last executing test programs: 1m42.792391871s ago: executing program 0 (id=3165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) 1m42.539901588s ago: executing program 0 (id=3167): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 1m42.375872219s ago: executing program 0 (id=3169): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='fd\x00') lseek(r0, 0x6, 0x0) getdents(r0, &(0x7f0000000680)=""/195, 0xc3) 1m42.213828455s ago: executing program 0 (id=3171): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x1d000, 0x0) pivot_root(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') pivot_root(&(0x7f0000000d00)='./file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m41.984887554s ago: executing program 0 (id=3173): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x4000880) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xb0) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1m41.548468918s ago: executing program 0 (id=3176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000285000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000090200e1490000320f01dd660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a9a67dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000900)={0x1, 0x0, [{0x1, 0x80, 0x6, 0xc, 0x4, 0xeffffffc, 0xfffffff2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m40.874991708s ago: executing program 32 (id=3176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000285000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000090200e1490000320f01dd660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a9a67dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000900)={0x1, 0x0, [{0x1, 0x80, 0x6, 0xc, 0x4, 0xeffffffc, 0xfffffff2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.251310338s ago: executing program 3 (id=3221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x2, 0x0, [{0x40000100}, {0x88c, 0x0, 0xb}]}) 1m24.800833473s ago: executing program 3 (id=3225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f00000000c0)) 1m24.552132235s ago: executing program 3 (id=3227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) 1m23.961421962s ago: executing program 3 (id=3228): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) 1m23.691313855s ago: executing program 3 (id=3229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 1m21.414033561s ago: executing program 3 (id=3231): unshare(0x62020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') read$FUSE(r0, &(0x7f000001d900)={0x2020}, 0x2020) 1m6.279842256s ago: executing program 33 (id=3231): unshare(0x62020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') read$FUSE(r0, &(0x7f000001d900)={0x2020}, 0x2020) 5.528622527s ago: executing program 1 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 5.477248757s ago: executing program 2 (id=3391): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) 5.276576102s ago: executing program 1 (id=3393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 5.082787455s ago: executing program 2 (id=3394): unshare(0x60000600) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x80000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) 4.876530979s ago: executing program 1 (id=3396): mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x3000007, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.56475811s ago: executing program 1 (id=3397): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 4.222555128s ago: executing program 1 (id=3398): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000002680)={0xc, 0x2, 0x9, 0xd, 0xfffffffffff7ffff, 0x0, 0x49e, 0x7}, 0x0, 0x0, 0x0, 0x0) 2.28118727s ago: executing program 1 (id=3400): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1,0x', 0x4) 2.16056618s ago: executing program 4 (id=3177): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000740)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.7226303s ago: executing program 4 (id=3402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x1c, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0xfffd, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3}, {}, 0x0, 0x0, 0x2, 0x1, 0x4, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0xffff}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004040}, 0x8180) 1.624461198s ago: executing program 5 (id=3403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0x2, 0xfffffffffffffff4, 0xbb6, 0x3, 0x3}}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000480)={0x1, 0x1}) 1.396406138s ago: executing program 4 (id=3404): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000497000/0x2000)=nil, 0x2000, 0xa) 1.11100654s ago: executing program 2 (id=3405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000900)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000009c0)=@vmx={0x0, 0x0, 0x2080, {0xe000, 0x4000, {0x3}, 0x0, 0x6}, {"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", "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"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.013977919s ago: executing program 5 (id=3406): r0 = syz_open_dev$loop(&(0x7f00000008c0), 0x8a86, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000900)) 776.468119ms ago: executing program 5 (id=3407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x4, {{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x20, 0x87}, {0xfffffffffff7fff7, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 623.103876ms ago: executing program 5 (id=3408): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') setns(r0, 0x0) 561.97312ms ago: executing program 2 (id=3409): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mkdir(0x0, 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1389044, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) 416.481271ms ago: executing program 5 (id=3410): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000300)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/sync_on_suspend', 0x1a1081, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000400)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 383.881073ms ago: executing program 2 (id=3411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000600)="f00fc74d48f2ae666446c14cb56a000f20d835080000000f22d8b9800000c00f3235000100000f30c4a225dd14ac670f01c9c744240000000000c744240200000000c7442406000000000f011c24c443f917f3d8c744240000000000c744240201000000c7442406000000000f011424", 0x70}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 195.131418ms ago: executing program 4 (id=3412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 96.536021ms ago: executing program 5 (id=3413): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4031280000002823a94c3f2ece22585b399b27c3a1e0d8313d678c855f427f8abe9b9682a86f7d408365fc15b644574d13459dd0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 80.281435ms ago: executing program 2 (id=3414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x20080, 0x162) getdents64(r0, &(0x7f0000000480)=""/109, 0x6d) 0s ago: executing program 4 (id=3415): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) fstatfs(r0, 0x0) kernel console output (not intermixed with test programs): syz.1.2397'. [ 615.497201][T12513] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2397'. [ 615.728420][T12522] netlink: 'syz.1.2399': attribute type 10 has an invalid length. [ 615.786367][T12522] team0: Port device veth1_to_hsr added [ 616.157288][T12535] netlink: 'syz.2.2402': attribute type 41 has an invalid length. [ 616.218325][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.223105][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.223242][T12438] bridge_slave_0: entered allmulticast mode [ 616.229701][T12438] bridge_slave_0: entered promiscuous mode [ 616.266137][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.266278][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.266397][T12438] bridge_slave_1: entered allmulticast mode [ 616.294918][T12438] bridge_slave_1: entered promiscuous mode [ 616.423087][T12438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.444764][T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.538691][T12438] team0: Port device team_slave_0 added [ 616.560712][ T4927] Bluetooth: hci2: command tx timeout [ 616.569207][T12438] team0: Port device team_slave_1 added [ 616.669999][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.670014][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.670033][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.748356][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.748371][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.748392][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.981527][T12438] hsr_slave_0: entered promiscuous mode [ 616.982294][T12438] hsr_slave_1: entered promiscuous mode [ 616.986505][T12438] debugfs: 'hsr0' already exists in 'hsr' [ 616.986521][T12438] Cannot create hsr debugfs directory [ 617.082063][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'. [ 617.085482][T12553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2411'. [ 617.781185][T12438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.079146][T12438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.229243][T12438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.435323][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2420'. [ 618.450729][T12574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2420'. [ 618.451942][T12438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.643469][ T4927] Bluetooth: hci2: command tx timeout [ 622.691976][T12438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 622.714255][T12438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.715822][T12438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 622.741657][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2431'. [ 622.741970][T12438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.744038][T12438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 622.782809][T12438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.784935][T12438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 622.829625][T12438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.139816][T12438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.189928][T12438] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.218398][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.218474][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.251766][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.251849][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.123531][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.230480][T12438] veth0_vlan: entered promiscuous mode [ 624.248199][T12438] veth1_vlan: entered promiscuous mode [ 624.297563][T12438] veth0_macvtap: entered promiscuous mode [ 624.312215][T12438] veth1_macvtap: entered promiscuous mode [ 624.348625][T12438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.368795][T12438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.461813][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.461849][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.461875][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.461901][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.494244][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.494286][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.744804][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.744822][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.860218][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.860236][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.049031][T12635] netlink: 'syz.0.2368': attribute type 29 has an invalid length. [ 625.150697][ T5716] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 625.300954][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 625.301621][ T5716] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 625.302471][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.302487][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.304361][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.304454][ T5716] usb 3-1: Product: syz [ 625.304465][ T5716] usb 3-1: Manufacturer: syz [ 625.304476][ T5716] usb 3-1: SerialNumber: syz [ 625.402378][ T5716] usb 3-1: 0:2 : does not exist [ 625.594608][ T5716] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 625.755860][ T5716] usb 3-1: USB disconnect, device number 21 [ 625.916414][T12639] udevd[12639]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 625.992999][T12143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.999885][T12143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.017927][T12143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.037506][T12143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.052635][T12143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.305810][T12640] wg0 speed is unknown, defaulting to 1000 [ 628.161084][ T4927] Bluetooth: hci1: command tx timeout [ 628.517067][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.518737][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.518847][T12640] bridge_slave_0: entered allmulticast mode [ 628.545220][T12640] bridge_slave_0: entered promiscuous mode [ 628.565726][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.565805][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.565935][T12640] bridge_slave_1: entered allmulticast mode [ 628.568919][T12640] bridge_slave_1: entered promiscuous mode [ 628.686144][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.708461][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.788766][T12640] team0: Port device team_slave_0 added [ 628.807398][T12640] team0: Port device team_slave_1 added [ 628.886060][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.886076][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.886096][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.891349][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.891363][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.891384][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.152125][T12640] hsr_slave_0: entered promiscuous mode [ 629.167700][T12640] hsr_slave_1: entered promiscuous mode [ 629.168225][T12640] debugfs: 'hsr0' already exists in 'hsr' [ 629.168241][T12640] Cannot create hsr debugfs directory [ 629.839712][T12640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.039912][T12732] usb usb8: usbfs: process 12732 (syz.2.2473) did not claim interface 0 before use [ 630.214965][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 630.218964][T12640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.241489][ T4927] Bluetooth: hci1: command tx timeout [ 630.266703][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2475'. [ 630.448492][T12640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.818489][T12640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.855255][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.855649][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.134128][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 631.134951][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2485'. [ 631.248053][T12640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.260952][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.264898][T12640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.268956][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.269893][T12640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.305188][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.307780][T12640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 631.327024][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.533798][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.592385][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.635810][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.635885][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.675337][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.675412][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.037861][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2493'. [ 632.323162][T12143] Bluetooth: hci1: command tx timeout [ 632.775431][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.918270][T12640] veth0_vlan: entered promiscuous mode [ 632.948881][T12640] veth1_vlan: entered promiscuous mode [ 632.966157][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2501'. [ 633.060355][T12640] veth0_macvtap: entered promiscuous mode [ 633.088566][T12640] veth1_macvtap: entered promiscuous mode [ 633.141792][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.171167][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.213136][ T1016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.213182][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.213210][ T1016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.331916][ T1016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.550447][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.550464][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.718205][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.718223][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.104376][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 634.184402][ T33] kauditd_printk_skb: 73 callbacks suppressed [ 634.184418][ T33] audit: type=1326 audit(1791704324.167:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.184805][ T33] audit: type=1326 audit(1791704324.167:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.253627][ T33] audit: type=1326 audit(1791704324.237:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.253667][ T33] audit: type=1326 audit(1791704324.237:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.314542][ T33] audit: type=1326 audit(1791704324.297:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.314584][ T33] audit: type=1326 audit(1791704324.297:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f487299df42 code=0x7ffc0000 [ 634.314617][ T33] audit: type=1326 audit(1791704324.297:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f487299dfd7 code=0x7ffc0000 [ 634.315211][ T33] audit: type=1326 audit(1791704324.297:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.369963][ T33] audit: type=1326 audit(1791704324.297:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.370003][ T33] audit: type=1326 audit(1791704324.357:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.2513" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487299e1d9 code=0x7ffc0000 [ 634.401505][T12143] Bluetooth: hci1: command tx timeout [ 638.451251][ T5619] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 638.601056][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 638.601620][ T5619] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 638.602525][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.602547][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1105, setting to 1024 [ 638.602577][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.640405][ T5619] usb 2-1: config 0 descriptor?? [ 638.674615][T12856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 638.677734][ T5619] hub 2-1:0.0: USB hub found [ 638.874230][T12871] kvm: pic: non byte write [ 638.887920][ T5619] hub 2-1:0.0: 1 port detected [ 639.612438][ T10] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 639.665365][ T5619] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 639.762709][ T10] usb 3-1: New USB device found: idVendor=0c70, idProduct=f0b6, bcdDevice=0.00 [ 639.763822][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 639.763846][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.763874][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.768214][ T10] usb 3-1: config 0 descriptor?? [ 640.212572][ T10] aquacomputer_d5next 0003:0C70:F0B6.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 640.493559][T12888] futex_wake_op: syz.1.2527 tries to shift op by 144; fix this program [ 640.520185][ T2250] usb 3-1: USB disconnect, device number 22 [ 640.580432][ T5716] usb 2-1: USB disconnect, device number 26 [ 641.479678][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.496310][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.498035][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.498742][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.500506][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.738156][ T162] Bluetooth: hci5: Frame reassembly failed (-84) [ 642.004138][T11162] bridge0: port 3(syz_tun) entered disabled state [ 642.102802][T11162] syz_tun (unregistering): left allmulticast mode [ 642.102823][T11162] syz_tun (unregistering): left promiscuous mode [ 642.103035][T11162] bridge0: port 3(syz_tun) entered disabled state [ 642.717373][T12913] wg0 speed is unknown, defaulting to 1000 [ 643.601141][ T4927] Bluetooth: hci0: command tx timeout [ 643.754498][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.754614][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.754720][T12913] bridge_slave_0: entered allmulticast mode [ 643.757522][T12913] bridge_slave_0: entered promiscuous mode [ 643.765750][ T4927] Bluetooth: hci5: command 0x1003 tx timeout [ 643.765817][T12143] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 643.815965][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.817374][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.817544][T12913] bridge_slave_1: entered allmulticast mode [ 643.842829][T12913] bridge_slave_1: entered promiscuous mode [ 643.952398][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.974134][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.075713][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.117540][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.130140][T12913] team0: Port device team_slave_0 added [ 644.149464][T12913] team0: Port device team_slave_1 added [ 644.222208][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.222224][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.222244][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.226202][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.226215][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.226235][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.476024][T12913] hsr_slave_0: entered promiscuous mode [ 644.480053][T12913] hsr_slave_1: entered promiscuous mode [ 644.497527][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 644.497546][T12913] Cannot create hsr debugfs directory [ 645.122743][T12913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.257130][T12967] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 645.429790][T12913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.513202][T12913] .: (slave netdevsim1): Releasing backup interface [ 645.516001][T12913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.636100][T12913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.684129][T12143] Bluetooth: hci0: command tx timeout [ 645.931395][T12913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.934331][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.935220][T12913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.937616][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.938444][T12913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.976797][ T2250] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 646.002992][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.005484][T12913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 646.028333][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.081175][ T5619] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 646.131658][ T2250] usb 2-1: New USB device found: idVendor=0c70, idProduct=f0b6, bcdDevice=0.00 [ 646.132665][ T2250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.132688][ T2250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.132714][ T2250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.134801][ T2250] usb 2-1: config 0 descriptor?? [ 646.250005][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 646.251941][ T5619] usb 3-1: not running at top speed; connect to a high speed hub [ 646.251969][ T5619] usb 3-1: New USB device found: idVendor=041e, idProduct=3042, bcdDevice=0.40 [ 646.278362][ T5619] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 646.297170][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.297189][ T5619] usb 3-1: Product: syz [ 646.297200][ T5619] usb 3-1: Manufacturer: syz [ 646.297210][ T5619] usb 3-1: SerialNumber: syz [ 646.409644][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.455301][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.474737][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.474820][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.504643][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.504727][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.578212][ T5619] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 646.619677][ T5619] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 646.631064][ T2250] aquacomputer_d5next 0003:0C70:F0B6.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 646.839419][ T10] usb 2-1: USB disconnect, device number 27 [ 646.917260][T12993] fido_id[12993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 647.062747][ T5619] usb 3-1: USB disconnect, device number 23 [ 647.307851][T12858] udevd[12858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 647.748069][T13015] FAULT_INJECTION: forcing a failure. [ 647.748069][T13015] name failslab, interval 1, probability 0, space 0, times 9 [ 647.748097][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.0.2567 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 647.748121][T13015] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 647.748128][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.748139][T13015] Call Trace: [ 647.748145][T13015] [ 647.748151][T13015] dump_stack_lvl+0xe8/0x150 [ 647.748174][T13015] should_fail_ex+0x3eb/0x540 [ 647.748194][T13015] should_failslab+0xa8/0x100 [ 647.748211][T13015] __kmalloc_cache_noprof+0x9e/0x600 [ 647.748228][T13015] ? genl_start+0x1c9/0x6d0 [ 647.748242][T13015] ? genl_start+0x1c9/0x6d0 [ 647.748262][T13015] genl_start+0x1c9/0x6d0 [ 647.748282][T13015] __netlink_dump_start+0x442/0x7b0 [ 647.748303][T13015] genl_family_rcv_msg_dumpit+0x213/0x310 [ 647.748322][T13015] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 647.748338][T13015] ? genl_get_cmd+0x4d6/0x960 [ 647.748358][T13015] ? __pfx_genl_start+0x10/0x10 [ 647.748372][T13015] ? __pfx_genl_dumpit+0x10/0x10 [ 647.748385][T13015] ? __pfx_genl_done+0x10/0x10 [ 647.748410][T13015] genl_rcv_msg+0x5e1/0x7a0 [ 647.748430][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.748444][T13015] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 647.748458][T13015] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 647.748483][T13015] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 647.748501][T13015] ? __asan_memcpy+0x40/0x70 [ 647.748522][T13015] netlink_rcv_skb+0x226/0x4a0 [ 647.748538][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.748555][T13015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.748583][T13015] ? down_read+0x2b9/0x320 [ 647.748602][T13015] genl_rcv+0x28/0x40 [ 647.748616][T13015] netlink_unicast+0x7bd/0x940 [ 647.748639][T13015] netlink_sendmsg+0x7c3/0xae0 [ 647.748659][T13015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.748681][T13015] ? apparmor_socket_sendmsg+0x98/0x360 [ 647.748699][T13015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.748713][T13015] sock_sendmsg_nosec+0x14e/0x190 [ 647.748731][T13015] ____sys_sendmsg+0x54e/0x850 [ 647.748751][T13015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.748774][T13015] ? import_iovec+0x73/0xa0 [ 647.748792][T13015] ___sys_sendmsg+0x2a5/0x360 [ 647.748812][T13015] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.748830][T13015] ? futex_wait+0x2a2/0x390 [ 647.748878][T13015] __x64_sys_sendmsg+0x1b1/0x290 [ 647.748899][T13015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.748931][T13015] do_syscall_64+0x166/0x520 [ 647.748945][T13015] ? trace_irq_disable+0x3b/0x140 [ 647.748959][T13015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.748975][T13015] ? clear_bhb_loop+0x70/0xc0 [ 647.748992][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.749008][T13015] RIP: 0033:0x7f0d63f9e1d9 [ 647.749022][T13015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.749036][T13015] RSP: 002b:00007f0d64de5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.749053][T13015] RAX: ffffffffffffffda RBX: 00007f0d64225fa0 RCX: 00007f0d63f9e1d9 [ 647.749065][T13015] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000008 [ 647.749075][T13015] RBP: 00007f0d64035888 R08: 0000000000000000 R09: 0000000000000000 [ 647.749085][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.749094][T13015] R13: 00007f0d64226038 R14: 00007f0d64225fa0 R15: 00007ffc2accdd38 [ 647.749119][T13015] [ 647.766427][T12143] Bluetooth: hci0: command tx timeout [ 647.824039][ T5619] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 648.174693][ T5619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 648.178079][ T5619] usb 2-1: not running at top speed; connect to a high speed hub [ 648.178105][ T5619] usb 2-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40 [ 648.212521][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.212542][ T5619] usb 2-1: Product: syz [ 648.212553][ T5619] usb 2-1: Manufacturer: syz [ 648.212564][ T5619] usb 2-1: SerialNumber: syz [ 648.525250][ T5619] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 648.594621][ T5619] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 648.706710][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.840492][T13030] tipc: Started in network mode [ 648.840519][T13030] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 648.841558][T13030] tipc: New replicast peer: 3eaa:a600:0000:0000:0000:0000:0000:00bb [ 648.871620][T13030] tipc: Enabled bearer , priority 10 [ 648.898198][T12913] veth0_vlan: entered promiscuous mode [ 648.936331][T12913] veth1_vlan: entered promiscuous mode [ 649.072700][T12913] veth0_macvtap: entered promiscuous mode [ 649.099786][T12913] veth1_macvtap: entered promiscuous mode [ 649.145657][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 649.146511][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2575'. [ 649.178782][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.193535][ T5619] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 649.216520][ T5619] usb 2-1: USB disconnect, device number 28 [ 649.242695][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.262118][ T5716] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 649.431109][ T162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.443893][ T5997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.445068][ T6884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.446930][ T162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.517315][ T5716] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 649.518620][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.518643][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.518660][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.518688][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.535223][T13037] wg0 speed is unknown, defaulting to 1000 [ 650.372899][T12143] Bluetooth: hci0: command tx timeout [ 650.444558][ T5716] usb 3-1: config 0 descriptor?? [ 650.532700][T12891] udevd[12891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 650.601782][ T2250] tipc: Node number set to 1 [ 651.111002][ T5716] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x4 [ 651.309234][ T5716] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 651.370662][ T5716] usb 3-1: USB disconnect, device number 24 [ 651.389228][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.389246][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.614390][T13046] fido_id[13046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 651.676386][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.676403][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.885883][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.886232][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.955442][T13056] FAULT_INJECTION: forcing a failure. [ 651.955442][T13056] name failslab, interval 1, probability 0, space 0, times 8 [ 651.955469][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.2.2583 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 651.955492][T13056] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 651.955499][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.955509][T13056] Call Trace: [ 651.955515][T13056] [ 651.955522][T13056] dump_stack_lvl+0xe8/0x150 [ 651.955543][T13056] should_fail_ex+0x3eb/0x540 [ 651.955563][T13056] should_failslab+0xa8/0x100 [ 651.955580][T13056] __kmalloc_cache_noprof+0x9e/0x600 [ 651.955596][T13056] ? __pfx___mutex_lock+0x10/0x10 [ 651.955611][T13056] ? xdp_umem_create+0x58/0x8b0 [ 651.955626][T13056] ? xdp_umem_create+0x58/0x8b0 [ 651.955646][T13056] xdp_umem_create+0x58/0x8b0 [ 651.955661][T13056] ? __might_fault+0xaf/0x130 [ 651.955681][T13056] xsk_setsockopt+0x82f/0x960 [ 651.955699][T13056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.955719][T13056] ? aa_sock_opt_perm+0x142/0x1e0 [ 651.955738][T13056] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 651.955753][T13056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.955769][T13056] do_sock_setsockopt+0x17c/0x1b0 [ 651.955790][T13056] __x64_sys_setsockopt+0x13d/0x1b0 [ 651.955810][T13056] do_syscall_64+0x166/0x520 [ 651.955825][T13056] ? trace_irq_disable+0x3b/0x140 [ 651.955839][T13056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.955866][T13056] ? clear_bhb_loop+0x70/0xc0 [ 651.955884][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.955900][T13056] RIP: 0033:0x7f5c6c39e1d9 [ 651.955914][T13056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.955928][T13056] RSP: 002b:00007f5c6d1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 651.955952][T13056] RAX: ffffffffffffffda RBX: 00007f5c6c625fa0 RCX: 00007f5c6c39e1d9 [ 651.955965][T13056] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 651.955974][T13056] RBP: 00007f5c6c435888 R08: 0000000000000020 R09: 0000000000000000 [ 651.955985][T13056] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000000 [ 651.955995][T13056] R13: 00007f5c6c626038 R14: 00007f5c6c625fa0 R15: 00007fff3cd196e8 [ 651.956020][T13056] [ 652.337087][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 652.338373][T13061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2584'. [ 652.392807][T13058] wg0 speed is unknown, defaulting to 1000 [ 653.341379][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 653.342602][T13088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 653.972863][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.973214][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.000899][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 654.024673][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.024987][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.151508][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 654.152517][ T9] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 654.153392][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.157864][ T9] usb 3-1: config 0 descriptor?? [ 654.199163][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 654.352887][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 654.353499][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2605'. [ 654.393541][ T9] usb 3-1: Detected FT232B [ 654.604308][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 654.604742][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 654.608679][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 654.649547][ T9] usb 3-1: USB disconnect, device number 25 [ 654.701117][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 654.703990][ T9] ftdi_sio 3-1:0.0: device disconnected [ 655.825602][T13122] FAULT_INJECTION: forcing a failure. [ 655.825602][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.825630][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.1.2611 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 655.825654][T13122] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 655.825661][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 655.825671][T13122] Call Trace: [ 655.825677][T13122] [ 655.825684][T13122] dump_stack_lvl+0xe8/0x150 [ 655.825706][T13122] should_fail_ex+0x3eb/0x540 [ 655.825726][T13122] _copy_from_user+0x2d/0xb0 [ 655.825743][T13122] xsk_setsockopt+0x42b/0x960 [ 655.825762][T13122] ? __pfx_xsk_setsockopt+0x10/0x10 [ 655.825782][T13122] ? aa_sock_opt_perm+0x142/0x1e0 [ 655.825800][T13122] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 655.825815][T13122] ? __pfx_xsk_setsockopt+0x10/0x10 [ 655.825832][T13122] do_sock_setsockopt+0x17c/0x1b0 [ 655.825852][T13122] __x64_sys_setsockopt+0x13d/0x1b0 [ 655.825872][T13122] do_syscall_64+0x166/0x520 [ 655.825886][T13122] ? trace_irq_disable+0x3b/0x140 [ 655.825900][T13122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.825921][T13122] ? clear_bhb_loop+0x70/0xc0 [ 655.825938][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.825954][T13122] RIP: 0033:0x7f487299e1d9 [ 655.825969][T13122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.825982][T13122] RSP: 002b:00007f48738cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 655.826000][T13122] RAX: ffffffffffffffda RBX: 00007f4872c25fa0 RCX: 00007f487299e1d9 [ 655.826012][T13122] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 655.826021][T13122] RBP: 00007f4872a35888 R08: 0000000000000020 R09: 0000000000000000 [ 655.826031][T13122] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000000 [ 655.826041][T13122] R13: 00007f4872c26038 R14: 00007f4872c25fa0 R15: 00007ffe4f1a0928 [ 655.826065][T13122] [ 657.478598][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 657.500379][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 657.938473][ T5619] hid-generic 0005:0008:0009.0008: item fetching failed at offset 0/1 [ 657.940158][ T5619] hid-generic 0005:0008:0009.0008: probe with driver hid-generic failed with error -22 [ 658.141560][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 658.241241][T13149] FAULT_INJECTION: forcing a failure. [ 658.241241][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.241268][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.3.2623 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 658.241292][T13149] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 658.241298][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 658.241308][T13149] Call Trace: [ 658.241315][T13149] [ 658.241321][T13149] dump_stack_lvl+0xe8/0x150 [ 658.241343][T13149] should_fail_ex+0x3eb/0x540 [ 658.241363][T13149] _copy_from_user+0x2d/0xb0 [ 658.241380][T13149] xsk_setsockopt+0x42b/0x960 [ 658.241398][T13149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 658.241418][T13149] ? aa_sock_opt_perm+0x142/0x1e0 [ 658.241436][T13149] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 658.241451][T13149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 658.241467][T13149] do_sock_setsockopt+0x17c/0x1b0 [ 658.241488][T13149] __x64_sys_setsockopt+0x13d/0x1b0 [ 658.241508][T13149] do_syscall_64+0x166/0x520 [ 658.241522][T13149] ? trace_irq_disable+0x3b/0x140 [ 658.241536][T13149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.241552][T13149] ? clear_bhb_loop+0x70/0xc0 [ 658.241569][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.241585][T13149] RIP: 0033:0x7f824c99e1d9 [ 658.241599][T13149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.241613][T13149] RSP: 002b:00007f824d819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 658.241630][T13149] RAX: ffffffffffffffda RBX: 00007f824cc25fa0 RCX: 00007f824c99e1d9 [ 658.241642][T13149] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 658.241652][T13149] RBP: 00007f824ca35888 R08: 0000000000000020 R09: 0000000000000000 [ 658.241662][T13149] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000000 [ 658.241672][T13149] R13: 00007f824cc26038 R14: 00007f824cc25fa0 R15: 00007ffdcc5c4248 [ 658.241696][T13149] [ 658.290757][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 658.294801][ T9] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 658.368772][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.368812][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.368830][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 658.368849][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.368874][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.533654][ T9] usb 2-1: config 0 descriptor?? [ 658.844087][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 658.864516][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2626'. [ 658.913453][T13158] tipc: Started in network mode [ 658.913479][T13158] tipc: Node identity 250500000000000003, cluster identity 4711 [ 658.943341][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2617'. [ 658.993556][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.993909][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.231782][ T9] usb 2-1: USB disconnect, device number 29 [ 659.726826][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2637'. [ 659.729380][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2637'. [ 659.772104][T13183] input: syz0 as /devices/virtual/input/input26 [ 660.715567][T13203] wg0 speed is unknown, defaulting to 1000 [ 660.845894][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2648'. [ 660.846952][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2648'. [ 661.634742][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 661.654054][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 661.879230][T13236] FAULT_INJECTION: forcing a failure. [ 661.879230][T13236] name failslab, interval 1, probability 0, space 0, times 7 [ 661.879257][T13236] CPU: 0 UID: 0 PID: 13236 Comm: syz.0.2660 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 661.879281][T13236] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 661.879287][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 661.879297][T13236] Call Trace: [ 661.879303][T13236] [ 661.879309][T13236] dump_stack_lvl+0xe8/0x150 [ 661.879331][T13236] should_fail_ex+0x3eb/0x540 [ 661.879351][T13236] should_failslab+0xa8/0x100 [ 661.879369][T13236] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 661.879388][T13236] ? __d_alloc+0x37/0x7f0 [ 661.879401][T13236] ? __d_alloc+0x37/0x7f0 [ 661.879421][T13236] __d_alloc+0x37/0x7f0 [ 661.879438][T13236] d_alloc_pseudo+0x21/0xc0 [ 661.879454][T13236] alloc_path_pseudo+0x107/0x220 [ 661.879472][T13236] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 661.879489][T13236] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.879509][T13236] alloc_file_pseudo+0xa8/0x1e0 [ 661.879538][T13236] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 661.879554][T13236] ? _raw_spin_unlock+0x28/0x50 [ 661.879575][T13236] sock_alloc_file+0xb8/0x2e0 [ 661.879590][T13236] ? __sys_socket+0x12b/0x1b0 [ 661.879608][T13236] __sys_socket+0x13f/0x1b0 [ 661.879626][T13236] __x64_sys_socket+0x7a/0x90 [ 661.879642][T13236] do_syscall_64+0x166/0x520 [ 661.879656][T13236] ? trace_irq_disable+0x3b/0x140 [ 661.879670][T13236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.879687][T13236] ? clear_bhb_loop+0x70/0xc0 [ 661.879703][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.879719][T13236] RIP: 0033:0x7f0d63f9e1d9 [ 661.879734][T13236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.879748][T13236] RSP: 002b:00007f0d64de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 661.879765][T13236] RAX: ffffffffffffffda RBX: 00007f0d64225fa0 RCX: 00007f0d63f9e1d9 [ 661.879777][T13236] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 661.879787][T13236] RBP: 00007f0d64035888 R08: 0000000000000000 R09: 0000000000000000 [ 661.879797][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.879806][T13236] R13: 00007f0d64226038 R14: 00007f0d64225fa0 R15: 00007ffc2accdd38 [ 661.879831][T13236] [ 662.234084][T13240] support for the xor transformation has been removed. [ 662.528444][T13247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.528783][T13247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.862631][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2668'. [ 662.864165][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2668'. [ 663.784742][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 663.805044][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2677'. [ 663.963414][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.963747][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.204027][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.204368][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.110692][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 665.265184][ T9] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 665.266078][ T9] usb 3-1: config 0 has no interfaces? [ 665.266993][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 665.267011][ T9] usb 3-1: SerialNumber: syz [ 665.304923][ T9] usb 3-1: config 0 descriptor?? [ 665.498625][T13333] __nla_validate_parse: 2 callbacks suppressed [ 665.498643][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2698'. [ 665.500339][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2698'. [ 665.550393][ T9] usb 3-1: USB disconnect, device number 26 [ 666.547097][ T5716] hid-generic 0000:0008:0000.000A: unknown main item tag 0x0 [ 666.547125][ T5716] hid-generic 0000:0008:0000.000A: unknown main item tag 0x0 [ 666.725109][ T5716] hid-generic 0000:0008:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 666.728431][T13349] wg0 speed is unknown, defaulting to 1000 [ 667.170933][T13369] Bluetooth: MGMT ver 1.23 [ 670.479518][T13443] FAULT_INJECTION: forcing a failure. [ 670.479518][T13443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.479545][T13443] CPU: 0 UID: 0 PID: 13443 Comm: syz.2.2743 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 670.479570][T13443] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 670.479576][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.479586][T13443] Call Trace: [ 670.479592][T13443] [ 670.479599][T13443] dump_stack_lvl+0xe8/0x150 [ 670.479622][T13443] should_fail_ex+0x3eb/0x540 [ 670.479642][T13443] strncpy_from_user+0x36/0x2c0 [ 670.479662][T13443] __se_sys_add_key+0xdb/0x420 [ 670.479680][T13443] ? __pfx___se_sys_add_key+0x10/0x10 [ 670.479702][T13443] ? __x64_sys_add_key+0x20/0xc0 [ 670.479718][T13443] do_syscall_64+0x166/0x520 [ 670.479733][T13443] ? trace_irq_disable+0x3b/0x140 [ 670.479748][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.479773][T13443] ? clear_bhb_loop+0x70/0xc0 [ 670.479791][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.479807][T13443] RIP: 0033:0x7f5c6c39e1d9 [ 670.479822][T13443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.479835][T13443] RSP: 002b:00007f5c6d1b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 670.479853][T13443] RAX: ffffffffffffffda RBX: 00007f5c6c625fa0 RCX: 00007f5c6c39e1d9 [ 670.479865][T13443] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000200000005800 [ 670.479876][T13443] RBP: 00007f5c6c435888 R08: fffffffffffffffe R09: 0000000000000000 [ 670.479887][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.479896][T13443] R13: 00007f5c6c626038 R14: 00007f5c6c625fa0 R15: 00007fff3cd196e8 [ 670.479921][T13443] [ 671.230759][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 671.382704][ T10] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 671.386647][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.386675][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.386692][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.386723][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.389446][ T10] usb 2-1: config 0 descriptor?? [ 671.804145][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804174][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804193][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804212][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804231][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804250][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804269][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804303][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804323][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.804342][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 671.927309][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 672.626005][ T5716] usb 2-1: USB disconnect, device number 30 [ 672.871436][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 673.021701][ T10] usb 4-1: New USB device found: idVendor=046d, idProduct=ca03, bcdDevice=0.00 [ 673.022579][ T10] usb 4-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 673.022603][ T10] usb 4-1: config 0 interface 0 altsetting 152 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.022623][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 673.022645][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.026934][ T10] usb 4-1: config 0 descriptor?? [ 673.114628][T13498] cgroup: noprefix used incorrectly [ 673.455558][ T10] logitech 0003:046D:CA03.000C: hidraw0: USB HID v0.81 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 673.455636][ T10] logitech 0003:046D:CA03.000C: no inputs found [ 673.477588][ T5619] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 673.622617][ T5619] usb 3-1: New USB device found: idVendor=056a, idProduct=00c6, bcdDevice=0.00 [ 673.625585][ T5619] usb 3-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.625609][ T5619] usb 3-1: config 0 interface 0 has no altsetting 0 [ 673.625633][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.675614][ T5619] usb 3-1: config 0 descriptor?? [ 673.709881][ T9] usb 4-1: USB disconnect, device number 30 [ 674.308567][ T10] usb 3-1: USB disconnect, device number 27 [ 674.365644][T13529] serial 00:03: in use; can't configure [ 674.591273][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.591638][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.387927][T13555] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 676.801288][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 676.940450][T13568] syzkaller0: entered promiscuous mode [ 676.940469][T13568] syzkaller0: entered allmulticast mode [ 676.973259][ T10] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 676.978198][ T10] usb 4-1: config index 0 descriptor too short (expected 220, got 92) [ 676.978243][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 676.978270][ T10] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 677.030283][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.030305][ T10] usb 4-1: Product: syz [ 677.030316][ T10] usb 4-1: Manufacturer: syz [ 677.030327][ T10] usb 4-1: SerialNumber: syz [ 678.103167][ T10] cdc_ncm 4-1:1.0: failed to get mac address [ 678.143594][ T10] cdc_ncm 4-1:1.0: bind() failure [ 678.154175][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 678.154711][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 678.186482][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 678.200392][ T10] usb 4-1: USB disconnect, device number 31 [ 680.718857][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'. [ 681.192962][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 681.192977][ T33] audit: type=1326 audit(1791704371.177:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.3.2812" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824c99e1d9 code=0x7fc00000 [ 681.198217][ T33] audit: type=1326 audit(1791704371.177:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.3.2812" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f824c99e1d9 code=0x7fc00000 [ 681.502482][T13613] input: syz0 as /devices/virtual/input/input27 [ 681.640026][T13589] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 681.640059][T13589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 681.640088][T13589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 681.873118][ T33] audit: type=1326 audit(1791704371.857:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.3.2812" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824c99e1d9 code=0x7fc00000 [ 682.050916][T13629] binder: Failure when writing BR_NOOP at beginning of buffer. [ 682.051066][T13629] binder: Read failure Err(EFAULT) in pid:131 [ 682.152671][ T5619] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 682.176581][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 682.302169][ T5619] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 682.303080][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.303103][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.303119][ T5619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.303149][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.306807][ T5619] usb 2-1: config 0 descriptor?? [ 682.377753][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 682.377790][ T10] usb 3-1: New USB device found: idVendor=21b4, idProduct=00a1, bcdDevice=0.40 [ 682.398648][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.398668][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 682.398699][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 682.398724][ T10] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 682.398772][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 682.398792][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 682.473077][ T10] usb 3-1: string descriptor 0 read error: -22 [ 682.473193][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.737704][ T5619] hid_parser_main: 45 callbacks suppressed [ 682.737723][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.737746][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.737766][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.738954][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.738976][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.738994][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.739023][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.739059][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.739078][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.739097][ T5619] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 682.867511][ T5619] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 682.997116][ T5619] usb 2-1: USB disconnect, device number 31 [ 683.115387][T13651] FAULT_INJECTION: forcing a failure. [ 683.115387][T13651] name failslab, interval 1, probability 0, space 0, times 6 [ 683.115414][T13651] CPU: 0 UID: 0 PID: 13651 Comm: syz.3.2830 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 683.115445][T13651] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 683.115455][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.115468][T13651] Call Trace: [ 683.115477][T13651] [ 683.115486][T13651] dump_stack_lvl+0xe8/0x150 [ 683.115514][T13651] should_fail_ex+0x3eb/0x540 [ 683.115534][T13651] should_failslab+0xa8/0x100 [ 683.115549][T13651] ? prepare_creds+0x30/0x820 [ 683.115565][T13651] kmem_cache_alloc_noprof+0x9c/0x600 [ 683.115580][T13651] ? __se_sys_futex+0x3a8/0x450 [ 683.115594][T13651] ? make_kgid+0x153/0x6a0 [ 683.115610][T13651] ? prepare_creds+0x30/0x820 [ 683.115629][T13651] prepare_creds+0x30/0x820 [ 683.115647][T13651] __sys_setregid+0xf5/0x650 [ 683.115665][T13651] do_syscall_64+0x166/0x520 [ 683.115679][T13651] ? trace_irq_disable+0x3b/0x140 [ 683.115693][T13651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.115710][T13651] ? clear_bhb_loop+0x70/0xc0 [ 683.115727][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.115743][T13651] RIP: 0033:0x7f824c99e1d9 [ 683.115757][T13651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.115771][T13651] RSP: 002b:00007f824d819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 683.115788][T13651] RAX: ffffffffffffffda RBX: 00007f824cc25fa0 RCX: 00007f824c99e1d9 [ 683.115800][T13651] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 683.115812][T13651] RBP: 00007f824ca35888 R08: 0000000000000000 R09: 0000000000000000 [ 683.115822][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.115832][T13651] R13: 00007f824cc26038 R14: 00007f824cc25fa0 R15: 00007ffdcc5c4248 [ 683.115856][T13651] [ 683.372067][T13647] fido_id[13647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 683.541653][ T10] usb 3-1: USB disconnect, device number 28 [ 683.622666][ T33] audit: type=1326 audit(1791704373.607:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.0.2831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7fc00000 [ 683.623232][ T33] audit: type=1326 audit(1791704373.607:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.0.2831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d63f9e1d9 code=0x7fc00000 [ 684.268368][ T33] audit: type=1326 audit(1791704374.247:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.0.2831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7fc00000 [ 684.950746][ T5619] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 685.100812][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 685.101318][ T5619] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 685.104602][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.104621][ T5619] usb 4-1: Product: syz [ 685.104632][ T5619] usb 4-1: Manufacturer: syz [ 685.104642][ T5619] usb 4-1: SerialNumber: syz [ 685.250315][T13688] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 685.735228][ T5619] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 685.753470][ T5619] usb 4-1: USB disconnect, device number 32 [ 685.924868][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.924912][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.221932][ T5619] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 686.378849][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 686.379291][ T5619] usb 3-1: not running at top speed; connect to a high speed hub [ 686.379314][ T5619] usb 3-1: New USB device found: idVendor=0582, idProduct=0065, bcdDevice=0.40 [ 686.408127][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.408148][ T5619] usb 3-1: Product: syz [ 686.408159][ T5619] usb 3-1: Manufacturer: syz [ 686.408170][ T5619] usb 3-1: SerialNumber: syz [ 686.672089][ T5619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 686.797984][ T5619] usb 3-1: USB disconnect, device number 29 [ 688.407665][T13737] udevd[13737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 689.575254][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 689.768732][T13779] netlink: 'syz.3.2883': attribute type 2 has an invalid length. [ 690.433160][ T2250] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 690.538238][ T33] audit: type=1326 audit(1791704380.517:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.538449][ T33] audit: type=1326 audit(1791704380.517:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.538701][ T33] audit: type=1326 audit(1791704380.517:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.539105][ T33] audit: type=1326 audit(1791704380.517:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.539363][ T33] audit: type=1326 audit(1791704380.517:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.594335][ T33] audit: type=1326 audit(1791704380.517:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.594387][ T33] audit: type=1326 audit(1791704380.517:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.594896][ T33] audit: type=1326 audit(1791704380.577:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.594931][ T33] audit: type=1326 audit(1791704380.577:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.621386][ T33] audit: type=1326 audit(1791704380.607:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2890" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f0d63f9e1d9 code=0x7ffc0000 [ 690.676418][ T2250] usb 4-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 690.827357][ T2250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 690.827379][ T2250] usb 4-1: Product: syz [ 690.827389][ T2250] usb 4-1: Manufacturer: syz [ 691.060181][T13800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2892'. [ 691.179706][T13802] binder: Failure in copy_transaction_data: EINVAL [ 691.306446][T13804] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 691.668596][ T2250] scsi host1: uas [ 691.818742][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 691.856796][ C0] usb 4-1: stat urb: status -71 [ 691.860380][ T5619] usb 4-1: USB disconnect, device number 33 [ 691.891666][ T5619] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 691.891729][ T5619] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 692.616274][T13837] wg0 speed is unknown, defaulting to 1000 [ 693.508135][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'. [ 694.151032][ T5619] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 694.319371][ T5619] usb 2-1: New USB device found: idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 694.331956][ T5619] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 694.331977][ T5619] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 694.331990][ T5619] usb 2-1: config 0 has no interface number 0 [ 694.364763][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.364783][ T5619] usb 2-1: Product: syz [ 694.364793][ T5619] usb 2-1: Manufacturer: syz [ 694.364804][ T5619] usb 2-1: SerialNumber: syz [ 694.396167][ T5619] usb 2-1: config 0 descriptor?? [ 694.411790][ T5619] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 694.488433][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2924'. [ 695.068308][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 695.614922][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2943'. [ 696.959325][ T2250] usb 2-1: USB disconnect, device number 32 [ 697.124231][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2953'. [ 697.250471][T13949] wg0 speed is unknown, defaulting to 1000 [ 697.371364][ T2250] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 697.521006][ T2250] usb 2-1: Using ep0 maxpacket: 16 [ 697.522119][ T2250] usb 2-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 697.523064][ T2250] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.523087][ T2250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 697.523110][ T2250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.536524][ T2250] usb 2-1: config 0 descriptor?? [ 698.129490][ T2250] hid_parser_main: 1 callbacks suppressed [ 698.129509][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129548][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129568][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129586][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129614][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129633][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129651][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.129670][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.201368][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.201406][ T2250] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 698.201490][ T2250] hid-steam 0003:28DE:1142.000F: unbalanced collection at end of report description [ 698.201991][ T2250] hid-steam 0003:28DE:1142.000F: steam_probe:parse of hid interface failed [ 698.202043][ T2250] hid-steam 0003:28DE:1142.000F: probe with driver hid-steam failed with error -22 [ 698.313230][ T2250] usb 2-1: USB disconnect, device number 33 [ 698.571075][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2962'. [ 698.780301][T13974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.792696][T13974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.474124][ T5619] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 699.477131][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2973'. [ 699.711249][ T5619] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 699.713888][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.713916][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.713934][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 699.713965][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.742700][ T5619] usb 4-1: config 0 descriptor?? [ 702.759621][ T5619] usbhid 4-1:0.0: can't add hid device: -71 [ 702.759702][ T5619] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 703.314446][ T5619] usb 4-1: USB disconnect, device number 34 [ 703.769034][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 703.980360][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'. [ 704.190824][T14023] binder: BINDER_SET_CONTEXT_MGR already set [ 704.221355][ T5716] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 704.295940][T14021] wg0 speed is unknown, defaulting to 1000 [ 704.371139][ T5716] usb 4-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 704.371994][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.372026][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1287, setting to 64 [ 704.372046][ T5716] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 704.373358][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 704.373375][ T5716] usb 4-1: Product: syz [ 704.373386][ T5716] usb 4-1: Manufacturer: syz [ 704.730797][ T5619] usb 4-1: USB disconnect, device number 35 [ 705.080423][T14037] input: syz0 as /devices/virtual/input/input32 [ 705.110705][ T5716] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 705.274230][ T5716] usb 3-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 705.276650][ T5716] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 705.276689][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 705.276708][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 705.276738][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.341923][ T5716] usb 3-1: config 0 descriptor?? [ 705.525654][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2994'. [ 705.814203][ T5716] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 705.994288][ T5619] usb 3-1: USB disconnect, device number 30 [ 706.172163][ T2250] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 706.323645][ T2250] usb 2-1: Using ep0 maxpacket: 16 [ 706.324554][ T2250] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 706.325434][ T2250] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.325456][ T2250] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.325472][ T2250] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 706.326345][ T2250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 706.326368][ T2250] usb 2-1: SerialNumber: syz [ 706.411604][ T2250] cdc_acm 2-1:1.0: skipping garbage [ 706.736640][T14067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3004'. [ 706.738653][ T2250] usb 2-1: USB disconnect, device number 34 [ 709.556954][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3014'. [ 710.379654][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3024'. [ 711.306729][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'. [ 712.179524][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3046'. [ 712.482539][T14172] FAULT_INJECTION: forcing a failure. [ 712.482539][T14172] name failslab, interval 1, probability 0, space 0, times 5 [ 712.482566][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.0.3048 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 712.482590][T14172] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 712.482596][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 712.482606][T14172] Call Trace: [ 712.482612][T14172] [ 712.482619][T14172] dump_stack_lvl+0xe8/0x150 [ 712.482643][T14172] should_fail_ex+0x3eb/0x540 [ 712.482663][T14172] should_failslab+0xa8/0x100 [ 712.482679][T14172] ? security_inode_alloc+0x39/0x310 [ 712.482695][T14172] kmem_cache_alloc_noprof+0x9c/0x600 [ 712.482714][T14172] ? __pfx_make_kgid+0x10/0x10 [ 712.482729][T14172] ? security_inode_alloc+0x39/0x310 [ 712.482749][T14172] security_inode_alloc+0x39/0x310 [ 712.482766][T14172] inode_init_always_gfp+0x97e/0xd30 [ 712.482787][T14172] ? __pfx_proc_alloc_inode+0x10/0x10 [ 712.482802][T14172] alloc_inode+0x82/0x1b0 [ 712.482818][T14172] new_inode+0x1f/0x170 [ 712.482832][T14172] ? proc_pid_make_inode+0x19/0x130 [ 712.482850][T14172] proc_pid_make_inode+0x21/0x130 [ 712.482867][T14172] proc_pident_instantiate+0x6d/0x2a0 [ 712.482886][T14172] proc_pident_lookup+0x1b7/0x270 [ 712.482906][T14172] lookup_open+0x94b/0x1970 [ 712.482941][T14172] path_openat+0x673/0x1da0 [ 712.482978][T14172] do_file_open+0x23e/0x4a0 [ 712.482998][T14172] ? __pfx_do_file_open+0x10/0x10 [ 712.483021][T14172] ? __pfx_kfree_link+0x10/0x10 [ 712.483043][T14172] ? _raw_spin_unlock+0x28/0x50 [ 712.483058][T14172] ? alloc_fd+0x6af/0x760 [ 712.483082][T14172] do_sys_openat2+0x115/0x200 [ 712.483098][T14172] ? __se_sys_futex+0x3a8/0x450 [ 712.483114][T14172] ? __pfx_do_sys_openat2+0x10/0x10 [ 712.483134][T14172] ? rcu_is_watching+0x16/0xb0 [ 712.483153][T14172] __x64_sys_openat+0x138/0x170 [ 712.483173][T14172] do_syscall_64+0x166/0x520 [ 712.483188][T14172] ? trace_irq_disable+0x3b/0x140 [ 712.483202][T14172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.483219][T14172] ? clear_bhb_loop+0x70/0xc0 [ 712.483236][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.483252][T14172] RIP: 0033:0x7f0d63f5ea0e [ 712.483267][T14172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.483281][T14172] RSP: 002b:00007f0d64de4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.483298][T14172] RAX: ffffffffffffffda RBX: 00007f0d64de56c0 RCX: 00007f0d63f5ea0e [ 712.483310][T14172] RDX: 0000000000000002 RSI: 00007f0d64de4f90 RDI: ffffffffffffff9c [ 712.483321][T14172] RBP: 00007f0d64035888 R08: 0000000000000000 R09: 0000000000000000 [ 712.483331][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.483341][T14172] R13: 00007f0d64226038 R14: 00007f0d64225fa0 R15: 00007ffc2accdd38 [ 712.483366][T14172] [ 712.898344][T14174] netlink: 'syz.1.3049': attribute type 29 has an invalid length. [ 713.488213][T14188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3055'. [ 715.597078][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3064'. [ 715.610586][ T5716] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 715.755950][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3066'. [ 715.774265][ T5716] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 715.777286][ T5716] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 715.806614][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.806634][ T5716] usb 3-1: Product: syz [ 715.806644][ T5716] usb 3-1: Manufacturer: syz [ 715.806655][ T5716] usb 3-1: SerialNumber: syz [ 716.069315][T14219] wg0 speed is unknown, defaulting to 1000 [ 716.097140][T14222] binder: Failed to get security ctx for id 0: EINVAL [ 716.097278][T14222] binder: Failure in copy_transaction_data: EINVAL [ 716.989443][ T5716] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 716.989466][ T5716] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 716.989480][ T5716] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 717.192002][ T5716] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 717.241102][ T5716] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 717.294743][ T5716] usb 3-1: USB disconnect, device number 31 [ 717.312029][ T5716] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 718.371432][T14240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 719.941088][ T5716] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 720.112074][ T5716] usb 3-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 720.114008][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.114031][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.114058][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.165674][ T5716] usb 3-1: config 0 descriptor?? [ 720.383079][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.383453][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.618626][ T5716] hid_parser_main: 9 callbacks suppressed [ 720.618645][ T5716] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 720.618667][ T5716] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 720.618685][ T5716] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 720.618704][ T5716] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 720.618722][ T5716] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 720.676332][ T5716] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 721.223847][ T5716] playstation 0003:054C:0DF2.0011: Invalid gyro calibration data for axis (3), disabling calibration. [ 721.223868][ T5716] playstation 0003:054C:0DF2.0011: Invalid gyro calibration data for axis (4), disabling calibration. [ 721.223881][ T5716] playstation 0003:054C:0DF2.0011: Invalid gyro calibration data for axis (5), disabling calibration. [ 721.223906][ T5716] playstation 0003:054C:0DF2.0011: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 721.223920][ T5716] playstation 0003:054C:0DF2.0011: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 721.223932][ T5716] playstation 0003:054C:0DF2.0011: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 721.344600][ T5716] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0011/input/input34 [ 721.550040][ T5716] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0011/input/input35 [ 721.630392][ T5716] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0011/input/input36 [ 721.737571][ T5716] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0011/input/input37 [ 722.502595][ T5716] playstation 0003:054C:0DF2.0011: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 722.547857][ T5716] usb 3-1: USB disconnect, device number 32 [ 722.713155][T14319] binder: BINDER_SET_CONTEXT_MGR already set [ 722.822648][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.822962][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.202086][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 723.350837][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 723.351581][ T9] usb 2-1: New USB device found: idVendor=046d, idProduct=c087, bcdDevice=0.00 [ 723.352557][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 723.352592][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.359507][ T9] usb 2-1: config 0 descriptor?? [ 723.818201][ T9] hid (null): nested delimiters [ 723.833384][ T9] logitech-hidpp-device 0003:046D:C087.0012: nested delimiters [ 723.833402][ T9] logitech-hidpp-device 0003:046D:C087.0012: item 0 1 2 10 parsing failed [ 723.860278][ T9] logitech-hidpp-device 0003:046D:C087.0012: hidpp_probe:parse failed [ 723.860361][ T9] logitech-hidpp-device 0003:046D:C087.0012: probe with driver logitech-hidpp-device failed with error -22 [ 724.038182][ T9] usb 2-1: USB disconnect, device number 35 [ 725.307337][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3133'. [ 725.670785][ T2250] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 725.824076][ T2250] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=1.00 [ 725.825964][ T2250] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.830196][ T2250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.830214][ T2250] usb 3-1: Product: syz [ 725.830225][ T2250] usb 3-1: Manufacturer: syz [ 725.830235][ T2250] usb 3-1: SerialNumber: syz [ 725.932060][ T2250] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 725.932136][ T2250] cdc_wdm 3-1:1.0: Unknown control protocol [ 726.418800][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.420343][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.645606][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3147'. [ 727.305090][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3157'. [ 727.526581][T14434] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 728.418902][ T2250] usb 3-1: USB disconnect, device number 33 [ 729.117351][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3167'. [ 729.233429][ T2250] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 729.391058][ T2250] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.394894][ T2250] usb 3-1: not running at top speed; connect to a high speed hub [ 729.394933][ T2250] usb 3-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 729.398117][ T2250] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 729.410963][ T2250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.410983][ T2250] usb 3-1: Product: syz [ 729.410993][ T2250] usb 3-1: Manufacturer: syz [ 729.411003][ T2250] usb 3-1: SerialNumber: syz [ 729.745987][ T2250] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 729.979050][ T2250] usb 3-1: 2:1 : bogus bTerminalLink 2 [ 730.152142][ T2250] usb 3-1: USB disconnect, device number 34 [ 730.302750][T13627] udevd[13627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 730.548155][ T5997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.750338][T14477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3178'. [ 730.966183][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.987557][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.990049][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.998176][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.006103][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.084336][ T5997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.121251][ T2250] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 731.270899][ T2250] usb 2-1: Using ep0 maxpacket: 32 [ 731.271495][ T2250] usb 2-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 731.273621][ T2250] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 731.273651][ T2250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.273670][ T2250] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 731.273700][ T2250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.277716][ T2250] usb 2-1: config 0 descriptor?? [ 731.521475][ T5997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.615598][ T5997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.645206][T14482] wg0 speed is unknown, defaulting to 1000 [ 731.782988][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 731.783015][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 731.787996][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 731.788019][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 731.788038][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 731.788056][ T2250] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 732.180055][ T5997] bridge_slave_1: left allmulticast mode [ 732.180078][ T5997] bridge_slave_1: left promiscuous mode [ 732.180347][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.209176][ T2250] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 732.228356][ T2250] usb 2-1: USB disconnect, device number 36 [ 732.285019][ T5997] bridge_slave_0: left allmulticast mode [ 732.285040][ T5997] bridge_slave_0: left promiscuous mode [ 732.285207][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.120712][T12143] Bluetooth: hci2: command tx timeout [ 733.285160][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.290269][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.312918][ T5997] bond0 (unregistering): Released all slaves [ 733.425420][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 733.597879][ T5997] tipc: Disabling bearer [ 733.598337][ T5997] tipc: Left network mode [ 733.910941][ T5716] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 734.061039][ T5716] usb 3-1: New USB device found: idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 734.061888][ T5716] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 734.061907][ T5716] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 734.061921][ T5716] usb 3-1: config 0 has no interface number 0 [ 734.068339][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.068360][ T5716] usb 3-1: Product: syz [ 734.068371][ T5716] usb 3-1: Manufacturer: syz [ 734.068381][ T5716] usb 3-1: SerialNumber: syz [ 734.120973][ T5716] usb 3-1: config 0 descriptor?? [ 734.163686][ T5716] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 734.330355][T14531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 734.770596][ T5716] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 734.856548][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.858394][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.858516][T14482] bridge_slave_0: entered allmulticast mode [ 734.890837][T14482] bridge_slave_0: entered promiscuous mode [ 734.928002][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 734.938406][ T5716] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 734.958761][ T5716] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 734.958783][ T5716] usb 2-1: config 0 has no interface number 0 [ 734.960720][ T5716] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 734.960740][ T5716] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 735.042793][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.042815][ T5716] usb 2-1: Product: syz [ 735.042826][ T5716] usb 2-1: Manufacturer: syz [ 735.042836][ T5716] usb 2-1: SerialNumber: syz [ 735.048112][ T5716] usb 2-1: config 0 descriptor?? [ 735.050208][T14535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.050304][T14535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.202958][ T4927] Bluetooth: hci2: command tx timeout [ 735.221419][ T5997] hsr_slave_0: left promiscuous mode [ 735.222011][ T5997] hsr_slave_1: left promiscuous mode [ 735.222804][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.222820][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.223534][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.223566][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.284025][T14535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.284108][T14535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.284456][ T5997] veth1_macvtap: left promiscuous mode [ 735.284483][ T5997] veth0_macvtap: left promiscuous mode [ 735.284555][ T5997] veth1_vlan: left promiscuous mode [ 735.284603][ T5997] veth0_vlan: left promiscuous mode [ 735.488468][ T5716] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 735.488670][ T5716] asix 2-1:0.34: probe with driver asix failed with error -61 [ 735.678436][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 735.704436][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 735.872791][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.872878][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.872980][T14482] bridge_slave_1: entered allmulticast mode [ 735.874393][T14482] bridge_slave_1: entered promiscuous mode [ 735.953298][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 735.989271][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.000098][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.068611][T14482] team0: Port device team_slave_0 added [ 736.079746][T14482] team0: Port device team_slave_1 added [ 736.127062][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.127077][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.127098][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.129252][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.129265][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.129285][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.355249][T14482] hsr_slave_0: entered promiscuous mode [ 736.357666][T14482] hsr_slave_1: entered promiscuous mode [ 736.358220][T14482] debugfs: 'hsr0' already exists in 'hsr' [ 736.358236][T14482] Cannot create hsr debugfs directory [ 736.695805][ T2250] usb 3-1: USB disconnect, device number 35 [ 737.281715][T12143] Bluetooth: hci2: command tx timeout [ 737.407241][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 737.885691][ T195] usb 2-1: USB disconnect, device number 37 [ 739.362021][T12143] Bluetooth: hci2: command tx timeout [ 746.012908][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 746.317504][T14482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.347623][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.361310][T14482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.438142][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.454000][T14482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.481841][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.499524][T14482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.527154][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.860657][ T195] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 746.974863][T14482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.014117][ T195] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 747.018016][ T195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.018042][ T195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.018058][ T195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 747.018089][ T195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.081061][ T195] usb 3-1: config 0 descriptor?? [ 747.127173][T14482] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.198760][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.198850][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.270204][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.270290][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.387425][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.388907][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.526121][ T195] plantronics 0003:047F:FFFF.0014: unbalanced collection at end of report description [ 747.526635][ T195] plantronics 0003:047F:FFFF.0014: parse failed [ 747.540262][ T195] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 747.715170][ T2250] usb 3-1: USB disconnect, device number 36 [ 748.221410][ T2250] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 748.372817][ T2250] usb 4-1: Using ep0 maxpacket: 32 [ 748.376263][ T2250] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 748.381875][ T2250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.381899][ T2250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.381926][ T2250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.425126][ T2250] usb 4-1: config 0 descriptor?? [ 748.435507][ T2250] hub 4-1:0.0: USB hub found [ 748.645977][ T2250] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 749.069923][ T2250] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 749.160663][ T2250] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 749.340308][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.354137][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.444379][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 749.587543][ T2250] usb 4-1: USB disconnect, device number 36 [ 753.007082][T14726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3246'. [ 756.886691][T14731] netlink: 'syz.2.3248': attribute type 4 has an invalid length. [ 757.457076][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 757.568230][T14692] wg0 speed is unknown, defaulting to 1000 [ 758.169621][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3254'. [ 758.365037][T14754] input: syz0 as /devices/virtual/input/input39 [ 758.591107][ T2250] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 758.741213][ T2250] usb 2-1: Using ep0 maxpacket: 32 [ 758.741793][ T2250] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 758.742799][ T2250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.742822][ T2250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.742849][ T2250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.747106][ T2250] usb 2-1: config 0 descriptor?? [ 758.808171][ T2250] hub 2-1:0.0: USB hub found [ 758.981438][ T2250] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 759.389677][ T2250] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 759.413147][ T2250] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 759.669826][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.670159][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.777986][ T2250] usb 2-1: USB disconnect, device number 38 [ 761.459529][T14777] random: crng reseeded on system resumption [ 761.753225][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3262'. [ 761.804232][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3263'. [ 765.534573][ T2250] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 765.555507][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 765.568795][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 765.569627][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 765.591702][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 765.592810][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 765.681406][ T2250] usb 2-1: Using ep0 maxpacket: 32 [ 765.683797][ T2250] usb 2-1: New USB device found: idVendor=07fd, idProduct=0001, bcdDevice=0.40 [ 765.684651][ T2250] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.684676][ T2250] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 765.684701][ T2250] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 765.688198][ T2250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.688216][ T2250] usb 2-1: Product: syz [ 765.688227][ T2250] usb 2-1: Manufacturer: syz [ 765.688238][ T2250] usb 2-1: SerialNumber: syz [ 765.902598][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.902977][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.931486][ T2250] usb 2-1: USB disconnect, device number 39 [ 767.055498][T14482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.421295][ T2250] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 767.570745][ T2250] usb 3-1: Using ep0 maxpacket: 16 [ 767.571250][ T2250] usb 3-1: New USB device found: idVendor=18b1, idProduct=0037, bcdDevice=0.00 [ 767.572288][ T2250] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.572311][ T2250] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.572342][ T2250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.577146][ T2250] usb 3-1: config 0 descriptor?? [ 767.681166][ T4927] Bluetooth: hci3: command tx timeout [ 768.014751][ T2250] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 768.014778][ T2250] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 768.014797][ T2250] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 768.014816][ T2250] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 768.014834][ T2250] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 768.077530][T14814] wg0 speed is unknown, defaulting to 1000 [ 768.106851][ T2250] petalynx 0003:18B1:0037.0017: hiddev0,hidraw0: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 768.222979][ T2250] usb 3-1: USB disconnect, device number 37 [ 768.408072][T14848] fido_id[14848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 768.615613][ T6884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.074716][ T6884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.218527][T14856] tmpfs: Bad value for 'nr_inodes' [ 769.399579][T14482] veth0_vlan: entered promiscuous mode [ 770.360574][ T4927] Bluetooth: hci3: command tx timeout [ 772.401006][ T4927] Bluetooth: hci3: command tx timeout [ 773.109283][ T6884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.216457][T14482] veth1_vlan: entered promiscuous mode [ 773.667841][T14879] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2306338541 (2306338541 ns) > initial count (1430540163 ns). Using initial count to start timer. [ 774.484891][ T4927] Bluetooth: hci3: command tx timeout [ 778.238990][ T6884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.389160][T14482] veth0_macvtap: entered promiscuous mode [ 781.416498][T14482] veth1_macvtap: entered promiscuous mode [ 784.094999][T14912] binder: Write failure EFAULT in pid:508 [ 784.286000][T14482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.389048][T14482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.626189][ T6884] bridge_slave_1: left allmulticast mode [ 784.626212][ T6884] bridge_slave_1: left promiscuous mode [ 784.626380][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.656094][ T6884] bridge_slave_0: left allmulticast mode [ 784.656115][ T6884] bridge_slave_0: left promiscuous mode [ 784.656276][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.200445][ T6884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.225905][ T6884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.228213][ T6884] bond0 (unregistering): Released all slaves [ 785.342027][T14904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.342067][T14904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.342095][T14904] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.342122][T14904] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.382137][ T6884] tipc: Left network mode [ 785.479889][T14921] wg0 speed is unknown, defaulting to 1000 [ 785.492847][T14814] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.492926][T14814] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.493059][T14814] bridge_slave_0: entered allmulticast mode [ 785.497548][T14814] bridge_slave_0: entered promiscuous mode [ 785.803931][T14814] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.804010][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.804109][T14814] bridge_slave_1: entered allmulticast mode [ 785.837533][T14814] bridge_slave_1: entered promiscuous mode [ 789.296596][T14814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.451008][T14814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.920066][T14858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.920084][T14858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.972130][T14814] team0: Port device team_slave_0 added [ 789.979247][T14814] team0: Port device team_slave_1 added [ 790.043391][ T6884] hsr_slave_0: left promiscuous mode [ 790.061537][ T6884] hsr_slave_1: left promiscuous mode [ 790.062194][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.062210][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.100298][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.100317][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.147422][ T6884] veth1_macvtap: left promiscuous mode [ 790.147456][ T6884] veth0_macvtap: left promiscuous mode [ 790.147525][ T6884] veth1_vlan: left promiscuous mode [ 790.147571][ T6884] veth0_vlan: left promiscuous mode [ 790.977668][ T6884] team0 (unregistering): Port device team_slave_1 removed [ 790.998185][ T6884] team0 (unregistering): Port device team_slave_0 removed [ 791.308477][T14814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.308492][T14814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.308511][T14814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.310983][T14904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.310999][T14904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.377643][T14814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.377656][T14814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.377702][T14814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.686635][T14814] hsr_slave_0: entered promiscuous mode [ 791.689065][T14814] hsr_slave_1: entered promiscuous mode [ 791.724395][T14814] debugfs: 'hsr0' already exists in 'hsr' [ 791.724416][T14814] Cannot create hsr debugfs directory [ 792.174849][T12143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 792.178979][T12143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 792.197002][T12143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 792.197746][T12143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 792.198253][T12143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 794.249634][T12143] Bluetooth: hci0: command tx timeout [ 796.326607][T12143] Bluetooth: hci0: command tx timeout [ 797.204077][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 797.723294][ T5716] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 797.876161][ T5716] usb 3-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 797.877037][ T5716] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 797.877082][ T5716] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 2 [ 797.877111][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.924059][T14623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.117596][ T5716] usb 3-1: string descriptor 0 read error: -71 [ 798.140176][ T5716] uvcvideo 3-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 798.140306][ T5716] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 798.168684][ T5716] uvcvideo 3-1:1.1: No supported video formats found. [ 798.168723][ T5716] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 798.169241][ T5716] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -22 [ 798.237681][ T5716] usb 3-1: USB disconnect, device number 38 [ 798.373952][T14623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.402621][T12143] Bluetooth: hci0: command tx timeout [ 798.720278][T14623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.951239][T14623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.994428][T15001] wg0 speed is unknown, defaulting to 1000 [ 799.723677][T15087] cgroup: release_agent respecified [ 800.482237][T12143] Bluetooth: hci0: command tx timeout [ 801.185435][T15101] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 801.221317][T15101] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 801.221369][T15101] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 801.221530][T15101] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 801.221779][T15101] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 801.221846][T15101] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 801.221977][T15101] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 801.222013][T15101] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 801.222049][T15101] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 801.222076][T15101] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 801.536524][T15105] kvm: pic: non byte read [ 803.611796][ T5716] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 803.764977][ T5716] usb 2-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 803.786039][ T5716] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.786064][ T5716] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.786080][ T5716] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.786099][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.786124][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.787978][ T5716] usb 2-1: config 0 descriptor?? [ 804.274083][ T5716] input: HID 17ef:6047 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6047.0018/input/input40 [ 804.335557][T14814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.339601][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.364511][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 804.414765][ T5716] lenovo 0003:17EF:6047.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 804.419292][T14814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.462653][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.494381][ T5716] usb 2-1: USB disconnect, device number 40 [ 804.719425][T15120] fido_id[15120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 804.769531][T14814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 804.788761][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.834546][T14814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 804.848934][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 808.754002][T14623] bridge_slave_1: left allmulticast mode [ 808.754024][T14623] bridge_slave_1: left promiscuous mode [ 808.754186][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.788681][T14623] bridge_slave_0: left allmulticast mode [ 808.788701][T14623] bridge_slave_0: left promiscuous mode [ 808.788863][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.807078][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.807121][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.173127][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 809.343833][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 809.345232][ T10] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 809.346101][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 7 [ 809.347909][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.347927][ T10] usb 2-1: Product: ь [ 809.347937][ T10] usb 2-1: Manufacturer: 洭쏡靅ॕ⏀訰ꪠ퇯篜㕮셦灣ﻺ⭃允鉖䂱曜䡰픅䛑췺⚐俧ํ䛒짩墷뢩鼤峆㫐択潂楽䁈㳽㳻辚졗儇鎴￢嫾羶㥮싿ឍ蒬⊆嵋낌┘ꥣ䊐瓱は㟍⃁ￄ헂쉎䅨灇ꡫ婨ꨪ蛪䬇ễꆒ簀嗲蚥锫눘巊鹮쾆숍쑼ၸ숼疬듾䯕鱙㕼㴺츒뛨ჲ辟 [ 809.347963][ T10] usb 2-1: SerialNumber: 㙲䙴析韬᭘錈矸䂝쓧鑙镭캃⡠獎洇鷣㊨＞歉淍楦휙썽㧶빬ᰦ岽䗡Ꜩ೸쒗䘘㒫탿Ჭ䀜㔐ᗉ击愅⸅⁸垸ᤳꋟ慞總䘟콩尕►ꖭ枼힙熏멖턓埄淇꿻ቅ☀༩‡報䣕톶푣㎬ [ 809.479988][T14623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.529503][T14623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.544942][T14623] bond0 (unregistering): Released all slaves [ 809.703046][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 809.712248][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 809.879141][ T10] usb 2-1: USB disconnect, device number 41 [ 810.030156][T14957] udevd[14957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 813.603904][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 814.261868][ T5716] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 814.384263][T15001] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.386629][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.386763][T15001] bridge_slave_0: entered allmulticast mode [ 814.418551][T15001] bridge_slave_0: entered promiscuous mode [ 814.434577][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 814.440537][ T5716] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 814.445806][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.445829][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.448015][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.448033][ T5716] usb 3-1: Product: syz [ 814.448044][ T5716] usb 3-1: Manufacturer: syz [ 814.448054][ T5716] usb 3-1: SerialNumber: syz [ 814.536297][ T5716] usb 3-1: 0:2 : does not exist [ 814.553690][T14623] hsr_slave_0: left promiscuous mode [ 814.570414][T14623] hsr_slave_1: left promiscuous mode [ 814.571253][T14623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.571270][T14623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.594599][T14623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.595115][T14623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.651261][T14623] veth1_macvtap: left promiscuous mode [ 814.664050][T14623] veth0_macvtap: left promiscuous mode [ 814.664142][T14623] veth1_vlan: left promiscuous mode [ 814.664192][T14623] veth0_vlan: left promiscuous mode [ 814.690150][ T5716] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 814.847203][ T5716] usb 3-1: USB disconnect, device number 39 [ 815.000894][T15200] udevd[15200]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 815.673148][T15217] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 815.673173][T15217] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 815.673197][T15217] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 815.673211][T15217] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 815.673220][T15217] page dumped because: unmovable page [ 815.673239][T15217] page_owner info is not present (never set?) [ 815.767615][T14623] team0 (unregistering): Port device team_slave_1 removed [ 815.815464][T14623] team0 (unregistering): Port device team_slave_0 removed [ 816.249049][T15001] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.249127][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.249241][T15001] bridge_slave_1: entered allmulticast mode [ 816.409260][T15001] bridge_slave_1: entered promiscuous mode [ 816.455172][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 816.529414][T15001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.568651][T15001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.592093][T14814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.716476][T15001] team0: Port device team_slave_0 added [ 816.729986][T15001] team0: Port device team_slave_1 added [ 816.916156][T14814] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.920299][T15001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.920312][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.920333][T15001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.012974][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.013052][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.017890][T15001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.017903][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.017924][T15001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.223644][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.223722][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.322918][T15001] hsr_slave_0: entered promiscuous mode [ 817.334648][T15001] hsr_slave_1: entered promiscuous mode [ 817.335159][T15001] debugfs: 'hsr0' already exists in 'hsr' [ 817.335175][T15001] Cannot create hsr debugfs directory [ 818.730327][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 818.832712][ T5716] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 818.985554][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 818.985592][ T5716] usb 3-1: New USB device found: idVendor=0582, idProduct=0003, bcdDevice=0.40 [ 818.989941][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.989962][ T5716] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 819.034383][ T5716] usb 3-1: string descriptor 0 read error: -22 [ 819.034500][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.286609][ T5716] usb 3-1: USB disconnect, device number 40 [ 821.028011][T14814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.894385][T15001] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 821.937933][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.938638][T15001] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 822.002249][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.006441][T15001] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 822.033099][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.040383][T15001] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 822.070020][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.476783][T15001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.557067][T15001] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.585825][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.585920][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.635155][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.635234][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.886022][T14814] veth0_vlan: entered promiscuous mode [ 822.922358][T14814] veth1_vlan: entered promiscuous mode [ 823.064231][T14814] veth0_macvtap: entered promiscuous mode [ 823.091793][T14814] veth1_macvtap: entered promiscuous mode [ 823.177440][T14814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.217458][T14814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.262775][T14904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.263453][T14904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.263482][T14904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.263508][T14904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.718888][T14858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.718907][T14858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.875869][T14858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.875887][T14858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.088971][T15001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.215088][ T5619] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 826.269742][ T5619] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 826.368709][T15001] veth0_vlan: entered promiscuous mode [ 826.419725][T15001] veth1_vlan: entered promiscuous mode [ 826.565744][T15001] veth0_macvtap: entered promiscuous mode [ 826.569913][T15398] fido_id[15398]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 826.646637][T15001] veth1_macvtap: entered promiscuous mode [ 826.734768][T15001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.779355][T15001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.806583][T15404] wg0 speed is unknown, defaulting to 1000 [ 826.912250][ T1016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.912563][ T1016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.912617][ T1016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.912644][ T1016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.370026][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.370046][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.550147][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.550164][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.006603][T15438] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3402'. [ 831.578488][T15471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.596142][T15471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.669742][T15471] [ 831.672123][T15471] ====================================================== [ 831.679146][T15471] WARNING: possible circular locking dependency detected [ 831.686186][T15471] syzkaller #0 Tainted: G L Y [ 831.692260][T15471] ------------------------------------------------------ [ 831.699279][T15471] syz.2.3414/15471 is trying to acquire lock: [ 831.705343][T15471] ffff888059b7e740 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x287/0x880 [ 831.715009][T15471] [ 831.715009][T15471] but task is already holding lock: [ 831.722368][T15471] ffff888058ccde58 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 831.733153][T15471] [ 831.733153][T15471] which lock already depends on the new lock. [ 831.733153][T15471] [ 831.743550][T15471] [ 831.743550][T15471] the existing dependency chain (in reverse order) is: [ 831.752562][T15471] [ 831.752562][T15471] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 831.761337][T15471] down_read+0x45/0x320 [ 831.766032][T15471] lookup_slow+0x46/0x80 [ 831.770809][T15471] ovl_lookup_single+0x323/0xe90 [ 831.776299][T15471] ovl_lookup_layer+0x377/0x440 [ 831.781683][T15471] ovl_lookup+0x9ae/0x1c80 [ 831.786623][T15471] lookup_open+0x94b/0x1970 [ 831.791663][T15471] path_openat+0x673/0x1da0 [ 831.796687][T15471] do_file_open+0x23e/0x4a0 [ 831.801709][T15471] do_sys_openat2+0x115/0x200 [ 831.806907][T15471] __x64_sys_openat+0x138/0x170 [ 831.812316][T15471] do_syscall_64+0x166/0x520 [ 831.817436][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.823851][T15471] [ 831.823851][T15471] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 831.831667][T15471] __d_alloc_parallel+0xc32/0x1700 [ 831.837318][T15471] __lookup_slow+0x82/0x2f0 [ 831.842345][T15471] lookup_slow+0x59/0x80 [ 831.847116][T15471] path_lookupat+0x3f5/0x8c0 [ 831.852226][T15471] filename_lookup+0x265/0x5d0 [ 831.857518][T15471] vfs_statx+0xfc/0x200 [ 831.862208][T15471] vfs_fstatat+0x11b/0x170 [ 831.867247][T15471] __se_sys_newfstatat+0x118/0x3a0 [ 831.872913][T15471] do_syscall_64+0x166/0x520 [ 831.878043][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.884495][T15471] [ 831.884495][T15471] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 831.892937][T15471] __lock_acquire+0x164c/0x2de0 [ 831.898320][T15471] lock_acquire+0x115/0x350 [ 831.903344][T15471] down_read_killable+0x4b/0x3b0 [ 831.908826][T15471] iterate_dir+0x287/0x880 [ 831.913787][T15471] ovl_dir_read+0x141/0x4a0 [ 831.918832][T15471] ovl_dir_read_merged+0x2fb/0x520 [ 831.924477][T15471] ovl_iterate+0xd5a/0x2160 [ 831.929500][T15471] wrap_directory_iterator+0x96/0xe0 [ 831.935303][T15471] iterate_dir+0x3db/0x880 [ 831.940238][T15471] ovl_dir_read+0x141/0x4a0 [ 831.945257][T15471] ovl_dir_read_merged+0x2fb/0x520 [ 831.950902][T15471] ovl_iterate+0xd5a/0x2160 [ 831.955923][T15471] wrap_directory_iterator+0x96/0xe0 [ 831.961750][T15471] iterate_dir+0x3db/0x880 [ 831.966718][T15471] __se_sys_getdents64+0xf1/0x280 [ 831.972278][T15471] do_syscall_64+0x166/0x520 [ 831.977399][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.983906][T15471] [ 831.983906][T15471] other info that might help us debug this: [ 831.983906][T15471] [ 831.994145][T15471] Chain exists of: [ 831.994145][T15471] &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth] [ 831.994145][T15471] [ 832.009184][T15471] Possible unsafe locking scenario: [ 832.009184][T15471] [ 832.016627][T15471] CPU0 CPU1 [ 832.022014][T15471] ---- ---- [ 832.027374][T15471] lock(&ovl_i_mutex_dir_key[depth]); [ 832.032830][T15471] lock(DCACHE_PAR_LOOKUP); [ 832.039944][T15471] lock(&ovl_i_mutex_dir_key[depth]); [ 832.047920][T15471] rlock(&type->i_mutex_dir_key#4); [ 832.053214][T15471] [ 832.053214][T15471] *** DEADLOCK *** [ 832.053214][T15471] [ 832.061351][T15471] locks held by syz.2.3414/15471: 3, last CPU#0: [ 832.067671][T15471] #0: ffff8880613db5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 832.076736][T15471] #1: ffff888058cda230 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 832.088133][T15471] #2: ffff888058ccde58 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 832.099439][T15471] [ 832.099439][T15471] stack backtrace: [ 832.105331][T15471] CPU: 0 UID: 0 PID: 15471 Comm: syz.2.3414 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 832.116352][T15471] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 832.122166][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.132275][T15471] Call Trace: [ 832.135591][T15471] [ 832.138619][T15471] dump_stack_lvl+0xe8/0x150 [ 832.143219][T15471] print_circular_bug+0x2e2/0x300 [ 832.148253][T15471] check_noncircular+0x12f/0x150 [ 832.153197][T15471] __lock_acquire+0x164c/0x2de0 [ 832.158060][T15471] ? apparmor_file_open+0x523/0x6c0 [ 832.163262][T15471] ? __pfx_aa_file_perm+0x10/0x10 [ 832.168293][T15471] lock_acquire+0x115/0x350 [ 832.172801][T15471] ? iterate_dir+0x287/0x880 [ 832.177397][T15471] ? iterate_dir+0x287/0x880 [ 832.181987][T15471] down_read_killable+0x4b/0x3b0 [ 832.186929][T15471] ? iterate_dir+0x287/0x880 [ 832.191530][T15471] iterate_dir+0x287/0x880 [ 832.195964][T15471] ovl_dir_read+0x141/0x4a0 [ 832.200495][T15471] ? __pfx_ovl_dir_read+0x10/0x10 [ 832.205536][T15471] ? ovl_path_upper+0x105/0x170 [ 832.210398][T15471] ? ovl_path_next+0x21a/0x430 [ 832.215174][T15471] ovl_dir_read_merged+0x2fb/0x520 [ 832.220304][T15471] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 832.225957][T15471] ? __pfx_ovl_fill_merge+0x10/0x10 [ 832.231164][T15471] ? __kasan_kmalloc+0x93/0xb0 [ 832.235932][T15471] ? __kmalloc_cache_noprof+0x148/0x600 [ 832.241494][T15471] ? ovl_iterate+0xcbc/0x2160 [ 832.246168][T15471] ? ovl_iterate+0xcbc/0x2160 [ 832.250846][T15471] ovl_iterate+0xd5a/0x2160 [ 832.255365][T15471] ? check_path+0x21/0x40 [ 832.259692][T15471] ? check_noncircular+0xdb/0x150 [ 832.264715][T15471] ? __pfx_ovl_iterate+0x10/0x10 [ 832.269652][T15471] ? lockdep_unlock+0x5c/0xd0 [ 832.274327][T15471] ? __lock_acquire+0x1511/0x2de0 [ 832.279362][T15471] ? lock_acquire+0x115/0x350 [ 832.284047][T15471] ? down_write+0x166/0x200 [ 832.288550][T15471] ? __pfx_down_write+0x10/0x10 [ 832.293398][T15471] ? wrap_directory_iterator+0x52/0xe0 [ 832.298863][T15471] ? __pfx_ovl_iterate+0x10/0x10 [ 832.303870][T15471] wrap_directory_iterator+0x96/0xe0 [ 832.309177][T15471] iterate_dir+0x3db/0x880 [ 832.313617][T15471] ovl_dir_read+0x141/0x4a0 [ 832.318132][T15471] ? __pfx_ovl_dir_read+0x10/0x10 [ 832.323157][T15471] ? ovl_path_upper+0x105/0x170 [ 832.328018][T15471] ? ovl_path_next+0x21a/0x430 [ 832.332819][T15471] ovl_dir_read_merged+0x2fb/0x520 [ 832.337937][T15471] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 832.343586][T15471] ? __pfx_ovl_fill_merge+0x10/0x10 [ 832.348788][T15471] ? __kasan_kmalloc+0x93/0xb0 [ 832.353551][T15471] ? __kmalloc_cache_noprof+0x148/0x600 [ 832.359096][T15471] ? ovl_iterate+0xcbc/0x2160 [ 832.363781][T15471] ? ovl_iterate+0xcbc/0x2160 [ 832.368460][T15471] ovl_iterate+0xd5a/0x2160 [ 832.372960][T15471] ? __pfx_stack_trace_save+0x10/0x10 [ 832.378342][T15471] ? check_path+0x21/0x40 [ 832.382669][T15471] ? check_noncircular+0xdb/0x150 [ 832.387700][T15471] ? __pfx_ovl_iterate+0x10/0x10 [ 832.392661][T15471] ? lockdep_unlock+0x5c/0xd0 [ 832.397338][T15471] ? __lock_acquire+0x1511/0x2de0 [ 832.402392][T15471] ? lock_acquire+0x115/0x350 [ 832.407082][T15471] ? down_write+0x166/0x200 [ 832.411586][T15471] ? __pfx_down_write+0x10/0x10 [ 832.416433][T15471] ? wrap_directory_iterator+0x52/0xe0 [ 832.421905][T15471] ? __pfx_ovl_iterate+0x10/0x10 [ 832.426865][T15471] wrap_directory_iterator+0x96/0xe0 [ 832.432150][T15471] iterate_dir+0x3db/0x880 [ 832.436566][T15471] __se_sys_getdents64+0xf1/0x280 [ 832.441599][T15471] ? __pfx___se_sys_getdents64+0x10/0x10 [ 832.447233][T15471] ? __pfx_filldir64+0x10/0x10 [ 832.452013][T15471] ? rcu_is_watching+0x16/0xb0 [ 832.456782][T15471] do_syscall_64+0x166/0x520 [ 832.461371][T15471] ? trace_irq_disable+0x3b/0x140 [ 832.466394][T15471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.472458][T15471] ? clear_bhb_loop+0x70/0xc0 [ 832.477135][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.483028][T15471] RIP: 0033:0x7f5c6c39e1d9 [ 832.487441][T15471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.507045][T15471] RSP: 002b:00007f5c6d1b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 832.515463][T15471] RAX: ffffffffffffffda RBX: 00007f5c6c625fa0 RCX: 00007f5c6c39e1d9 [ 832.523435][T15471] RDX: 000000000000006d RSI: 0000200000000480 RDI: 0000000000000003 [ 832.531405][T15471] RBP: 00007f5c6c435888 R08: 0000000000000000 R09: 0000000000000000 [ 832.539376][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.547344][T15471] R13: 00007f5c6c626038 R14: 00007f5c6c625fa0 R15: 00007fff3cd196e8 [ 832.555327][T15471] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 832.796287][ T5716] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 833.106125][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 833.265053][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.323353][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.355772][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.387660][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.415722][ T5716] usb 6-1: device descriptor read/all, error -71 [ 833.534579][ T154] bridge_slave_1: left allmulticast mode [ 833.534599][ T154] bridge_slave_1: left promiscuous mode [ 833.534749][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.561813][ T154] bridge_slave_0: left allmulticast mode [ 833.561831][ T154] bridge_slave_0: left promiscuous mode [ 833.561929][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.749635][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.768592][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.783391][ T154] bond0 (unregistering): Released all slaves [ 834.059811][ T154] hsr_slave_0: left promiscuous mode [ 834.060115][ T154] hsr_slave_1: left promiscuous mode [ 834.072051][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.072066][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.072502][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.072514][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.075336][ T154] veth1_macvtap: left promiscuous mode [ 834.075358][ T154] veth0_macvtap: left promiscuous mode [ 834.075404][ T154] veth1_vlan: left promiscuous mode [ 834.075436][ T154] veth0_vlan: left promiscuous mode [ 834.427330][ T154] team0 (unregistering): Port device team_slave_1 removed [ 834.449059][ T154] team0 (unregistering): Port device team_slave_0 removed [ 834.557432][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 834.778446][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.827730][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.870769][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.895061][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.997683][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.036218][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.061380][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.087101][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.179062][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.214463][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.238750][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.268329][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.366551][ T154] bridge_slave_1: left allmulticast mode [ 835.366570][ T154] bridge_slave_1: left promiscuous mode [ 835.366683][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.367801][ T154] bridge_slave_0: left allmulticast mode [ 835.367815][ T154] bridge_slave_0: left promiscuous mode [ 835.367907][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.414823][ T154] bridge_slave_1: left allmulticast mode [ 835.414843][ T154] bridge_slave_1: left promiscuous mode [ 835.414985][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.416071][ T154] bridge_slave_0: left allmulticast mode [ 835.416085][ T154] bridge_slave_0: left promiscuous mode [ 835.416171][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.465267][ T154] bridge_slave_1: left allmulticast mode [ 835.465287][ T154] bridge_slave_1: left promiscuous mode [ 835.465397][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.468008][ T154] bridge_slave_0: left allmulticast mode [ 835.468023][ T154] bridge_slave_0: left promiscuous mode [ 835.468123][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.607678][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.608881][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.609604][ T154] bond0 (unregistering): Released all slaves [ 835.674788][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.675890][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.676635][ T154] bond0 (unregistering): Released all slaves [ 835.739060][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.749740][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.762745][ T154] bond0 (unregistering): Released all slaves [ 835.765245][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 836.414701][ T154] hsr_slave_0: left promiscuous mode [ 836.415005][ T154] hsr_slave_1: left promiscuous mode [ 836.415393][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.415406][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.417614][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.417627][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.462614][ T154] hsr_slave_0: left promiscuous mode [ 836.462899][ T154] hsr_slave_1: left promiscuous mode [ 836.463258][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.463280][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.463612][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.463623][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.467479][ T154] hsr_slave_0: left promiscuous mode [ 836.467810][ T154] hsr_slave_1: left promiscuous mode [ 836.468181][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.468194][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.470112][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.470126][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.569012][ T154] veth1_macvtap: left promiscuous mode [ 836.569037][ T154] veth0_macvtap: left promiscuous mode [ 836.569084][ T154] veth1_vlan: left promiscuous mode [ 836.569118][ T154] veth0_vlan: left promiscuous mode [ 836.593062][ T154] veth1_macvtap: left promiscuous mode [ 836.593085][ T154] veth0_macvtap: left promiscuous mode [ 836.593130][ T154] veth1_vlan: left promiscuous mode [ 836.593162][ T154] veth0_vlan: left promiscuous mode [ 836.593668][ T154] veth1_macvtap: left promiscuous mode [ 836.593684][ T154] veth0_macvtap: left promiscuous mode [ 836.593737][ T154] veth1_vlan: left promiscuous mode [ 836.593768][ T154] veth0_vlan: left promiscuous mode [ 836.849502][ T154] team0 (unregistering): Port device team_slave_1 removed [ 836.865382][ T154] team0 (unregistering): Port device team_slave_0 removed [ 836.986243][ T154] team0 (unregistering): Port device team_slave_1 removed [ 836.990080][ T154] team0 (unregistering): Port device team_slave_0 removed [ 837.127822][ T154] team0 (unregistering): Port device team_slave_1 removed [ 837.139505][ T154] team0 (unregistering): Port device team_slave_0 removed [ 837.200172][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 837.874973][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 838.238733][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 838.530663][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 838.809056][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 839.086164][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 839.364556][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 839.644683][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 839.922262][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 840.204896][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 840.484344][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 840.790059][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 841.075954][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23