ T5614] usb 2-1: config 0 descriptor?? [ 576.460816][T24325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.460831][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.460851][T24325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.540237][T24325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.540248][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.540263][T24325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.552852][ T5630] Bluetooth: hci2: command tx timeout [ 576.556101][T24641] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 576.556101][T24641] program syz.1.2510 not setting count and/or reply_len properly [ 576.565413][ T37] usb 2-1: USB disconnect, device number 4 [ 576.568213][T24715] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 576.801831][ T3324] bridge_slave_1: left allmulticast mode [ 576.801854][ T3324] bridge_slave_1: left promiscuous mode [ 576.802039][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.884138][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 576.884165][T24734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2514'. [ 576.939938][T24736] FAULT_INJECTION: forcing a failure. [ 576.939938][T24736] name failslab, interval 1, probability 0, space 0, times 0 [ 576.939963][T24736] CPU: 0 UID: 0 PID: 24736 Comm: syz.2.2516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 576.939978][T24736] Tainted: [L]=SOFTLOCKUP [ 576.939982][T24736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.939988][T24736] Call Trace: [ 576.939992][T24736] [ 576.939997][T24736] dump_stack_lvl+0xe8/0x150 [ 576.940013][T24736] should_fail_ex+0x46b/0x600 [ 576.940030][T24736] should_failslab+0xa8/0x100 [ 576.940044][T24736] __kmalloc_cache_noprof+0x84/0x690 [ 576.940056][T24736] ? nf_tables_newchain+0xf8a/0x2890 [ 576.940070][T24736] nf_tables_newchain+0xf8a/0x2890 [ 576.940082][T24736] ? kasan_save_track+0x3e/0x80 [ 576.940100][T24736] ? __pfx_nf_tables_newchain+0x10/0x10 [ 576.940135][T24736] ? nfnl_pernet+0x23/0x240 [ 576.940153][T24736] ? nfnl_pernet+0x23/0x240 [ 576.940178][T24736] ? __nla_parse+0x40/0x60 [ 576.940194][T24736] nfnetlink_rcv+0x1247/0x27b0 [ 576.940224][T24736] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 576.940245][T24736] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 576.940256][T24736] ? ref_tracker_free+0x673/0x820 [ 576.940283][T24736] ? __netlink_deliver_tap+0x866/0x8b0 [ 576.940302][T24736] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.940316][T24736] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.940333][T24736] netlink_unicast+0x780/0x920 [ 576.940351][T24736] netlink_sendmsg+0x813/0xb40 [ 576.940378][T24736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.940393][T24736] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 576.940408][T24736] ? aa_sock_msg_perm+0x122/0x200 [ 576.940418][T24736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.940432][T24736] sock_sendmsg_nosec+0x112/0x150 [ 576.940445][T24736] ____sys_sendmsg+0x55c/0x870 [ 576.940469][T24736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.940499][T24736] ? import_iovec+0x73/0xa0 [ 576.940520][T24736] ___sys_sendmsg+0x2a5/0x360 [ 576.940542][T24736] ? __lock_acquire+0x6b5/0x2d10 [ 576.940565][T24736] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.940601][T24736] ? __fget_files+0x2a/0x420 [ 576.940611][T24736] ? __fget_files+0x3a6/0x420 [ 576.940625][T24736] __x64_sys_sendmsg+0x1c3/0x2a0 [ 576.940640][T24736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.940659][T24736] ? __pfx_ksys_write+0x10/0x10 [ 576.940676][T24736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.940687][T24736] do_syscall_64+0x15f/0x560 [ 576.940702][T24736] ? trace_irq_disable+0x3b/0x140 [ 576.940713][T24736] ? clear_bhb_loop+0x40/0x90 [ 576.940725][T24736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.940735][T24736] RIP: 0033:0x7fda6fbbce59 [ 576.940746][T24736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.940755][T24736] RSP: 002b:00007fda6de16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.940767][T24736] RAX: ffffffffffffffda RBX: 00007fda6fe35fa0 RCX: 00007fda6fbbce59 [ 576.940774][T24736] RDX: 0000000000000080 RSI: 0000200000000c00 RDI: 0000000000000003 [ 576.940781][T24736] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 576.940787][T24736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.940793][T24736] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 576.940809][T24736] [ 576.982516][ T3324] bridge_slave_0: left allmulticast mode [ 576.982550][ T3324] bridge_slave_0: left promiscuous mode [ 576.983083][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.740143][ T5614] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 577.908277][ T5614] usb 2-1: not running at top speed; connect to a high speed hub [ 577.909488][ T5614] usb 2-1: config 5 has an invalid interface number: 215 but max is 1 [ 577.909514][ T5614] usb 2-1: config 5 has an invalid interface number: 19 but max is 1 [ 577.909533][ T5614] usb 2-1: config 5 has no interface number 0 [ 577.909542][ T5614] usb 2-1: config 5 has no interface number 1 [ 577.909589][ T5614] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 577.909608][ T5614] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 577.909630][ T5614] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 577.909654][ T5614] usb 2-1: config 5 interface 215 altsetting 4 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 577.909678][ T5614] usb 2-1: config 5 interface 215 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 577.909696][ T5614] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 577.909717][ T5614] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 577.909737][ T5614] usb 2-1: config 5 interface 215 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 577.909763][ T5614] usb 2-1: config 5 interface 19 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 577.909776][ T5614] usb 2-1: config 5 interface 215 has no altsetting 0 [ 577.909784][ T5614] usb 2-1: config 5 interface 19 has no altsetting 0 [ 577.918950][ T5614] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=29.7e [ 577.918976][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.918994][ T5614] usb 2-1: Product: ꔢ牱䤼꼴넦♍頌ꂺ꼡ᘰ㍕❸㚽灴唟좝띕൞ㄡ늧朚퉷灡ꍲ寑堋悃넨羣ઢ慷幚돫뫪눻뱨첏红返照඗昆꫼Ⳋ஡弁舀ቛ屧쎉ⱜ쯐萵씼᳈웹걬ꬡ雝 [ 577.919015][ T5614] usb 2-1: Manufacturer: 笙搚뻞꛴鳌䰔㑶⻥餈ᨩ箍西ᾞ蕒ラ줰棿䃴㕲냫눳ꮛ쓡愌ϗ狈造壨㶎㡢୙磻䟔轙쒍鰺쮬嚷㗼鰍ᰳ᫋猏殕׶ﺻ첢奺悋ن锆錜䒬ਊꔴ௪鈔魗塂⋸暴욋䁫㯨挟씸䲧铑㡀᳟閛㫏挃핫鳺톁ࡗ⪂큖삌完貌ⷲ򜏮뎟 [ 577.919054][ T5614] usb 2-1: SerialNumber: ы [ 577.932957][ T5614] usb 2-1: Interface #215 referenced by multiple IADs [ 577.987549][T24751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.303301][ T5614] usb 2-1: USB disconnect, device number 5 [ 578.622888][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.756044][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.760743][ T1033] smbdirect: ib_dev[syz1] removed [ 578.809600][ T5630] Bluetooth: hci2: command tx timeout [ 578.851638][T24773] random: crng reseeded on system resumption [ 578.853074][ T3324] bond0 (unregistering): Released all slaves [ 579.222153][T24783] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 579.633500][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 579.845153][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 580.261880][T24325] hsr_slave_0: entered promiscuous mode [ 580.264054][T24325] hsr_slave_1: entered promiscuous mode [ 580.265712][T24325] debugfs: 'hsr0' already exists in 'hsr' [ 580.265740][T24325] Cannot create hsr debugfs directory [ 580.387353][ T5638] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 580.412527][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 580.594907][ T5638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.594934][ T5638] usb 1-1: config 0 has no interfaces? [ 580.594961][ T5638] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 580.594982][ T5638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.600905][ T5638] usb 1-1: config 0 descriptor?? [ 580.808322][T24845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 580.830739][T24824] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 580.830739][T24824] program syz.0.2525 not setting count and/or reply_len properly [ 580.860550][ T5723] usb 1-1: USB disconnect, device number 29 [ 581.428080][ T3324] hsr_slave_0: left promiscuous mode [ 581.469927][ T3324] hsr_slave_1: left promiscuous mode [ 581.470959][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.471228][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.528767][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.528797][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.714262][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 581.836175][ T3324] veth1_macvtap: left promiscuous mode [ 581.836299][ T3324] veth0_macvtap: left promiscuous mode [ 581.864319][ T3324] veth1_vlan: left promiscuous mode [ 581.935316][T24916] FAULT_INJECTION: forcing a failure. [ 581.935316][T24916] name failslab, interval 1, probability 0, space 0, times 0 [ 581.935340][T24916] CPU: 1 UID: 0 PID: 24916 Comm: syz.0.2536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.935355][T24916] Tainted: [L]=SOFTLOCKUP [ 581.935359][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.935369][T24916] Call Trace: [ 581.935373][T24916] [ 581.935378][T24916] dump_stack_lvl+0xe8/0x150 [ 581.935396][T24916] should_fail_ex+0x46b/0x600 [ 581.935416][T24916] should_failslab+0xa8/0x100 [ 581.935438][T24916] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 581.935457][T24916] ? __d_alloc+0x37/0x6f0 [ 581.935478][T24916] __d_alloc+0x37/0x6f0 [ 581.935493][T24916] ? trace_kmem_cache_alloc+0x29/0xe0 [ 581.935514][T24916] d_alloc_pseudo+0x21/0xc0 [ 581.935533][T24916] alloc_file_pseudo+0xdd/0x240 [ 581.935561][T24916] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 581.935597][T24916] do_accept+0x4a4/0x930 [ 581.935633][T24916] ? __pfx_do_accept+0x10/0x10 [ 581.935674][T24916] __sys_accept4+0x139/0x230 [ 581.935696][T24916] ? __pfx___sys_accept4+0x10/0x10 [ 581.935716][T24916] ? __pfx_ksys_write+0x10/0x10 [ 581.935732][T24916] __x64_sys_accept4+0x9a/0xb0 [ 581.935744][T24916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.935755][T24916] do_syscall_64+0x15f/0x560 [ 581.935770][T24916] ? clear_bhb_loop+0x40/0x90 [ 581.935782][T24916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.935792][T24916] RIP: 0033:0x7f55b2b6ce59 [ 581.935803][T24916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.935812][T24916] RSP: 002b:00007f55b0dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 581.935823][T24916] RAX: ffffffffffffffda RBX: 00007f55b2de5fa0 RCX: 00007f55b2b6ce59 [ 581.935831][T24916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 581.935837][T24916] RBP: 00007f55b0dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 581.935843][T24916] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 581.935850][T24916] R13: 00007f55b2de6038 R14: 00007f55b2de5fa0 R15: 00007fff0942cb58 [ 581.935865][T24916] [ 582.284986][ T5723] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 582.455516][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 582.460183][ T5723] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 582.460211][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.460229][ T5723] usb 1-1: Product: syz [ 582.460243][ T5723] usb 1-1: Manufacturer: syz [ 582.460256][ T5723] usb 1-1: SerialNumber: syz [ 582.525454][ T5723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 582.525522][ T5723] r8152-cfgselector 1-1: config 0 descriptor?? [ 582.972238][T24918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.972822][T24918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.975272][ T5723] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 583.171988][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 583.225385][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 583.396746][ T3324] team0 (unregistering): Port device dummy0 removed [ 583.505516][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 583.651572][T24948] FAULT_INJECTION: forcing a failure. [ 583.651572][T24948] name failslab, interval 1, probability 0, space 0, times 0 [ 583.651606][T24948] CPU: 1 UID: 0 PID: 24948 Comm: syz.2.2538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.651631][T24948] Tainted: [L]=SOFTLOCKUP [ 583.651638][T24948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.651648][T24948] Call Trace: [ 583.651655][T24948] [ 583.651663][T24948] dump_stack_lvl+0xe8/0x150 [ 583.651690][T24948] should_fail_ex+0x46b/0x600 [ 583.651720][T24948] should_failslab+0xa8/0x100 [ 583.651743][T24948] __kmalloc_noprof+0xdf/0x7b0 [ 583.651770][T24948] ? kfree+0x4d/0x6c0 [ 583.651786][T24948] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 583.651809][T24948] tomoyo_realpath_from_path+0xe3/0x5d0 [ 583.651829][T24948] ? tomoyo_domain+0xd7/0x130 [ 583.651851][T24948] ? tomoyo_path_number_perm+0x219/0x630 [ 583.651873][T24948] tomoyo_path_number_perm+0x246/0x630 [ 583.651898][T24948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 583.651921][T24948] ? __lock_acquire+0x6b5/0x2d10 [ 583.651945][T24948] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.651987][T24948] ? __fget_files+0x2a/0x420 [ 583.652007][T24948] ? __fget_files+0x2a/0x420 [ 583.652021][T24948] ? __fget_files+0x3a6/0x420 [ 583.652036][T24948] ? __fget_files+0x2a/0x420 [ 583.652055][T24948] security_file_ioctl+0xc3/0x2a0 [ 583.652083][T24948] __se_sys_ioctl+0x47/0x170 [ 583.652103][T24948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.652123][T24948] do_syscall_64+0x15f/0x560 [ 583.652142][T24948] ? trace_irq_disable+0x3b/0x140 [ 583.652159][T24948] ? clear_bhb_loop+0x40/0x90 [ 583.652179][T24948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.652195][T24948] RIP: 0033:0x7fda6fbbce59 [ 583.652212][T24948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.652225][T24948] RSP: 002b:00007fda6de16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.652243][T24948] RAX: ffffffffffffffda RBX: 00007fda6fe35fa0 RCX: 00007fda6fbbce59 [ 583.652256][T24948] RDX: 0000200000000080 RSI: 0000000000008918 RDI: 0000000000000003 [ 583.652267][T24948] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 583.652278][T24948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.652287][T24948] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 583.652313][T24948] [ 583.652463][T24948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.139670][T24974] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 584.139698][T24974] overlayfs: failed to set xattr on upper [ 584.139705][T24974] overlayfs: ...falling back to redirect_dir=nofollow. [ 584.139714][T24974] overlayfs: ...falling back to index=off. [ 584.139722][T24974] overlayfs: ...falling back to uuid=null. [ 584.139762][T24974] overlayfs: conflicting lowerdir path [ 584.189360][T24981] fuse: Bad value for 'group_id' [ 584.189379][T24981] fuse: Bad value for 'group_id' [ 584.371109][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 584.849399][ T5638] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 585.145220][ T5638] usb 3-1: Using ep0 maxpacket: 32 [ 585.147682][ T5638] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.149036][ T5638] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 585.151124][ T5638] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 585.151151][ T5638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.151167][ T5638] usb 3-1: Product: syz [ 585.151179][ T5638] usb 3-1: Manufacturer: syz [ 585.151191][ T5638] usb 3-1: SerialNumber: syz [ 585.781093][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 585.797454][ T5638] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 585.797492][ T5638] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 585.833543][ T5638] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 585.968111][ T5638] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 585.972844][ T5638] usb 3-1: USB disconnect, device number 50 [ 586.408883][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.839892][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 587.074029][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 587.179364][T25083] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2554'. [ 587.580935][T25097] random: crng reseeded on system resumption [ 588.217287][T25122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (13312 ns). Using initial count to start timer. [ 588.711719][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 588.735215][T25147] overlayfs: failed to resolve './file1': -2 [ 588.791721][T25148] overlayfs: failed to resolve './file1/file0': -2 [ 588.879222][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 589.696978][T25194] FAULT_INJECTION: forcing a failure. [ 589.696978][T25194] name failslab, interval 1, probability 0, space 0, times 0 [ 589.697013][T25194] CPU: 0 UID: 0 PID: 25194 Comm: syz.2.2571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 589.697037][T25194] Tainted: [L]=SOFTLOCKUP [ 589.697044][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.697055][T25194] Call Trace: [ 589.697062][T25194] [ 589.697071][T25194] dump_stack_lvl+0xe8/0x150 [ 589.697099][T25194] should_fail_ex+0x46b/0x600 [ 589.697136][T25194] should_failslab+0xa8/0x100 [ 589.697158][T25194] __kmalloc_noprof+0xdf/0x7b0 [ 589.697178][T25194] ? tomoyo_encode+0x28b/0x550 [ 589.697202][T25194] tomoyo_encode+0x28b/0x550 [ 589.697226][T25194] tomoyo_realpath_from_path+0x58d/0x5d0 [ 589.697246][T25194] ? tomoyo_domain+0xd7/0x130 [ 589.697269][T25194] ? tomoyo_path_number_perm+0x219/0x630 [ 589.697291][T25194] tomoyo_path_number_perm+0x246/0x630 [ 589.697314][T25194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.697335][T25194] ? __lock_acquire+0x6b5/0x2d10 [ 589.697356][T25194] ? do_raw_spin_lock+0x12b/0x2f0 [ 589.697404][T25194] ? __fget_files+0x2a/0x420 [ 589.697423][T25194] ? __fget_files+0x2a/0x420 [ 589.697439][T25194] ? __fget_files+0x3a6/0x420 [ 589.697455][T25194] ? __fget_files+0x2a/0x420 [ 589.697476][T25194] security_file_ioctl+0xc3/0x2a0 [ 589.697502][T25194] __se_sys_ioctl+0x47/0x170 [ 589.697523][T25194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.697544][T25194] do_syscall_64+0x15f/0x560 [ 589.697567][T25194] ? trace_irq_disable+0x3b/0x140 [ 589.697586][T25194] ? clear_bhb_loop+0x40/0x90 [ 589.697608][T25194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.697626][T25194] RIP: 0033:0x7fda6fbbce59 [ 589.697643][T25194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.697659][T25194] RSP: 002b:00007fda6de16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.697678][T25194] RAX: ffffffffffffffda RBX: 00007fda6fe35fa0 RCX: 00007fda6fbbce59 [ 589.697692][T25194] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 589.697704][T25194] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 589.697715][T25194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.697726][T25194] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 589.697756][T25194] [ 589.697775][T25194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.116706][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 590.287187][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 590.306875][ T5723] usb 2-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 590.306897][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.306908][ T5723] usb 2-1: Product: syz [ 590.306916][ T5723] usb 2-1: Manufacturer: syz [ 590.306923][ T5723] usb 2-1: SerialNumber: syz [ 590.489706][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 590.737089][ T5723] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 590.751159][ T5723] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 590.920224][T25238] FAULT_INJECTION: forcing a failure. [ 590.920224][T25238] name failslab, interval 1, probability 0, space 0, times 0 [ 590.920265][T25238] CPU: 0 UID: 0 PID: 25238 Comm: syz.2.2576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.920290][T25238] Tainted: [L]=SOFTLOCKUP [ 590.920297][T25238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.920307][T25238] Call Trace: [ 590.920315][T25238] [ 590.920324][T25238] dump_stack_lvl+0xe8/0x150 [ 590.920351][T25238] should_fail_ex+0x46b/0x600 [ 590.920381][T25238] should_failslab+0xa8/0x100 [ 590.920403][T25238] __kmalloc_noprof+0xdf/0x7b0 [ 590.920421][T25238] ? tomoyo_encode+0x28b/0x550 [ 590.920445][T25238] tomoyo_encode+0x28b/0x550 [ 590.920469][T25238] tomoyo_realpath_from_path+0x58d/0x5d0 [ 590.920490][T25238] ? tomoyo_domain+0xd7/0x130 [ 590.920513][T25238] ? tomoyo_path_number_perm+0x219/0x630 [ 590.920537][T25238] tomoyo_path_number_perm+0x246/0x630 [ 590.920563][T25238] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 590.920587][T25238] ? __lock_acquire+0x6b5/0x2d10 [ 590.920610][T25238] ? do_raw_spin_lock+0x12b/0x2f0 [ 590.920653][T25238] ? __fget_files+0x2a/0x420 [ 590.920671][T25238] ? __fget_files+0x2a/0x420 [ 590.920686][T25238] ? __fget_files+0x3a6/0x420 [ 590.920701][T25238] ? __fget_files+0x2a/0x420 [ 590.920719][T25238] security_file_ioctl+0xc3/0x2a0 [ 590.920744][T25238] __se_sys_ioctl+0x47/0x170 [ 590.920766][T25238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.920786][T25238] do_syscall_64+0x15f/0x560 [ 590.920809][T25238] ? trace_irq_disable+0x3b/0x140 [ 590.920828][T25238] ? clear_bhb_loop+0x40/0x90 [ 590.920850][T25238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.920868][T25238] RIP: 0033:0x7fda6fbbce59 [ 590.920886][T25238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.920902][T25238] RSP: 002b:00007fda6de16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.920922][T25238] RAX: ffffffffffffffda RBX: 00007fda6fe35fa0 RCX: 00007fda6fbbce59 [ 590.920935][T25238] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 590.920947][T25238] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 590.920956][T25238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.920966][T25238] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 590.921003][T25238] [ 590.921082][T25238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.991629][ T5723] usb 2-1: USB disconnect, device number 6 [ 591.324772][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.555869][T25267] FAULT_INJECTION: forcing a failure. [ 591.555869][T25267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.555901][T25267] CPU: 0 UID: 0 PID: 25267 Comm: syz.2.2578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.555923][T25267] Tainted: [L]=SOFTLOCKUP [ 591.555938][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.555948][T25267] Call Trace: [ 591.555954][T25267] [ 591.555962][T25267] dump_stack_lvl+0xe8/0x150 [ 591.555987][T25267] should_fail_ex+0x46b/0x600 [ 591.556011][T25267] _copy_to_user+0x31/0xb0 [ 591.556028][T25267] simple_read_from_buffer+0xe1/0x170 [ 591.556054][T25267] proc_fail_nth_read+0x1be/0x230 [ 591.556073][T25267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.556092][T25267] ? rw_verify_area+0x2ac/0x4e0 [ 591.556107][T25267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.556123][T25267] vfs_read+0x212/0xa80 [ 591.556144][T25267] ? __pfx_vfs_read+0x10/0x10 [ 591.556160][T25267] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.556179][T25267] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.556200][T25267] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 591.556218][T25267] ? mutex_lock_nested+0x152/0x1d0 [ 591.556231][T25267] ? fdget_pos+0x252/0x320 [ 591.556251][T25267] ksys_read+0x156/0x270 [ 591.556269][T25267] ? __pfx_ksys_read+0x10/0x10 [ 591.556283][T25267] ? __pfx_tty_ioctl+0x10/0x10 [ 591.556302][T25267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.556318][T25267] do_syscall_64+0x15f/0x560 [ 591.556335][T25267] ? trace_irq_disable+0x3b/0x140 [ 591.556350][T25267] ? clear_bhb_loop+0x40/0x90 [ 591.556367][T25267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.556379][T25267] RIP: 0033:0x7fda6fb7d68e [ 591.556393][T25267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.556405][T25267] RSP: 002b:00007fda6de15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.556422][T25267] RAX: ffffffffffffffda RBX: 00007fda6de166c0 RCX: 00007fda6fb7d68e [ 591.556431][T25267] RDX: 000000000000000f RSI: 00007fda6de160a0 RDI: 0000000000000004 [ 591.556439][T25267] RBP: 00007fda6de16090 R08: 0000000000000000 R09: 0000000000000000 [ 591.556448][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.556455][T25267] R13: 00007fda6fe36038 R14: 00007fda6fe35fa0 R15: 00007ffd538607e8 [ 591.556477][T25267] [ 591.914562][T25214] [ 591.914575][T25214] ====================================================== [ 591.914584][T25214] WARNING: possible circular locking dependency detected [ 591.914601][T25214] syzkaller #0 Tainted: G L [ 591.914611][T25214] ------------------------------------------------------ [ 591.914617][T25214] syz.0.2573/25214 is trying to acquire lock: [ 591.914628][T25214] ffff8880355f14c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 591.914676][T25214] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.914676][T25214] but task is already holding lock: [ 591.914683][T25214] ffffffff8e94e518 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 591.914718][T25214] [ 591.914718][T25214] which lock already depends on the new lock. [ 591.914718][T25214] [ 591.914726][T25214] [ 591.914726][T25214] the existing dependency chain (in reverse order) is: [ 591.914733][T25214] [ 591.914733][T25214] -> #6 (major_names_lock){+.+.}-{4:4}: [ 591.914757][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.914777][T25214] blk_request_module+0x35/0x2a0 [ 591.914791][T25214] blkdev_get_no_open+0x3f/0xe0 [ 591.914810][T25214] bdev_file_open_by_dev+0xa0/0x240 [ 591.914828][T25214] swsusp_check+0x56/0x490 [ 591.914838][T25214] software_resume+0x51/0x4c0 [ 591.914851][T25214] resume_store+0x333/0x4f0 [ 591.914859][T25214] kernfs_fop_write_iter+0x3b0/0x540 [ 591.914872][T25214] vfs_write+0x629/0xba0 [ 591.914882][T25214] ksys_write+0x156/0x270 [ 591.914892][T25214] do_syscall_64+0x15f/0x560 [ 591.914904][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.914914][T25214] [ 591.914914][T25214] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 591.914935][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.914944][T25214] lock_system_sleep+0x49/0x70 [ 591.914954][T25214] resume_store+0x2ff/0x4f0 [ 591.914962][T25214] kernfs_fop_write_iter+0x3b0/0x540 [ 591.914974][T25214] vfs_write+0x629/0xba0 [ 591.914984][T25214] ksys_write+0x156/0x270 [ 591.914994][T25214] do_syscall_64+0x15f/0x560 [ 591.915013][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.915022][T25214] [ 591.915022][T25214] -> #4 (&of->mutex){+.+.}-{4:4}: [ 591.915036][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.915046][T25214] kernfs_seq_start+0x5c/0x420 [ 591.915058][T25214] seq_read_iter+0x3f8/0xe20 [ 591.915071][T25214] copy_splice_read+0x605/0xab0 [ 591.915080][T25214] splice_direct_to_actor+0x483/0xc80 [ 591.915090][T25214] do_splice_direct+0x19b/0x2a0 [ 591.915098][T25214] do_sendfile+0x547/0x7e0 [ 591.915110][T25214] __se_sys_sendfile64+0x144/0x1a0 [ 591.915122][T25214] do_syscall_64+0x15f/0x560 [ 591.915133][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.915142][T25214] [ 591.915142][T25214] -> #3 (&p->lock){+.+.}-{4:4}: [ 591.915154][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.915163][T25214] seq_read_iter+0xb8/0xe20 [ 591.915173][T25214] lo_rw_aio+0xc80/0xf00 [ 591.915184][T25214] loop_process_work+0x92a/0x11b0 [ 591.915194][T25214] process_one_work+0x98b/0x1630 [ 591.915206][T25214] worker_thread+0xb49/0x1140 [ 591.915218][T25214] kthread+0x388/0x470 [ 591.915227][T25214] ret_from_fork+0x514/0xb70 [ 591.915238][T25214] ret_from_fork_asm+0x1a/0x30 [ 591.915251][T25214] [ 591.915251][T25214] -> #2 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 591.915264][T25214] process_one_work+0x8d7/0x1630 [ 591.915276][T25214] worker_thread+0xb49/0x1140 [ 591.915288][T25214] kthread+0x388/0x470 [ 591.915297][T25214] ret_from_fork+0x514/0xb70 [ 591.915306][T25214] ret_from_fork_asm+0x1a/0x30 [ 591.915317][T25214] [ 591.915317][T25214] -> #1 ((wq_completion)loop4){+.+.}-{0:0}: [ 591.915330][T25214] touch_wq_lockdep_map+0xcb/0x180 [ 591.915338][T25214] __flush_workqueue+0x14b/0x14f0 [ 591.915346][T25214] drain_workqueue+0xd3/0x390 [ 591.915354][T25214] lo_release+0x287/0x8f0 [ 591.915364][T25214] bdev_release+0x541/0x660 [ 591.915376][T25214] blkdev_release+0x15/0x20 [ 591.915388][T25214] __fput+0x461/0xa70 [ 591.915395][T25214] fput_close_sync+0x11f/0x240 [ 591.915403][T25214] __x64_sys_close+0x7e/0x110 [ 591.915411][T25214] do_syscall_64+0x15f/0x560 [ 591.915423][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.915432][T25214] [ 591.915432][T25214] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 591.915444][T25214] __lock_acquire+0x15a5/0x2d10 [ 591.915454][T25214] lock_acquire+0x106/0x350 [ 591.915464][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.915473][T25214] bdev_open+0xe0/0xcc0 [ 591.915483][T25214] bdev_file_open_by_dev+0x1be/0x240 [ 591.915495][T25214] disk_scan_partitions+0x1c1/0x2c0 [ 591.915503][T25214] add_disk_fwnode+0x321/0x480 [ 591.915511][T25214] brd_alloc+0x5c9/0x7d0 [ 591.915520][T25214] blk_request_module+0x27d/0x2a0 [ 591.915528][T25214] blkdev_get_no_open+0x3f/0xe0 [ 591.915539][T25214] bdev_file_open_by_dev+0xa0/0x240 [ 591.915551][T25214] swsusp_check+0x56/0x490 [ 591.915560][T25214] software_resume+0x51/0x4c0 [ 591.915573][T25214] resume_store+0x333/0x4f0 [ 591.915580][T25214] kernfs_fop_write_iter+0x3b0/0x540 [ 591.915592][T25214] vfs_write+0x629/0xba0 [ 591.915601][T25214] ksys_write+0x156/0x270 [ 591.915610][T25214] do_syscall_64+0x15f/0x560 [ 591.915621][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.915630][T25214] [ 591.915630][T25214] other info that might help us debug this: [ 591.915630][T25214] [ 591.915633][T25214] Chain exists of: [ 591.915633][T25214] &disk->open_mutex --> system_transition_mutex --> major_names_lock [ 591.915633][T25214] [ 591.915649][T25214] Possible unsafe locking scenario: [ 591.915649][T25214] [ 591.915652][T25214] CPU0 CPU1 [ 591.915655][T25214] ---- ---- [ 591.915658][T25214] lock(major_names_lock); [ 591.915665][T25214] lock(system_transition_mutex); [ 591.915673][T25214] lock(major_names_lock); [ 591.915682][T25214] lock(&disk->open_mutex); [ 591.915688][T25214] [ 591.915688][T25214] *** DEADLOCK *** [ 591.915688][T25214] [ 591.915691][T25214] 6 locks held by syz.0.2573/25214: [ 591.915697][T25214] #0: ffff88803f419528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 591.915720][T25214] #1: ffff888034bd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 591.915744][T25214] #2: ffff8880370d7078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 591.915769][T25214] #3: ffff88801e29d698 (kn->active#84){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 591.915796][T25214] #4: ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 591.915822][T25214] #5: ffffffff8e94e518 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 591.915843][T25214] [ 591.915843][T25214] stack backtrace: [ 591.915852][T25214] CPU: 1 UID: 0 PID: 25214 Comm: syz.0.2573 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.915866][T25214] Tainted: [L]=SOFTLOCKUP [ 591.915870][T25214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.915877][T25214] Call Trace: [ 591.915882][T25214] [ 591.915888][T25214] dump_stack_lvl+0xe8/0x150 [ 591.915901][T25214] print_circular_bug+0x2e1/0x300 [ 591.915915][T25214] check_noncircular+0x12e/0x150 [ 591.915936][T25214] __lock_acquire+0x15a5/0x2d10 [ 591.915952][T25214] ? bdev_open+0xe0/0xcc0 [ 591.915964][T25214] lock_acquire+0x106/0x350 [ 591.915975][T25214] ? bdev_open+0xe0/0xcc0 [ 591.915988][T25214] ? bdev_open+0xe0/0xcc0 [ 591.916001][T25214] ? bdev_open+0xe0/0xcc0 [ 591.916013][T25214] mutex_lock_nested+0x5a/0x1d0 [ 591.916023][T25214] ? bdev_open+0xe0/0xcc0 [ 591.916036][T25214] bdev_open+0xe0/0xcc0 [ 591.916052][T25214] bdev_file_open_by_dev+0x1be/0x240 [ 591.916071][T25214] disk_scan_partitions+0x1c1/0x2c0 [ 591.916088][T25214] add_disk_fwnode+0x321/0x480 [ 591.916104][T25214] brd_alloc+0x5c9/0x7d0 [ 591.916116][T25214] ? __pfx_brd_alloc+0x10/0x10 [ 591.916130][T25214] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.916143][T25214] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.916155][T25214] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 591.916168][T25214] ? mutex_lock_nested+0x152/0x1d0 [ 591.916177][T25214] ? blk_request_module+0x35/0x2a0 [ 591.916187][T25214] ? __pfx_brd_probe+0x10/0x10 [ 591.916197][T25214] blk_request_module+0x27d/0x2a0 [ 591.916208][T25214] blkdev_get_no_open+0x3f/0xe0 [ 591.916220][T25214] bdev_file_open_by_dev+0xa0/0x240 [ 591.916233][T25214] swsusp_check+0x56/0x490 [ 591.916244][T25214] software_resume+0x51/0x4c0 [ 591.916258][T25214] resume_store+0x333/0x4f0 [ 591.916266][T25214] ? sysfs_file_kobj+0x1a/0x230 [ 591.916280][T25214] ? __pfx_resume_store+0x10/0x10 [ 591.916289][T25214] ? sysfs_file_kobj+0x1a/0x230 [ 591.916303][T25214] ? sysfs_file_kobj+0x1e4/0x230 [ 591.916316][T25214] ? sysfs_kf_write+0x166/0x260 [ 591.916328][T25214] ? __pfx_sysfs_kf_write+0x10/0x10 [ 591.916343][T25214] kernfs_fop_write_iter+0x3b0/0x540 [ 591.916365][T25214] vfs_write+0x629/0xba0 [ 591.916384][T25214] ? __pfx_vfs_write+0x10/0x10 [ 591.916402][T25214] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.916421][T25214] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.916442][T25214] ? mutex_lock_nested+0x152/0x1d0 [ 591.916453][T25214] ? fdget_pos+0x252/0x320 [ 591.916463][T25214] ksys_write+0x156/0x270 [ 591.916475][T25214] ? __pfx_ksys_write+0x10/0x10 [ 591.916487][T25214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.916497][T25214] do_syscall_64+0x15f/0x560 [ 591.916510][T25214] ? trace_irq_disable+0x3b/0x140 [ 591.916520][T25214] ? clear_bhb_loop+0x40/0x90 [ 591.916532][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.916542][T25214] RIP: 0033:0x7f55b2b6ce59 [ 591.916553][T25214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.916562][T25214] RSP: 002b:00007f55b0da5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.916573][T25214] RAX: ffffffffffffffda RBX: 00007f55b2de6090 RCX: 00007f55b2b6ce59 [ 591.916581][T25214] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 591.916587][T25214] RBP: 00007f55b2c02d6f R08: 0000000000000000 R09: 0000000000000000 [ 591.916594][T25214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.916600][T25214] R13: 00007f55b2de6128 R14: 00007f55b2de6090 R15: 00007fff0942cb58 [ 591.916611][T25214] [ 591.917866][T25214] block device autoloading is deprecated and will be removed. [ 591.917971][T25214] PM: Image not found (code -22) [ 592.225863][ T4953] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 592.280080][T24325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 592.386604][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.421112][ T4953] usb 3-1: Using ep0 maxpacket: 16 [ 592.423107][ T4953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 592.427089][ T4953] usb 3-1: string descriptor 0 read error: -22 [ 592.427178][ T4953] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 592.427200][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.440192][ T4953] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 592.839596][ T4953] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 592.986476][ T4953] usb 3-1: USB disconnect, device number 51 [ 595.183106][ T1170] bridge_slave_1: left allmulticast mode [ 595.183133][ T1170] bridge_slave_1: left promiscuous mode [ 595.183308][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.335085][ T1170] bridge_slave_0: left allmulticast mode [ 595.335107][ T1170] bridge_slave_0: left promiscuous mode [ 595.335228][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.725149][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.811697][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.877089][ T1170] bond0 (unregistering): Released all slaves [ 595.899195][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 596.133879][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 596.385428][ T1170] hsr_slave_0: left promiscuous mode [ 596.428626][ T1170] hsr_slave_1: left promiscuous mode [ 596.429117][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.472619][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.776125][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 596.797381][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 596.864386][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 597.114590][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 597.891948][ T1170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.152479][ T1170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.379575][ T1170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.618048][ T1170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.051468][ T1170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.094778][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 599.354741][ T1170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.397958][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 599.658371][ T1170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.701603][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 599.961228][ T1170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.004481][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 600.534155][ T1170] bridge_slave_1: left allmulticast mode [ 600.534174][ T1170] bridge_slave_1: left promiscuous mode [ 600.534305][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.642792][ T1170] bridge_slave_0: left allmulticast mode [ 600.642818][ T1170] bridge_slave_0: left promiscuous mode [ 600.643028][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.173581][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.260309][ T1170] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 601.282513][ T1170] bond0 (unregistering): Released all slaves [ 601.682495][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.769764][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.791573][ T1170] bond0 (unregistering): Released all slaves [ 601.835268][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9