last executing test programs: 10m45.238543539s ago: executing program 1 (id=2241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='10\x00', 0x2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x4) 10m45.20260902s ago: executing program 1 (id=2243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 10m45.087046661s ago: executing program 1 (id=2245): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400), 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10m45.007945745s ago: executing program 1 (id=2248): linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 10m44.936441668s ago: executing program 1 (id=2250): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) 10m42.781862756s ago: executing program 1 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") 10m42.697008127s ago: executing program 32 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") 5m38.432819015s ago: executing program 0 (id=4706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x2204000, &(0x7f0000001bc0)) 5m38.017783268s ago: executing program 0 (id=4707): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000380)=""/155) 5m36.241934842s ago: executing program 0 (id=4711): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r1], 0x22) 5m35.900440526s ago: executing program 0 (id=4713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 5m35.78429398s ago: executing program 0 (id=4715): mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040addeefbe0001010203010902270001010080fa090400"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dead beef', 0x9) 5m33.425834266s ago: executing program 0 (id=4720): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r1], 0x22) 5m33.206332167s ago: executing program 33 (id=4720): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r1], 0x22) 11.389244122s ago: executing program 4 (id=6217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_create(0x4ade) 11.225760143s ago: executing program 4 (id=6218): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 11.116648918s ago: executing program 4 (id=6219): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) 10.031958938s ago: executing program 4 (id=6225): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x2}) 8.52740533s ago: executing program 4 (id=6227): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 5.172507403s ago: executing program 5 (id=6231): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(0x3) r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000500)={0x11, 0xf8, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 4.117140086s ago: executing program 3 (id=6233): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) 4.060279865s ago: executing program 2 (id=6234): sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) 3.851586826s ago: executing program 3 (id=6235): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f00000000c0)={'wlan1\x00', @remote}) 3.585684365s ago: executing program 3 (id=6236): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9dc}}}, &(0x7f0000000200)=0x84) 3.44593875s ago: executing program 5 (id=6237): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56", 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 3.43678606s ago: executing program 3 (id=6238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 3.283161231s ago: executing program 5 (id=6239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.0861915s ago: executing program 2 (id=6240): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x8, 0x4, 0xf, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 2.902498008s ago: executing program 2 (id=6241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000040)='./bus\x00', 0x107) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) mount(&(0x7f0000000100), 0x0, 0x0, 0x44, &(0x7f0000000100)='trans=rdma,\xd6\x17\x0foQW\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3\xc90$A\x7fL0R\v!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80sm\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xf2\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc2') 1.853499505s ago: executing program 2 (id=6242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) 1.569855756s ago: executing program 3 (id=6243): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x9, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x74}]}) 1.123249562s ago: executing program 2 (id=6246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0x20000) 940.131475ms ago: executing program 5 (id=6247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 491.503573ms ago: executing program 3 (id=6248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 240.407309ms ago: executing program 4 (id=6249): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="f73d0b06c800675b030005"], 0xe) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f00000004c0)="64400f01c5410f01cb66b873000f00d0f3f0450fc74935b9800000c00f3235001000000f30c7442400e2000000c744240203000000ff2c240f01f866baf80cb8aac4d78bef66bafc0c66b80f0066efc401f96e2766ba610066ed", 0x5a}], 0x1, 0x4, &(0x7f0000000580), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r4, 0x1, 0x31, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x4}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=6250): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000480)={&(0x7f00009a0000/0x1000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x1000, 0x300, 0x2}) kernel console output (not intermixed with test programs): ce number 94 using dummy_hcd [ 883.740857][ T5792] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 883.812417][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 883.812482][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 883.813468][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 883.813516][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 883.814511][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 883.814557][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 883.817579][T19389] usb 4-1: string descriptor 0 read error: -22 [ 883.817685][T19389] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 883.817698][T19389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.892356][T19389] adutux 4-1:168.0: interrupt endpoints not found [ 884.031166][ T5792] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 884.031198][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.031218][ T5792] usb 6-1: Product: syz [ 884.031233][ T5792] usb 6-1: Manufacturer: syz [ 884.031247][ T5792] usb 6-1: SerialNumber: syz [ 884.038699][ T5792] r8152-cfgselector 6-1: Unknown version 0x0000 [ 884.038720][ T5792] r8152-cfgselector 6-1: config 0 descriptor?? [ 884.093962][T19389] usb 4-1: USB disconnect, device number 94 [ 884.233470][T21257] FAULT_INJECTION: forcing a failure. [ 884.233470][T21257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.233504][T21257] CPU: 1 UID: 0 PID: 21257 Comm: syz.2.5642 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 884.233528][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.233540][T21257] Call Trace: [ 884.233548][T21257] [ 884.233556][T21257] dump_stack_lvl+0xe8/0x150 [ 884.233582][T21257] should_fail_ex+0x467/0x600 [ 884.233598][T21257] _copy_from_iter+0x1d3/0x1660 [ 884.233613][T21257] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 884.233638][T21257] ? __pfx__copy_from_iter+0x10/0x10 [ 884.233669][T21257] ? dev_get_by_index+0x22/0x2e0 [ 884.233689][T21257] ? dev_get_by_index+0x22/0x2e0 [ 884.233715][T21257] packet_sendmsg+0x2f2a/0x5060 [ 884.233741][T21257] ? __kernel_text_address+0xd/0x30 [ 884.233759][T21257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 884.233780][T21257] ? __lock_acquire+0x6df/0x2e40 [ 884.233805][T21257] ? __lock_acquire+0x6df/0x2e40 [ 884.233828][T21257] ? kstrtouint+0x6e/0xe0 [ 884.233859][T21257] ? __pfx_packet_sendmsg+0x10/0x10 [ 884.233889][T21257] ? sched_cgroup_write+0x10/0x280 [ 884.233918][T21257] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 884.233939][T21257] ? __pfx_packet_sendmsg+0x10/0x10 [ 884.233953][T21257] sock_sendmsg_nosec+0x13a/0x180 [ 884.233972][T21257] __sys_sendto+0x41e/0x5d0 [ 884.234004][T21257] ? __pfx___sys_sendto+0x10/0x10 [ 884.234057][T21257] ? __pfx_ksys_write+0x10/0x10 [ 884.234080][T21257] __x64_sys_sendto+0xde/0x100 [ 884.234095][T21257] do_syscall_64+0x17b/0x530 [ 884.234107][T21257] ? irqentry_exit+0x10f/0x8f0 [ 884.234116][T21257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.234130][T21257] ? clear_bhb_loop+0x40/0x90 [ 884.234154][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.234175][T21257] RIP: 0033:0x7fce09b0e0d9 [ 884.234193][T21257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.234211][T21257] RSP: 002b:00007fce07d66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 884.234232][T21257] RAX: ffffffffffffffda RBX: 00007fce09d95fa0 RCX: 00007fce09b0e0d9 [ 884.234244][T21257] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 884.234251][T21257] RBP: 00007fce07d66090 R08: 0000200000000140 R09: 0000000000000014 [ 884.234259][T21257] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 884.234265][T21257] R13: 00007fce09d96038 R14: 00007fce09d95fa0 R15: 00007fff26e83fe8 [ 884.234281][T21257] [ 884.515098][ T5792] r8152-cfgselector 6-1: USB disconnect, device number 45 [ 884.580902][T19389] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 884.731235][T19389] usb 3-1: Using ep0 maxpacket: 32 [ 884.733402][T19389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.735734][T19389] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 884.735761][T19389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.735830][T19389] usb 3-1: Product: syz [ 884.735844][T19389] usb 3-1: Manufacturer: syz [ 884.735867][T19389] usb 3-1: SerialNumber: syz [ 884.738660][T19389] usb 3-1: config 0 descriptor?? [ 884.920847][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 884.952139][T19389] ljca 3-1:0.0: bulk endpoints not found [ 884.956643][T19389] usb 3-1: USB disconnect, device number 121 [ 885.082548][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.082583][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 885.082596][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.085354][ T10] usb 4-1: config 0 descriptor?? [ 885.296337][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 885.296479][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 885.315881][ T10] usb 4-1: USB disconnect, device number 95 [ 885.831325][T21221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.440901][ T5792] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 886.541758][T19389] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 886.595518][ T5792] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 886.595575][ T5792] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 886.596714][ T5792] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 886.596765][ T5792] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 886.597897][ T5792] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 886.597947][ T5792] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 886.649741][ T5792] usb 3-1: string descriptor 0 read error: -22 [ 886.649873][ T5792] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 886.649897][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.696219][T19389] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 886.696246][T19389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.696266][T19389] usb 5-1: Product: syz [ 886.696280][T19389] usb 5-1: Manufacturer: syz [ 886.696295][T19389] usb 5-1: SerialNumber: syz [ 886.723731][T19389] r8152-cfgselector 5-1: Unknown version 0x0000 [ 886.723755][T19389] r8152-cfgselector 5-1: config 0 descriptor?? [ 886.750928][ T201] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 886.776395][ T5792] adutux 3-1:168.0: interrupt endpoints not found [ 886.881359][ T201] usb 6-1: device descriptor read/64, error -71 [ 886.929446][T19389] r8152-cfgselector 5-1: Unknown version 0x0000 [ 886.929941][T19389] r8152-cfgselector 5-1: No union descriptors [ 886.966397][T19389] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 886.987159][ T10] usb 3-1: USB disconnect, device number 122 [ 887.130853][ T201] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 887.161337][ T5792] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 887.281033][ T201] usb 6-1: device descriptor read/64, error -71 [ 887.310862][ T5792] usb 4-1: Using ep0 maxpacket: 32 [ 887.312883][ T5792] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 887.312912][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.316588][ T5792] usb 4-1: config 0 descriptor?? [ 887.349703][ T5792] gspca_main: sq930x-2.14.0 probing 041e:403c [ 887.402370][ T201] usb usb6-port1: attempt power cycle [ 887.766531][ T201] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 887.782969][ T201] usb 6-1: device descriptor read/8, error -71 [ 887.819817][T21322] FAULT_INJECTION: forcing a failure. [ 887.819817][T21322] name failslab, interval 1, probability 100, space 0, times 0 [ 887.819851][T21322] CPU: 0 UID: 0 PID: 21322 Comm: syz.4.5666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.819877][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.819889][T21322] Call Trace: [ 887.819897][T21322] [ 887.819906][T21322] dump_stack_lvl+0xe8/0x150 [ 887.819936][T21322] should_fail_ex+0x467/0x600 [ 887.819966][T21322] should_failslab+0xa8/0x100 [ 887.819987][T21322] kmem_cache_alloc_node_noprof+0xac/0x660 [ 887.820016][T21322] ? __alloc_skb+0x1d7/0x7a0 [ 887.820040][T21322] ? __alloc_skb+0x1d7/0x7a0 [ 887.820070][T21322] __alloc_skb+0x1d7/0x7a0 [ 887.820099][T21322] netlink_sendmsg+0x5d4/0xb40 [ 887.820146][T21322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.820178][T21322] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 887.820210][T21322] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 887.820239][T21322] ? arch_stack_walk+0xfb/0x150 [ 887.820271][T21322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.820300][T21322] sock_sendmsg_nosec+0x13a/0x180 [ 887.820325][T21322] ____sys_sendmsg+0x565/0x870 [ 887.820362][T21322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.820399][T21322] ? import_iovec+0x73/0xa0 [ 887.820432][T21322] ___sys_sendmsg+0x2a5/0x360 [ 887.820460][T21322] ? __lock_acquire+0x6df/0x2e40 [ 887.820481][T21322] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.820540][T21322] ? __fget_files+0x2a/0x420 [ 887.820559][T21322] ? __fget_files+0x3a8/0x420 [ 887.820588][T21322] __x64_sys_sendmsg+0x1b7/0x290 [ 887.820617][T21322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.820662][T21322] do_syscall_64+0x17b/0x530 [ 887.820682][T21322] ? irqentry_exit+0x10f/0x8f0 [ 887.820701][T21322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.820721][T21322] ? clear_bhb_loop+0x40/0x90 [ 887.820743][T21322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.820761][T21322] RIP: 0033:0x7f25a1b8e0d9 [ 887.820778][T21322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.820795][T21322] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.820815][T21322] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 887.820830][T21322] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 887.820844][T21322] RBP: 00007f259fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 887.820857][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.820869][T21322] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 887.820900][T21322] [ 888.026235][ T201] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 888.043529][ T201] usb 6-1: device descriptor read/8, error -71 [ 888.152412][ T201] usb usb6-port1: unable to enumerate USB device [ 888.332474][ T5792] gspca_sq930x: ucbus_write failed -71 [ 888.332563][ T5792] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 888.349113][ T5792] usb 4-1: USB disconnect, device number 96 [ 888.521599][ T201] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 888.682758][ T201] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 888.682814][ T201] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.686730][ T201] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 888.686783][ T201] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.689650][ T201] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 888.689698][ T201] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.742529][ T201] usb 5-1: string descriptor 0 read error: -22 [ 888.742660][ T201] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 888.742682][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.764395][ T201] adutux 5-1:168.0: interrupt endpoints not found [ 888.887405][ T201] IPVS: starting estimator thread 0... [ 888.973423][T21354] IPVS: using max 9 ests per chain, 21600 per kthread [ 888.998123][ T5792] usb 5-1: USB disconnect, device number 29 [ 889.283884][T21368] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5683'. [ 889.663657][T19389] IPVS: starting estimator thread 0... [ 889.668879][T21380] FAULT_INJECTION: forcing a failure. [ 889.668879][T21380] name failslab, interval 1, probability 100, space 0, times 0 [ 889.668911][T21380] CPU: 1 UID: 0 PID: 21380 Comm: syz.4.5687 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 889.668933][T21380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.668946][T21380] Call Trace: [ 889.668954][T21380] [ 889.668963][T21380] dump_stack_lvl+0xe8/0x150 [ 889.668994][T21380] should_fail_ex+0x467/0x600 [ 889.669026][T21380] should_failslab+0xa8/0x100 [ 889.669047][T21380] __kmalloc_cache_noprof+0xa1/0x670 [ 889.669077][T21380] ? ip_vs_add_dest+0x129d/0x1df0 [ 889.669103][T21380] ? ip_vs_add_dest+0x129d/0x1df0 [ 889.669135][T21380] ip_vs_add_dest+0x129d/0x1df0 [ 889.669178][T21380] ? ip_vs_add_dest+0x305/0x1df0 [ 889.669202][T21380] ? __ip_vs_service_find+0x1c0/0x8d0 [ 889.669226][T21380] ? __pfx_ip_vs_add_dest+0x10/0x10 [ 889.669281][T21380] do_ip_vs_set_ctl+0x8ae/0xaf0 [ 889.669313][T21380] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 889.669355][T21380] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 889.669376][T21380] ? lockdep_hardirqs_on+0x7a/0x110 [ 889.669403][T21380] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 889.669436][T21380] ? nf_setsockopt+0x221/0x290 [ 889.669468][T21380] nf_setsockopt+0x26f/0x290 [ 889.669494][T21380] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 889.669522][T21380] do_sock_setsockopt+0x17c/0x1b0 [ 889.669555][T21380] __x64_sys_setsockopt+0x143/0x1b0 [ 889.669589][T21380] do_syscall_64+0x17b/0x530 [ 889.669613][T21380] ? irqentry_exit+0x10f/0x8f0 [ 889.669630][T21380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.669650][T21380] ? clear_bhb_loop+0x40/0x90 [ 889.669674][T21380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.669693][T21380] RIP: 0033:0x7f25a1b8e0d9 [ 889.669712][T21380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.669729][T21380] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 889.669751][T21380] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 889.669766][T21380] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 889.669779][T21380] RBP: 00007f259fde6090 R08: 0000000000000044 R09: 0000000000000000 [ 889.669792][T21380] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 889.669806][T21380] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 889.669838][T21380] [ 889.763580][T21385] IPVS: using max 9 ests per chain, 21600 per kthread [ 889.811751][ T5792] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 889.973132][ T5792] usb 3-1: Using ep0 maxpacket: 32 [ 889.979739][ T5792] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 889.979766][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.014448][ T5792] usb 3-1: config 0 descriptor?? [ 890.046713][ T5792] gspca_main: sq930x-2.14.0 probing 041e:403c [ 890.542800][T19389] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 890.580928][ T824] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 890.681151][T19389] usb 6-1: device descriptor read/64, error -71 [ 890.741420][ T824] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.741480][ T824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 890.741507][ T824] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.748693][ T824] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.748750][ T824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 890.748777][ T824] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.750024][ T824] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.750075][ T824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 890.750101][ T824] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.774326][ T824] usb 5-1: string descriptor 0 read error: -22 [ 890.774471][ T824] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 890.774495][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.817125][ T824] adutux 5-1:168.0: interrupt endpoints not found [ 890.940919][T19389] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 891.024274][ T44] usb 5-1: USB disconnect, device number 30 [ 891.072219][T19389] usb 6-1: device descriptor read/64, error -71 [ 891.093071][ T5792] gspca_sq930x: ucbus_write failed -71 [ 891.093166][ T5792] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 891.113359][ T5792] usb 3-1: USB disconnect, device number 123 [ 891.181340][T19389] usb usb6-port1: attempt power cycle [ 891.520897][T19389] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 891.531004][ T44] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 891.546716][T19389] usb 6-1: device descriptor read/8, error -71 [ 891.698613][ T44] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 891.698643][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.698662][ T44] usb 4-1: Product: syz [ 891.698677][ T44] usb 4-1: Manufacturer: syz [ 891.698691][ T44] usb 4-1: SerialNumber: syz [ 891.711062][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 891.711085][ T44] r8152-cfgselector 4-1: config 0 descriptor?? [ 891.825850][T19389] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 891.853031][T19389] usb 6-1: device descriptor read/8, error -71 [ 891.941195][T21436] program syz.2.5708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.948494][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 891.948780][ T44] r8152-cfgselector 4-1: No union descriptors [ 891.962295][T19389] usb usb6-port1: unable to enumerate USB device [ 891.976095][ T44] r8152-cfgselector 4-1: USB disconnect, device number 97 [ 892.112712][T21439] FAULT_INJECTION: forcing a failure. [ 892.112712][T21439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.112733][T21439] CPU: 1 UID: 0 PID: 21439 Comm: syz.4.5709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 892.112745][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.112755][T21439] Call Trace: [ 892.112759][T21439] [ 892.112764][T21439] dump_stack_lvl+0xe8/0x150 [ 892.112781][T21439] should_fail_ex+0x467/0x600 [ 892.112798][T21439] strncpy_from_user+0x36/0x2c0 [ 892.112812][T21439] do_getname+0x77/0x250 [ 892.112830][T21439] do_sys_openat2+0xcc/0x200 [ 892.112848][T21439] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.112865][T21439] ? ksys_write+0x248/0x270 [ 892.112878][T21439] ? __pfx_ksys_write+0x10/0x10 [ 892.112891][T21439] __x64_sys_openat+0x138/0x170 [ 892.112909][T21439] do_syscall_64+0x17b/0x530 [ 892.112920][T21439] ? irqentry_exit+0x10f/0x8f0 [ 892.112929][T21439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.112940][T21439] ? clear_bhb_loop+0x40/0x90 [ 892.112952][T21439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.112963][T21439] RIP: 0033:0x7f25a1b8e0d9 [ 892.112973][T21439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.112983][T21439] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.112994][T21439] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 892.113002][T21439] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 892.113009][T21439] RBP: 00007f259fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 892.113016][T21439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.113022][T21439] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 892.113037][T21439] [ 892.404023][T21443] program syz.4.5711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.871005][T19389] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 893.022999][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 893.023111][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 893.023142][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.024138][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 893.024196][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 893.024210][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.025208][T19389] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 893.025255][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 893.025281][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.028346][T19389] usb 4-1: string descriptor 0 read error: -22 [ 893.028455][T19389] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 893.028468][T19389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.154862][T19389] adutux 4-1:168.0: interrupt endpoints not found [ 893.362726][ T10] usb 4-1: USB disconnect, device number 98 [ 893.428648][T21467] program syz.5.5722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.561421][ T5792] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 893.725792][ T5792] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 893.725822][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.725841][ T5792] usb 3-1: Product: syz [ 893.725852][ T5792] usb 3-1: Manufacturer: syz [ 893.725860][ T5792] usb 3-1: SerialNumber: syz [ 893.731797][ T5792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 893.731821][ T5792] r8152-cfgselector 3-1: config 0 descriptor?? [ 893.942941][ T5792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 893.948687][ T5792] r8152-cfgselector 3-1: No union descriptors [ 893.966424][ T5792] r8152-cfgselector 3-1: USB disconnect, device number 124 [ 894.356256][T21484] program syz.3.5728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.611185][ T44] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 894.631406][ T5792] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 894.635182][T21493] No source specified [ 894.710076][T21495] netlink: 'syz.2.5734': attribute type 3 has an invalid length. [ 894.710090][T21495] netlink: 'syz.2.5734': attribute type 1 has an invalid length. [ 894.710097][T21495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5734'. [ 894.710121][T21495] NCSI netlink: No device for ifindex 511 [ 894.763941][ T44] usb 5-1: config 0 has no interfaces? [ 894.766150][ T44] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 894.766177][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 894.766196][ T44] usb 5-1: Product: syz [ 894.766205][ T44] usb 5-1: Manufacturer: syz [ 894.766212][ T44] usb 5-1: SerialNumber: syz [ 894.771031][ T44] usb 5-1: config 0 descriptor?? [ 894.821963][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 894.822015][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.822042][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.866384][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 894.866789][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.866806][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.867810][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 894.867869][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.867895][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.897965][ T5792] usb 6-1: string descriptor 0 read error: -22 [ 894.898054][ T5792] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 894.898067][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.972931][ T5792] adutux 6-1:168.0: interrupt endpoints not found [ 895.177460][ T44] usb 6-1: USB disconnect, device number 54 [ 895.262350][T21505] befs: (nbd2): No write support. Marking filesystem read-only [ 895.268260][T21505] befs: (nbd2): unable to read superblock [ 895.456806][T21511] program syz.2.5739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 895.733399][T21514] FAULT_INJECTION: forcing a failure. [ 895.733399][T21514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.733432][T21514] CPU: 1 UID: 0 PID: 21514 Comm: syz.5.5740 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 895.733445][T21514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.733452][T21514] Call Trace: [ 895.733456][T21514] [ 895.733461][T21514] dump_stack_lvl+0xe8/0x150 [ 895.733478][T21514] should_fail_ex+0x467/0x600 [ 895.733494][T21514] _copy_to_user+0x31/0xb0 [ 895.733506][T21514] simple_read_from_buffer+0xe1/0x170 [ 895.733520][T21514] proc_fail_nth_read+0x1be/0x230 [ 895.733533][T21514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.733546][T21514] ? rw_verify_area+0x250/0x4d0 [ 895.733558][T21514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.733569][T21514] vfs_read+0x219/0xa90 [ 895.733584][T21514] ? __pfx_vfs_read+0x10/0x10 [ 895.733597][T21514] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 895.733608][T21514] ? lockdep_hardirqs_on+0x7a/0x110 [ 895.733619][T21514] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 895.733628][T21514] ? mutex_lock_nested+0x152/0x1d0 [ 895.733641][T21514] ? fdget_pos+0x252/0x320 [ 895.733656][T21514] ksys_read+0x156/0x270 [ 895.733672][T21514] ? __pfx_ksys_read+0x10/0x10 [ 895.733688][T21514] do_syscall_64+0x17b/0x530 [ 895.733699][T21514] ? irqentry_exit+0x10f/0x8f0 [ 895.733708][T21514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.733719][T21514] ? clear_bhb_loop+0x40/0x90 [ 895.733731][T21514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.733742][T21514] RIP: 0033:0x7fabe10ee90e [ 895.733752][T21514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 895.733768][T21514] RSP: 002b:00007fabdf385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.733779][T21514] RAX: ffffffffffffffda RBX: 00007fabdf3866c0 RCX: 00007fabe10ee90e [ 895.733787][T21514] RDX: 000000000000000f RSI: 00007fabdf3860a0 RDI: 0000000000000004 [ 895.733794][T21514] RBP: 00007fabdf386090 R08: 0000000000000000 R09: 0000000000000000 [ 895.733800][T21514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.733806][T21514] R13: 00007fabe13b6038 R14: 00007fabe13b5fa0 R15: 00007ffef87f84e8 [ 895.733823][T21514] [ 896.017338][T21518] No source specified [ 896.301103][ T5792] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 896.405229][T21525] program syz.2.5745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.454150][ T5792] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 896.454168][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.454179][ T5792] usb 4-1: Product: syz [ 896.454186][ T5792] usb 4-1: Manufacturer: syz [ 896.454194][ T5792] usb 4-1: SerialNumber: syz [ 896.460157][ T5792] r8152-cfgselector 4-1: Unknown version 0x0000 [ 896.460180][ T5792] r8152-cfgselector 4-1: config 0 descriptor?? [ 896.693893][ T5792] r8152-cfgselector 4-1: Unknown version 0x0000 [ 896.694346][ T5792] r8152-cfgselector 4-1: No union descriptors [ 896.715761][ T5792] r8152-cfgselector 4-1: USB disconnect, device number 99 [ 897.110861][T19389] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 897.264045][T19389] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 897.264078][T19389] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 897.264092][T19389] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.267697][T19389] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 897.267746][T19389] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 897.267761][T19389] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.269272][T19389] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 897.269321][T19389] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 897.269347][T19389] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.288577][T19389] usb 6-1: string descriptor 0 read error: -22 [ 897.288727][T19389] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 897.288749][T19389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.300071][T19389] adutux 6-1:168.0: interrupt endpoints not found [ 897.458771][T19389] usb 5-1: USB disconnect, device number 31 [ 897.505518][ T5792] usb 6-1: USB disconnect, device number 55 [ 897.637920][T21545] program syz.3.5753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.057461][T21549] No source specified [ 898.284192][T21555] program syz.5.5757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.455032][T21560] FAULT_INJECTION: forcing a failure. [ 898.455032][T21560] name failslab, interval 1, probability 100, space 0, times 0 [ 898.455066][T21560] CPU: 0 UID: 0 PID: 21560 Comm: syz.2.5759 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 898.455089][T21560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.455101][T21560] Call Trace: [ 898.455109][T21560] [ 898.455117][T21560] dump_stack_lvl+0xe8/0x150 [ 898.455147][T21560] should_fail_ex+0x467/0x600 [ 898.455177][T21560] should_failslab+0xa8/0x100 [ 898.455198][T21560] __kmalloc_noprof+0xfb/0x790 [ 898.455227][T21560] ? tomoyo_encode+0x2ad/0x570 [ 898.455255][T21560] ? tomoyo_encode+0x2ad/0x570 [ 898.455289][T21560] tomoyo_encode+0x2ad/0x570 [ 898.455322][T21560] tomoyo_realpath_from_path+0x5fa/0x640 [ 898.455365][T21560] ? tomoyo_path_number_perm+0x219/0x5f0 [ 898.455399][T21560] tomoyo_path_number_perm+0x246/0x5f0 [ 898.455427][T21560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 898.455453][T21560] ? do_raw_spin_lock+0x12b/0x2f0 [ 898.455493][T21560] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.455513][T21560] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.455549][T21560] ? __fget_files+0x2a/0x420 [ 898.455575][T21560] ? __fget_files+0x3a8/0x420 [ 898.455594][T21560] ? __fget_files+0x2a/0x420 [ 898.455618][T21560] security_file_ioctl+0xb9/0x260 [ 898.455643][T21560] __se_sys_ioctl+0x47/0x170 [ 898.455672][T21560] do_syscall_64+0x17b/0x530 [ 898.455692][T21560] ? irqentry_exit+0x10f/0x8f0 [ 898.455711][T21560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.455732][T21560] ? clear_bhb_loop+0x40/0x90 [ 898.455756][T21560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.455777][T21560] RIP: 0033:0x7fce09b0e0d9 [ 898.455795][T21560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.455814][T21560] RSP: 002b:00007fce07d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.455835][T21560] RAX: ffffffffffffffda RBX: 00007fce09d95fa0 RCX: 00007fce09b0e0d9 [ 898.455850][T21560] RDX: 0000200000000040 RSI: 00000000c02064b6 RDI: 0000000000000003 [ 898.455863][T21560] RBP: 00007fce07d66090 R08: 0000000000000000 R09: 0000000000000000 [ 898.455875][T21560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.455887][T21560] R13: 00007fce09d96038 R14: 00007fce09d95fa0 R15: 00007fff26e83fe8 [ 898.455919][T21560] [ 898.456152][T21560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 898.508190][ T5792] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 898.566984][T21564] netlink: 'syz.2.5762': attribute type 3 has an invalid length. [ 898.737191][ T824] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 898.782529][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.782575][ T5792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 898.782588][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.786005][ T5792] usb 5-1: config 0 descriptor?? [ 898.880915][T19389] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 898.888820][ T824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.888844][ T824] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 898.888863][ T824] usb 4-1: config 1 has no interface number 1 [ 898.888905][ T824] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 898.888953][ T824] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 898.892092][ T824] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 898.892118][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.892138][ T824] usb 4-1: Product: syz [ 898.892152][ T824] usb 4-1: Manufacturer: syz [ 898.892166][ T824] usb 4-1: SerialNumber: syz [ 898.899007][T21562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 898.999396][ T5792] usbhid 5-1:0.0: can't add hid device: -71 [ 898.999576][ T5792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 899.019685][ T5792] usb 5-1: USB disconnect, device number 32 [ 899.036346][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 899.036771][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 899.036800][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.039014][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 899.039062][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 899.039398][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.046967][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 899.048071][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 899.048100][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.072517][T19389] usb 3-1: string descriptor 0 read error: -22 [ 899.072703][T19389] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 899.072726][T19389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.188529][T19389] adutux 3-1:168.0: interrupt endpoints not found [ 899.197811][T21567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.201844][T21567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.364990][ T5792] usb 3-1: USB disconnect, device number 125 [ 899.616272][ T824] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 899.618122][ T824] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 899.891256][ T824] usb 4-1: USB disconnect, device number 100 [ 900.171310][T21584] program syz.4.5769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.410944][T21593] FAULT_INJECTION: forcing a failure. [ 900.410944][T21593] name failslab, interval 1, probability 100, space 0, times 0 [ 900.410973][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.5.5771 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 900.410991][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.410999][T21593] Call Trace: [ 900.411005][T21593] [ 900.411012][T21593] dump_stack_lvl+0xe8/0x150 [ 900.411038][T21593] should_fail_ex+0x467/0x600 [ 900.411062][T21593] should_failslab+0xa8/0x100 [ 900.411079][T21593] __kmalloc_noprof+0xfb/0x790 [ 900.411102][T21593] ? tomoyo_realpath_from_path+0xef/0x640 [ 900.411126][T21593] ? tomoyo_realpath_from_path+0xef/0x640 [ 900.411156][T21593] tomoyo_realpath_from_path+0xef/0x640 [ 900.411188][T21593] ? tomoyo_path_number_perm+0x219/0x5f0 [ 900.411209][T21593] tomoyo_path_number_perm+0x246/0x5f0 [ 900.411228][T21593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 900.411247][T21593] ? do_raw_spin_lock+0x12b/0x2f0 [ 900.411278][T21593] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 900.411298][T21593] ? lockdep_hardirqs_on+0x7a/0x110 [ 900.411327][T21593] ? __fget_files+0x2a/0x420 [ 900.411347][T21593] ? __fget_files+0x3a8/0x420 [ 900.411362][T21593] ? __fget_files+0x2a/0x420 [ 900.411380][T21593] security_file_ioctl+0xb9/0x260 [ 900.411400][T21593] __se_sys_ioctl+0x47/0x170 [ 900.411423][T21593] do_syscall_64+0x17b/0x530 [ 900.411439][T21593] ? irqentry_exit+0x10f/0x8f0 [ 900.411454][T21593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.411470][T21593] ? clear_bhb_loop+0x40/0x90 [ 900.411491][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.411508][T21593] RIP: 0033:0x7fabe112e0d9 [ 900.411525][T21593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.411539][T21593] RSP: 002b:00007fabdf365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.411558][T21593] RAX: ffffffffffffffda RBX: 00007fabe13b6090 RCX: 00007fabe112e0d9 [ 900.411568][T21593] RDX: 0000200000000200 RSI: 0000000000005412 RDI: 0000000000000003 [ 900.411578][T21593] RBP: 00007fabdf365090 R08: 0000000000000000 R09: 0000000000000000 [ 900.411587][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.411595][T21593] R13: 00007fabe13b6128 R14: 00007fabe13b6090 R15: 00007ffef87f84e8 [ 900.411617][T21593] [ 900.415018][T21593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 900.428852][T18894] udevd[18894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.594329][T21595] program syz.3.5772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.175184][T21600] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 901.175219][T21600] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 901.550989][T19389] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 901.663313][T21616] program syz.4.5786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.703641][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 901.703695][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 901.703716][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.704708][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 901.704757][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 901.704783][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.705800][T19389] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 901.705848][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 901.705874][T19389] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.708876][T19389] usb 3-1: string descriptor 0 read error: -22 [ 901.708988][T19389] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 901.709001][T19389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.824877][T19389] adutux 3-1:168.0: interrupt endpoints not found [ 901.861025][ T824] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 901.987400][ T201] usb 3-1: USB disconnect, device number 126 [ 902.012711][ T824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.012757][ T824] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.012779][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.017595][ T824] usb 6-1: config 0 descriptor?? [ 902.230506][ T824] usbhid 6-1:0.0: can't add hid device: -71 [ 902.230624][ T824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 902.238712][ T824] usb 6-1: USB disconnect, device number 56 [ 902.510866][ T201] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 902.620935][T21623] program syz.4.5781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 902.680578][ T201] usb 4-1: config 43 interface 0 has no altsetting 0 [ 902.690669][ T201] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 902.690698][ T201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.690719][ T201] usb 4-1: Product: syz [ 902.690969][ T201] usb 4-1: Manufacturer: syz [ 902.690986][ T201] usb 4-1: SerialNumber: syz [ 903.038501][T21638] FAULT_INJECTION: forcing a failure. [ 903.038501][T21638] name failslab, interval 1, probability 100, space 0, times 0 [ 903.038523][T21638] CPU: 0 UID: 0 PID: 21638 Comm: syz.2.5788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 903.038535][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.038543][T21638] Call Trace: [ 903.038547][T21638] [ 903.038552][T21638] dump_stack_lvl+0xe8/0x150 [ 903.038570][T21638] should_fail_ex+0x467/0x600 [ 903.038588][T21638] should_failslab+0xa8/0x100 [ 903.038604][T21638] __kmalloc_noprof+0xfb/0x790 [ 903.038619][T21638] ? tomoyo_encode+0x2ad/0x570 [ 903.038634][T21638] ? tomoyo_encode+0x2ad/0x570 [ 903.038651][T21638] tomoyo_encode+0x2ad/0x570 [ 903.038668][T21638] tomoyo_realpath_from_path+0x5fa/0x640 [ 903.038688][T21638] ? tomoyo_path_number_perm+0x219/0x5f0 [ 903.038701][T21638] tomoyo_path_number_perm+0x246/0x5f0 [ 903.038715][T21638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 903.038736][T21638] ? lockdep_hardirqs_on+0x7a/0x110 [ 903.038755][T21638] ? __fget_files+0x2a/0x420 [ 903.038769][T21638] ? __fget_files+0x3a8/0x420 [ 903.038778][T21638] ? __fget_files+0x2a/0x420 [ 903.038790][T21638] security_file_ioctl+0xb9/0x260 [ 903.038804][T21638] __se_sys_ioctl+0x47/0x170 [ 903.038819][T21638] do_syscall_64+0x17b/0x530 [ 903.038829][T21638] ? irqentry_exit+0x10f/0x8f0 [ 903.038839][T21638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.038849][T21638] ? clear_bhb_loop+0x40/0x90 [ 903.038862][T21638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.038872][T21638] RIP: 0033:0x7fce09b0e0d9 [ 903.038883][T21638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.038892][T21638] RSP: 002b:00007fce07d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.038904][T21638] RAX: ffffffffffffffda RBX: 00007fce09d95fa0 RCX: 00007fce09b0e0d9 [ 903.038912][T21638] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000004 [ 903.038919][T21638] RBP: 00007fce07d66090 R08: 0000000000000000 R09: 0000000000000000 [ 903.038925][T21638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.038932][T21638] R13: 00007fce09d96038 R14: 00007fce09d95fa0 R15: 00007fff26e83fe8 [ 903.038948][T21638] [ 903.038992][T21638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 903.308185][ T201] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 903.311023][ T201] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 903.311093][ T201] dvb_usb_anysee 4-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 903.343159][ T201] usb 4-1: USB disconnect, device number 101 [ 903.507606][T21642] program syz.2.5790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.690962][ T5792] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 903.716164][T21652] FAULT_INJECTION: forcing a failure. [ 903.716164][T21652] name failslab, interval 1, probability 100, space 0, times 0 [ 903.716184][T21652] CPU: 0 UID: 0 PID: 21652 Comm: syz.4.5794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 903.716197][T21652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.716203][T21652] Call Trace: [ 903.716208][T21652] [ 903.716212][T21652] dump_stack_lvl+0xe8/0x150 [ 903.716230][T21652] should_fail_ex+0x467/0x600 [ 903.716247][T21652] should_failslab+0xa8/0x100 [ 903.716259][T21652] __kmalloc_noprof+0xfb/0x790 [ 903.716273][T21652] ? tomoyo_realpath_from_path+0xef/0x640 [ 903.716289][T21652] ? tomoyo_realpath_from_path+0xef/0x640 [ 903.716307][T21652] tomoyo_realpath_from_path+0xef/0x640 [ 903.716328][T21652] tomoyo_path_perm+0x283/0x560 [ 903.716340][T21652] ? tomoyo_path_perm+0x251/0x560 [ 903.716353][T21652] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 903.716379][T21652] ? __fget_files+0x2a/0x420 [ 903.716392][T21652] ? __fget_files+0x2a/0x420 [ 903.716403][T21652] ? __fget_files+0x2a/0x420 [ 903.716415][T21652] security_inode_getattr+0x121/0x2d0 [ 903.716427][T21652] do_statx_fd+0x14e/0x3b0 [ 903.716439][T21652] ? __pfx_do_statx_fd+0x10/0x10 [ 903.716477][T21652] __se_sys_statx+0x146/0x2a0 [ 903.716487][T21652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 903.716498][T21652] ? rt_mutex_slowunlock+0x219/0x460 [ 903.716513][T21652] ? __pfx___se_sys_statx+0x10/0x10 [ 903.716528][T21652] ? fput+0xa0/0xd0 [ 903.716543][T21652] ? ksys_write+0x248/0x270 [ 903.716556][T21652] ? __pfx_ksys_write+0x10/0x10 [ 903.716570][T21652] ? __x64_sys_statx+0x20/0xc0 [ 903.716581][T21652] do_syscall_64+0x17b/0x530 [ 903.716592][T21652] ? irqentry_exit+0x10f/0x8f0 [ 903.716602][T21652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.716613][T21652] ? clear_bhb_loop+0x40/0x90 [ 903.716626][T21652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.716636][T21652] RIP: 0033:0x7f25a1b8e0d9 [ 903.716647][T21652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.716656][T21652] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 903.716667][T21652] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 903.716675][T21652] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000003 [ 903.716681][T21652] RBP: 00007f259fde6090 R08: 0000200000000240 R09: 0000000000000000 [ 903.716688][T21652] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 903.716694][T21652] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 903.716710][T21652] [ 903.716770][T21652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 903.883574][ T5792] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 903.883630][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.883658][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.990816][ T5792] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 903.990874][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.990900][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.040893][ T5792] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 904.040958][ T5792] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 904.040985][ T5792] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.090872][ T5792] usb 6-1: string descriptor 0 read error: -22 [ 904.090993][ T5792] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 904.091016][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.145334][ T5792] adutux 6-1:168.0: interrupt endpoints not found [ 904.346297][ T201] usb 6-1: USB disconnect, device number 57 [ 904.408644][T21670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 904.504382][T21672] netlink: 'syz.2.5800': attribute type 2 has an invalid length. [ 904.900967][ T201] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 905.083149][ T201] usb 5-1: unable to get BOS descriptor or descriptor too short [ 905.084308][ T201] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 905.084362][ T201] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 905.084386][ T201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 14385, setting to 1024 [ 905.084404][ T201] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 905.090464][ T201] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 905.090491][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.090510][ T201] usb 5-1: Product: syz [ 905.090521][ T201] usb 5-1: Manufacturer: syz [ 905.090529][ T201] usb 5-1: SerialNumber: syz [ 905.187082][ T201] usb 5-1: config 0 descriptor?? [ 905.188381][T21678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.188504][T21678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.242949][ C0] usb 5-1: NFC: Urb failure (status -71) [ 905.274553][ C0] usb 5-1: NFC: Urb failure (status -71) [ 905.279804][ T201] usb 5-1: NFC: Unable to get FW version [ 905.306369][ T201] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -71 [ 905.458465][T19389] usb 5-1: USB disconnect, device number 33 [ 905.616568][T21689] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5806'. [ 905.631245][T21693] program syz.5.5808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.921194][T19389] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 905.940882][ T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 906.073573][T19389] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 906.073621][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 906.073636][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.074640][T19389] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 906.074686][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 906.074700][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.075706][T19389] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 906.075753][T19389] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 906.075778][T19389] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.078781][T19389] usb 4-1: string descriptor 0 read error: -22 [ 906.078895][T19389] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 906.078908][T19389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.097988][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 906.158445][T19389] adutux 4-1:168.0: interrupt endpoints not found [ 906.171080][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 906.205142][ T10] usb 3-1: config 164 has an invalid interface number: 153 but max is 0 [ 906.205158][ T10] usb 3-1: config 164 has no interface number 0 [ 906.205186][ T10] usb 3-1: config 164 interface 153 altsetting 4 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 906.205201][ T10] usb 3-1: config 164 interface 153 altsetting 4 endpoint 0xD has invalid maxpacket 47158, setting to 1024 [ 906.205216][ T10] usb 3-1: config 164 interface 153 altsetting 4 bulk endpoint 0xD has invalid maxpacket 1024 [ 906.205228][ T10] usb 3-1: config 164 interface 153 altsetting 4 bulk endpoint 0xB has invalid maxpacket 1024 [ 906.205241][ T10] usb 3-1: config 164 interface 153 has no altsetting 0 [ 906.229260][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=23.17 [ 906.229276][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.229288][ T10] usb 3-1: Product: syz [ 906.229295][ T10] usb 3-1: Manufacturer: syz [ 906.229303][ T10] usb 3-1: SerialNumber: syz [ 906.338592][T21701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 906.338712][T21701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 906.398189][T19389] usb 4-1: USB disconnect, device number 102 [ 906.428567][T21707] FAULT_INJECTION: forcing a failure. [ 906.428567][T21707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.428601][T21707] CPU: 1 UID: 0 PID: 21707 Comm: syz.4.5813 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 906.428623][T21707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.428634][T21707] Call Trace: [ 906.428641][T21707] [ 906.428650][T21707] dump_stack_lvl+0xe8/0x150 [ 906.428680][T21707] should_fail_ex+0x467/0x600 [ 906.428709][T21707] strncpy_from_user+0x36/0x2c0 [ 906.428737][T21707] do_getname+0x77/0x250 [ 906.428768][T21707] do_sys_openat2+0xcc/0x200 [ 906.428799][T21707] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.428831][T21707] ? ksys_write+0x248/0x270 [ 906.428856][T21707] ? __pfx_ksys_write+0x10/0x10 [ 906.428880][T21707] __x64_sys_openat+0x138/0x170 [ 906.428915][T21707] do_syscall_64+0x17b/0x530 [ 906.428935][T21707] ? irqentry_exit+0x10f/0x8f0 [ 906.428953][T21707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.428973][T21707] ? clear_bhb_loop+0x40/0x90 [ 906.428997][T21707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.429016][T21707] RIP: 0033:0x7f25a1b8e0d9 [ 906.429035][T21707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.429052][T21707] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 906.429081][T21707] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 906.429095][T21707] RDX: 0000000000000002 RSI: 0000200000002600 RDI: ffffffffffffff9c [ 906.429108][T21707] RBP: 00007f259fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 906.429120][T21707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.429130][T21707] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 906.429159][T21707] [ 906.623639][ T10] usbtest 3-1:164.153: couldn't get endpoints, -22 [ 906.623732][ T10] usbtest 3-1:164.153: probe with driver usbtest failed with error -22 [ 906.655936][ T10] usb 3-1: USB disconnect, device number 127 [ 906.979337][T21718] nfs: Unknown parameter 'VqcÄ-åS®ò…îtd¯)z!' [ 906.979768][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5817'. [ 907.575271][T21730] jffs2: notice: (21730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 907.576262][T21728] netlink: 'syz.3.5820': attribute type 12 has an invalid length. [ 907.690197][T21727] program syz.2.5822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.941741][ T44] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 908.096784][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.096818][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.096855][ T44] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 908.096878][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.148690][ T44] usb 6-1: config 0 descriptor?? [ 908.270939][ T4918] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 908.436190][ T4918] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.436243][ T4918] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 908.436271][ T4918] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.602472][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 908.739632][ T44] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 908.810413][ T44] cp2112 0003:10C4:EA90.0007: error requesting version [ 908.860835][ T4918] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.860896][ T4918] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 908.860924][ T4918] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.880121][ T4918] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.880172][ T4918] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 908.880199][ T4918] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.890405][ T4918] usb 4-1: string descriptor 0 read error: -22 [ 908.890528][ T4918] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 908.890563][ T4918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.925196][ T44] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 909.026261][ T4918] adutux 4-1:168.0: interrupt endpoints not found [ 909.292546][ T4918] usb 4-1: USB disconnect, device number 103 [ 909.766168][T21756] FAULT_INJECTION: forcing a failure. [ 909.766168][T21756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.766199][T21756] CPU: 1 UID: 0 PID: 21756 Comm: syz.4.5829 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 909.766233][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.766250][T21756] Call Trace: [ 909.766261][T21756] [ 909.766274][T21756] dump_stack_lvl+0xe8/0x150 [ 909.766314][T21756] should_fail_ex+0x467/0x600 [ 909.766343][T21756] strncpy_from_user+0x36/0x2c0 [ 909.766366][T21756] do_getname+0x77/0x250 [ 909.766396][T21756] do_sys_openat2+0xcc/0x200 [ 909.766422][T21756] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.766451][T21756] ? ksys_write+0x248/0x270 [ 909.766469][T21756] ? __pfx_ksys_write+0x10/0x10 [ 909.766488][T21756] __x64_sys_openat+0x138/0x170 [ 909.766513][T21756] do_syscall_64+0x17b/0x530 [ 909.766529][T21756] ? irqentry_exit+0x10f/0x8f0 [ 909.766543][T21756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.766560][T21756] ? clear_bhb_loop+0x40/0x90 [ 909.766580][T21756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.766595][T21756] RIP: 0033:0x7f25a1b8e0d9 [ 909.766611][T21756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.766625][T21756] RSP: 002b:00007f259fde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 909.766642][T21756] RAX: ffffffffffffffda RBX: 00007f25a1e15fa0 RCX: 00007f25a1b8e0d9 [ 909.766656][T21756] RDX: 0000000000000002 RSI: 0000200000001300 RDI: ffffffffffffff9c [ 909.766667][T21756] RBP: 00007f259fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 909.766676][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.766686][T21756] R13: 00007f25a1e16038 R14: 00007f25a1e15fa0 R15: 00007ffe5e909648 [ 909.766711][T21756] [ 910.542297][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 910.717788][ T10] usb 5-1: config 1 has an invalid interface number: 36 but max is 0 [ 910.717817][ T10] usb 5-1: config 1 has no interface number 0 [ 910.737003][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8156, bcdDevice=c4.a3 [ 910.737034][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.737053][ T10] usb 5-1: Product: syz [ 910.737067][ T10] usb 5-1: Manufacturer: syz [ 910.737082][ T10] usb 5-1: SerialNumber: syz [ 910.814941][ T10] cp210x 5-1:1.36: cp210x converter detected [ 910.885921][T19389] usb 6-1: USB disconnect, device number 58 [ 911.019975][T21758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.020479][T21758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.038724][ T10] cp210x 5-1:1.36: failed to get vendor val 0x370b size 1: -71 [ 911.038818][ T10] cp210x 5-1:1.36: querying part number failed [ 911.068766][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 911.084076][ T10] usb 5-1: USB disconnect, device number 34 [ 911.104936][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 911.105723][ T10] cp210x 5-1:1.36: device disconnected [ 912.078976][T21764] jffs2: notice: (21764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 912.827782][T21770] program syz.4.5835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.974356][T21745] fido_id[21745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 913.190633][ T10] IPVS: starting estimator thread 0... [ 913.290931][T21777] IPVS: using max 11 ests per chain, 26400 per kthread [ 913.737381][T21781] FAULT_INJECTION: forcing a failure. [ 913.737381][T21781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.737415][T21781] CPU: 1 UID: 0 PID: 21781 Comm: syz.5.5838 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 913.737437][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.737449][T21781] Call Trace: [ 913.737457][T21781] [ 913.737466][T21781] dump_stack_lvl+0xe8/0x150 [ 913.737502][T21781] should_fail_ex+0x467/0x600 [ 913.737532][T21781] _copy_to_user+0x31/0xb0 [ 913.737554][T21781] simple_read_from_buffer+0xe1/0x170 [ 913.737581][T21781] proc_fail_nth_read+0x1be/0x230 [ 913.737606][T21781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.737631][T21781] ? rw_verify_area+0x250/0x4d0 [ 913.737655][T21781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.737676][T21781] vfs_read+0x219/0xa90 [ 913.737707][T21781] ? __pfx_vfs_read+0x10/0x10 [ 913.737731][T21781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 913.737752][T21781] ? lockdep_hardirqs_on+0x7a/0x110 [ 913.737772][T21781] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 913.737791][T21781] ? mutex_lock_nested+0x152/0x1d0 [ 913.737813][T21781] ? fdget_pos+0x252/0x320 [ 913.737841][T21781] ksys_read+0x156/0x270 [ 913.737867][T21781] ? __pfx_ksys_read+0x10/0x10 [ 913.737899][T21781] do_syscall_64+0x17b/0x530 [ 913.737919][T21781] ? irqentry_exit+0x10f/0x8f0 [ 913.737937][T21781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.737957][T21781] ? clear_bhb_loop+0x40/0x90 [ 913.737981][T21781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.738001][T21781] RIP: 0033:0x7fabe10ee90e [ 913.738019][T21781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.738036][T21781] RSP: 002b:00007fabdf385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.738056][T21781] RAX: ffffffffffffffda RBX: 00007fabdf3866c0 RCX: 00007fabe10ee90e [ 913.738071][T21781] RDX: 000000000000000f RSI: 00007fabdf3860a0 RDI: 0000000000000004 [ 913.738084][T21781] RBP: 00007fabdf386090 R08: 0000000000000000 R09: 0000000000000000 [ 913.738101][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.738114][T21781] R13: 00007fabe13b6038 R14: 00007fabe13b5fa0 R15: 00007ffef87f84e8 [ 913.738146][T21781] [ 913.913321][T19389] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 914.077629][T19389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 914.077679][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.077694][T19389] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.077707][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.077720][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.112155][T19389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 914.112209][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.112236][T19389] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.112262][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.112287][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.115097][T19389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 914.115145][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.115170][T19389] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.115195][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.115220][T19389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.447040][T21783] netlink: 'syz.3.5840': attribute type 1 has an invalid length. [ 914.447061][T21783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5840'. [ 916.481892][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 916.564827][T21803] jffs2: notice: (21803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 916.647881][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.647913][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.647948][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 916.647970][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.695411][ T10] usb 3-1: config 0 descriptor?? [ 916.892495][T19389] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 916.892524][T19389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.933298][T19389] usb 5-1: can't set config #168, error -71 [ 916.956141][T19389] usb 5-1: USB disconnect, device number 35 [ 918.317565][T21809] FAULT_INJECTION: forcing a failure. [ 918.317565][T21809] name failslab, interval 1, probability 100, space 0, times 0 [ 918.317593][T21809] CPU: 1 UID: 0 PID: 21809 Comm: syz.4.5845 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 918.317610][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.317619][T21809] Call Trace: [ 918.317625][T21809] [ 918.317631][T21809] dump_stack_lvl+0xe8/0x150 [ 918.317656][T21809] should_fail_ex+0x467/0x600 [ 918.317680][T21809] should_failslab+0xa8/0x100 [ 918.317696][T21809] kmem_cache_alloc_node_noprof+0xac/0x660 [ 918.317719][T21809] ? __alloc_skb+0x1d7/0x7a0 [ 918.317739][T21809] ? __alloc_skb+0x1d7/0x7a0 [ 918.317764][T21809] __alloc_skb+0x1d7/0x7a0 [ 918.317789][T21809] netlink_sendmsg+0x5d4/0xb40 [ 918.317825][T21809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.317848][T21809] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 918.317872][T21809] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 918.317892][T21809] ? arch_stack_walk+0xfb/0x150 [ 918.317917][T21809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.317938][T21809] sock_sendmsg_nosec+0x13a/0x180 [ 918.317957][T21809] ____sys_sendmsg+0x565/0x870 [ 918.317988][T21809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.318017][T21809] ? import_iovec+0x73/0xa0 [ 918.318056][T21809] ___sys_sendmsg+0x2a5/0x360 [ 918.318078][T21809] ? __lock_acquire+0x6df/0x2e40 [ 918.318096][T21809] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.318145][T21809] ? __fget_files+0x2a/0x420 [ 918.318161][T21809] ? __fget_files+0x3a8/0x420 [ 918.318184][T21809] __x64_sys_sendmsg+0x1b7/0x290 [ 918.318211][T21809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.318252][T21809] do_syscall_64+0x17b/0x530 [ 918.318271][T21809] ? irqentry_exit+0x10f/0x8f0 [ 918.318286][T21809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.318302][T21809] ? clear_bhb_loop+0x40/0x90 [ 918.318322][T21809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.318338][T21809] RIP: 0033:0x7f25a1b8e0d9 [ 918.318355][T21809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.318369][T21809] RSP: 002b:00007f259fdc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.318386][T21809] RAX: ffffffffffffffda RBX: 00007f25a1e16090 RCX: 00007f25a1b8e0d9 [ 918.318398][T21809] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 000000000000001f [ 918.318408][T21809] RBP: 00007f259fdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 918.318419][T21809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.318428][T21809] R13: 00007f25a1e16128 R14: 00007f25a1e16090 R15: 00007ffe5e909648 [ 918.318458][T21809] [ 918.618806][T21810] netlink: 'syz.5.5846': attribute type 8 has an invalid length. [ 918.636044][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 918.636081][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 918.636108][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 918.636132][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 918.636157][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 918.760148][ T10] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 918.848260][ T10] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 9: -32 [ 918.848337][ T10] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -32 [ 918.848384][ T10] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 918.848398][ T10] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 918.909398][ T10] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -32 [ 920.082783][ T824] usb 3-1: USB disconnect, device number 2 [ 920.572748][T21817] program syz.4.5847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.499124][T21814] fido_id[21814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 922.919966][T21831] jffs2: notice: (21831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 923.123053][ T44] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 923.506424][ T44] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 923.506484][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 923.506511][ T44] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.506535][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.506559][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 923.508922][ T44] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 923.508985][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 923.509012][ T44] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.509038][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.509063][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 923.523967][ T44] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 923.524020][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 923.524046][ T44] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.524071][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.524096][ T44] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 924.367492][T21838] FAULT_INJECTION: forcing a failure. [ 924.367492][T21838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.367527][T21838] CPU: 0 UID: 0 PID: 21838 Comm: syz.4.5855 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 924.367550][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.367563][T21838] Call Trace: [ 924.367570][T21838] [ 924.367580][T21838] dump_stack_lvl+0xe8/0x150 [ 924.367610][T21838] should_fail_ex+0x467/0x600 [ 924.367641][T21838] _copy_from_user+0x2d/0xb0 [ 924.367661][T21838] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 924.367690][T21838] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 924.367717][T21838] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 924.367761][T21838] ? __pfx_ksys_write+0x10/0x10 [ 924.367794][T21838] do_syscall_64+0x17b/0x530 [ 924.367814][T21838] ? irqentry_exit+0x10f/0x8f0 [ 924.367848][T21838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.367868][T21838] ? clear_bhb_loop+0x40/0x90 [ 924.367892][T21838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.367911][T21838] RIP: 0033:0x7f25a1b8e0d9 [ 924.367930][T21838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.367947][T21838] RSP: 002b:00007f259fde5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 924.367968][T21838] RAX: ffffffffffffffda RBX: 0000200000001088 RCX: 00007f25a1b8e0d9 [ 924.367983][T21838] RDX: 0000200000001108 RSI: 0000200000001088 RDI: 00000000000003c9 [ 924.367997][T21838] RBP: 0000200000001080 R08: 0000000000000000 R09: 0000000000000000 [ 924.368009][T21838] R10: 0000200000001110 R11: 0000000000000206 R12: 0000200000001108 [ 924.368023][T21838] R13: 0000200000001110 R14: 00007f259fde5fd8 R15: 0000000000000000 [ 924.368053][T21838] [ 924.716520][T21840] netlink: 'syz.4.5857': attribute type 2 has an invalid length. [ 924.945891][ T44] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 924.945923][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.102248][ T44] usb 3-1: can't set config #168, error -71 [ 925.106838][ T44] usb 3-1: USB disconnect, device number 3 [ 927.436699][T21840] : entered promiscuous mode [ 928.425590][T21864] FAULT_INJECTION: forcing a failure. [ 928.425590][T21864] name failslab, interval 1, probability 100, space 0, times 0 [ 928.425626][T21864] CPU: 1 UID: 0 PID: 21864 Comm: syz.2.5864 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 928.425648][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.425660][T21864] Call Trace: [ 928.425667][T21864] [ 928.425674][T21864] dump_stack_lvl+0xe8/0x150 [ 928.425702][T21864] should_fail_ex+0x467/0x600 [ 928.425731][T21864] should_failslab+0xa8/0x100 [ 928.425752][T21864] __kmalloc_cache_noprof+0xa1/0x670 [ 928.425777][T21864] ? xdp_umem_create+0x58/0x890 [ 928.425800][T21864] ? xdp_umem_create+0x58/0x890 [ 928.425832][T21864] xdp_umem_create+0x58/0x890 [ 928.425863][T21864] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 928.425890][T21864] ? mutex_lock_nested+0x152/0x1d0 [ 928.425912][T21864] ? xsk_setsockopt+0x6b0/0x960 [ 928.425933][T21864] xsk_setsockopt+0x82f/0x960 [ 928.425955][T21864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 928.425980][T21864] ? __fget_files+0x2a/0x420 [ 928.425997][T21864] ? __fget_files+0x2a/0x420 [ 928.426010][T21864] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 928.426030][T21864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 928.426051][T21864] do_sock_setsockopt+0x17c/0x1b0 [ 928.426075][T21864] __x64_sys_setsockopt+0x143/0x1b0 [ 928.426100][T21864] do_syscall_64+0x17b/0x530 [ 928.426116][T21864] ? irqentry_exit+0x10f/0x8f0 [ 928.426129][T21864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.426145][T21864] ? clear_bhb_loop+0x40/0x90 [ 928.426163][T21864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.426179][T21864] RIP: 0033:0x7fce09b0e0d9 [ 928.426195][T21864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.426209][T21864] RSP: 002b:00007fce07d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 928.426226][T21864] RAX: ffffffffffffffda RBX: 00007fce09d95fa0 RCX: 00007fce09b0e0d9 [ 928.426237][T21864] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 928.426247][T21864] RBP: 00007fce07d66090 R08: 0000000000000020 R09: 0000000000000000 [ 928.426258][T21864] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 928.426268][T21864] R13: 00007fce09d96038 R14: 00007fce09d95fa0 R15: 00007fff26e83fe8 [ 928.426294][T21864] [ 928.766277][T21868] FAULT_INJECTION: forcing a failure. [ 928.766277][T21868] name failslab, interval 1, probability 100, space 0, times 0 [ 928.766306][T21868] CPU: 0 UID: 0 PID: 21868 Comm: syz.2.5865 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 928.766325][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.766335][T21868] Call Trace: [ 928.766342][T21868] [ 928.766350][T21868] dump_stack_lvl+0xe8/0x150 [ 928.766377][T21868] should_fail_ex+0x467/0x600 [ 928.766405][T21868] should_failslab+0xa8/0x100 [ 928.766433][T21868] kmem_cache_alloc_node_noprof+0xac/0x660 [ 928.766454][T21868] ? __alloc_skb+0x1d7/0x7a0 [ 928.766473][T21868] ? __alloc_skb+0x1d7/0x7a0 [ 928.766497][T21868] __alloc_skb+0x1d7/0x7a0 [ 928.766520][T21868] netlink_sendmsg+0x5d4/0xb40 [ 928.766552][T21868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.766576][T21868] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 928.766603][T21868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 928.766626][T21868] ? arch_stack_walk+0xfb/0x150 [ 928.766652][T21868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.766673][T21868] sock_sendmsg_nosec+0x13a/0x180 [ 928.766694][T21868] ____sys_sendmsg+0x565/0x870 [ 928.766725][T21868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.766757][T21868] ? import_iovec+0x73/0xa0 [ 928.766790][T21868] ___sys_sendmsg+0x2a5/0x360 [ 928.766810][T21868] ? __lock_acquire+0x6df/0x2e40 [ 928.766826][T21868] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.766872][T21868] ? __fget_files+0x2a/0x420 [ 928.766886][T21868] ? __fget_files+0x3a8/0x420 [ 928.766908][T21868] __x64_sys_sendmsg+0x1b7/0x290 [ 928.766934][T21868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.766971][T21868] do_syscall_64+0x17b/0x530 [ 928.766988][T21868] ? irqentry_exit+0x10f/0x8f0 [ 928.767003][T21868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.767020][T21868] ? clear_bhb_loop+0x40/0x90 [ 928.767040][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.767056][T21868] RIP: 0033:0x7fce09b0e0d9 [ 928.767071][T21868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.767084][T21868] RSP: 002b:00007fce07d66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.767102][T21868] RAX: ffffffffffffffda RBX: 00007fce09d95fa0 RCX: 00007fce09b0e0d9 [ 928.767116][T21868] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 928.767128][T21868] RBP: 00007fce07d66090 R08: 0000000000000000 R09: 0000000000000000 [ 928.767141][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.767152][T21868] R13: 00007fce09d96038 R14: 00007fce09d95fa0 R15: 00007fff26e83fe8 [ 928.767182][T21868] [ 929.225608][T21869] program syz.3.5862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.368487][T21865] jffs2: notice: (21865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 929.370350][T21865] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 929.410913][T19389] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 929.563289][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 929.563345][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 929.563372][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.563398][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 929.563423][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 929.564628][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 929.564675][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 929.564700][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.564725][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 929.564750][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 929.567562][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 929.567609][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 929.567636][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.567660][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 929.567685][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 930.186876][T21841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.943381][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.163708][T19389] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 932.163727][T19389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.167165][T19389] usb 3-1: can't set config #168, error -71 [ 932.168655][T19389] usb 3-1: USB disconnect, device number 4 [ 932.242838][T21841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.029385][T21841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.834961][T21841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.750916][ T1010] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.835913][ T1010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.018819][ T157] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.189209][ T164] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.702041][T21902] loop0: detected capacity change from 0 to 293 [ 939.920330][T21907] jffs2: notice: (21907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 940.296151][T21905] (syz.3.5872,21905,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 940.296234][T21905] (syz.3.5872,21905,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 940.296257][T21905] (syz.3.5872,21905,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 940.296277][T21905] (syz.3.5872,21905,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 941.044126][T21912] program syz.5.5876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 942.590870][T19389] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 942.746455][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 942.746511][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 942.746539][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.746566][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 942.746592][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 942.748012][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 942.748060][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 942.748085][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.748110][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 942.748135][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 942.749849][T19389] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 942.749895][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 942.749922][T19389] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.749947][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 942.749972][T19389] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 943.653896][T21936] FAULT_INJECTION: forcing a failure. [ 943.653896][T21936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.653929][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.4.5883 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 943.653949][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.653961][T21936] Call Trace: [ 943.653968][T21936] [ 943.653977][T21936] dump_stack_lvl+0xe8/0x150 [ 943.654007][T21936] should_fail_ex+0x467/0x600 [ 943.654035][T21936] _copy_to_user+0x31/0xb0 [ 943.654057][T21936] simple_read_from_buffer+0xe1/0x170 [ 943.654085][T21936] proc_fail_nth_read+0x1be/0x230 [ 943.654109][T21936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.654134][T21936] ? rw_verify_area+0x250/0x4d0 [ 943.654156][T21936] ? tun_chr_write_iter+0xe6/0x210 [ 943.654178][T21936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.654198][T21936] vfs_read+0x219/0xa90 [ 943.654228][T21936] ? __pfx_vfs_read+0x10/0x10 [ 943.654254][T21936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 943.654274][T21936] ? lockdep_hardirqs_on+0x7a/0x110 [ 943.654294][T21936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 943.654314][T21936] ? mutex_lock_nested+0x152/0x1d0 [ 943.654338][T21936] ? fdget_pos+0x252/0x320 [ 943.654367][T21936] ksys_read+0x156/0x270 [ 943.654400][T21936] ? __pfx_ksys_read+0x10/0x10 [ 943.654433][T21936] do_syscall_64+0x17b/0x530 [ 943.654453][T21936] ? irqentry_exit+0x10f/0x8f0 [ 943.654471][T21936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.654491][T21936] ? clear_bhb_loop+0x40/0x90 [ 943.654516][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.654535][T21936] RIP: 0033:0x7f25a1b4e90e [ 943.654551][T21936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 943.654568][T21936] RSP: 002b:00007f259fda3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 943.654588][T21936] RAX: ffffffffffffffda RBX: 00007f259fda46c0 RCX: 00007f25a1b4e90e [ 943.654604][T21936] RDX: 000000000000000f RSI: 00007f259fda40a0 RDI: 0000000000000004 [ 943.654617][T21936] RBP: 00007f259fda4090 R08: 0000000000000000 R09: 0000000000000000 [ 943.654629][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.654641][T21936] R13: 00007f25a1e16218 R14: 00007f25a1e16180 R15: 00007ffe5e909648 [ 943.654672][T21936] [ 944.233000][T21933] program syz.3.5882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 944.824429][T21942] jffs2: notice: (21942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 945.320107][T21948] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 945.320141][T21948] overlayfs: missing 'lowerdir' [ 945.540900][T21948] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5887'. [ 945.651931][T19389] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 945.651963][T19389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.695002][T19389] usb 3-1: can't set config #168, error -71 [ 945.712290][T19389] usb 3-1: USB disconnect, device number 5 [ 945.947875][T21971] program syz.3.5892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.840432][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 946.908396][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 946.977355][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.002807][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.025357][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.298530][T21994] serio: Serial port ttyS3 [ 948.880129][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 949.121518][ T4905] Bluetooth: hci4: command tx timeout [ 949.412855][ T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 949.569406][ T44] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 949.569437][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.569458][ T44] usb 5-1: Product: syz [ 949.569473][ T44] usb 5-1: Manufacturer: syz [ 949.569487][ T44] usb 5-1: SerialNumber: syz [ 949.582174][ T44] r8152-cfgselector 5-1: Unknown version 0x0000 [ 949.582199][ T44] r8152-cfgselector 5-1: config 0 descriptor?? [ 949.791635][ T44] r8152-cfgselector 5-1: Unknown version 0x0000 [ 949.792125][ T44] r8152-cfgselector 5-1: No union descriptors [ 949.817259][ T44] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 949.864659][ T164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.637895][T22051] binder: 22050:22051 ioctl c0306201 0 returned -14 [ 950.670892][T18867] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 950.790383][ T164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.820935][T18867] usb 4-1: Using ep0 maxpacket: 32 [ 950.822609][T18867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.824783][T18867] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 950.824818][T18867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.824836][T18867] usb 4-1: Product: syz [ 950.824843][T18867] usb 4-1: Manufacturer: syz [ 950.824851][T18867] usb 4-1: SerialNumber: syz [ 950.828342][T18867] usb 4-1: config 0 descriptor?? [ 950.933142][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 950.971038][ T201] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 951.039871][T18867] ljca 4-1:0.0: bulk endpoints not found [ 951.051272][T18867] usb 4-1: USB disconnect, device number 104 [ 951.115876][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.115946][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 951.115969][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.125179][ T201] usb 6-1: config 0 has no interfaces? [ 951.128954][ T201] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 951.128981][ T201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 951.128998][ T201] usb 6-1: Product: syz [ 951.129006][ T201] usb 6-1: Manufacturer: syz [ 951.129013][ T201] usb 6-1: SerialNumber: syz [ 951.200211][ T10] usb 5-1: config 0 descriptor?? [ 951.200534][ T201] usb 6-1: config 0 descriptor?? [ 951.204358][ T4905] Bluetooth: hci4: command tx timeout [ 951.231150][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 951.249422][ T164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.392881][T21989] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.393234][T21989] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.393465][T21989] bridge_slave_0: entered allmulticast mode [ 951.396385][T21989] bridge_slave_0: entered promiscuous mode [ 951.399845][T21989] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.400198][T21989] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.400422][T21989] bridge_slave_1: entered allmulticast mode [ 951.404463][T21989] bridge_slave_1: entered promiscuous mode [ 951.435407][ T10] pwc: send_video_command error -71 [ 951.435494][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 951.435601][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 951.494680][ T10] usb 5-1: USB disconnect, device number 37 [ 951.550650][T21989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.910941][T22065] No source specified [ 952.384103][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 953.012969][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.013020][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 953.013042][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.053629][ T10] usb 5-1: config 0 descriptor?? [ 953.078080][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 953.157055][ T164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.274356][T21989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.281019][ T4905] Bluetooth: hci4: command tx timeout [ 953.437222][T21989] team0: Port device team_slave_0 added [ 953.454782][T21989] team0: Port device team_slave_1 added [ 953.546851][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 953.560220][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 953.567860][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 953.570020][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 953.595624][T21989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.595634][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.595649][T21989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.611133][T21989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.611147][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.611173][T21989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.790241][T22073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.830056][T22073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.887981][T19389] usb 6-1: USB disconnect, device number 59 [ 954.077981][T21989] hsr_slave_0: entered promiscuous mode [ 954.102414][T21989] hsr_slave_1: entered promiscuous mode [ 955.369507][ T4905] Bluetooth: hci4: command tx timeout [ 955.684899][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 955.685983][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 955.687904][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 955.688330][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 955.688893][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 955.689293][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 955.689737][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 955.690158][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 955.690556][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 955.691314][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 955.692416][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 955.753346][ T10] pwc: Registered as video103. [ 955.768829][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 955.796650][ T10] usb 5-1: USB disconnect, device number 38 [ 955.860616][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5930'. [ 956.274264][T22095] Flush: task=syz.4.5932[22095] dev=loop7 state=2 [ 956.393277][T22095] Teardown: task=syz.4.5932[22095] dev=loop7 state=2 [ 958.073561][ T164] bridge_slave_1: left allmulticast mode [ 958.073598][ T164] bridge_slave_1: left promiscuous mode [ 958.073861][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.439214][ T164] bridge_slave_0: left allmulticast mode [ 958.439249][ T164] bridge_slave_0: left promiscuous mode [ 958.439531][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.958031][T22126] jffs2: notice: (22126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 962.601796][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.683369][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.724392][ T164] bond0 (unregistering): Released all slaves [ 962.755237][T22157] binder_alloc: 22156: pid 22156 spamming oneway? 1 buffers allocated for a total size of 4096 [ 962.755669][T22157] binder_alloc: 22156: pid 22156 spamming oneway? 2 buffers allocated for a total size of 5120 [ 964.931057][ T37] audit: type=1800 audit(1786499818.432:5): pid=22180 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.5960" name="bus" dev="tmpfs" ino=1577 res=0 errno=0 [ 966.685656][T22192] NILFS (nullb0): couldn't find nilfs on the device [ 967.013488][T22195] trusted_key: encrypted_key: insufficient parameters specified [ 967.991740][ T5742] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 968.205417][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 968.206479][ T5742] usb 4-1: not running at top speed; connect to a high speed hub [ 968.208700][ T5742] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 968.208725][ T5742] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 968.208745][ T5742] usb 4-1: config 14 has no interface number 0 [ 968.208761][ T5742] usb 4-1: config 14 has no interface number 1 [ 968.208831][ T5742] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 968.208857][ T5742] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 968.208882][ T5742] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 968.208909][ T5742] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.208936][ T5742] usb 4-1: config 14 interface 57 has no altsetting 0 [ 968.208955][ T5742] usb 4-1: config 14 interface 228 has no altsetting 0 [ 968.327486][ T5742] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 968.327515][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.327534][ T5742] usb 4-1: Product: syz [ 968.327548][ T5742] usb 4-1: Manufacturer: syz [ 968.327563][ T5742] usb 4-1: SerialNumber: syz [ 968.761050][ T201] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 968.800149][ T5742] legousbtower 4-1:14.57: interrupt endpoints not found [ 968.931044][ T201] usb 6-1: Using ep0 maxpacket: 16 [ 969.048680][ T201] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 969.048708][ T201] usb 6-1: config 0 has no interface number 0 [ 969.048810][ T201] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 969.048836][ T201] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 969.106374][ T201] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 969.106418][ T201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.106437][ T201] usb 6-1: Product: syz [ 969.106451][ T201] usb 6-1: Manufacturer: syz [ 969.106463][ T201] usb 6-1: SerialNumber: syz [ 969.872872][ T201] usb 6-1: config 0 descriptor?? [ 969.873421][ T5742] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 969.873562][T22216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 969.873669][T22216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 969.882411][ T5742] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 970.096238][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 970.134063][T22216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 970.134162][T22216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 970.353367][ T201] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 970.997402][ T201] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 970.997432][ T201] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 971.012291][ T201] asix 6-1:0.34: probe with driver asix failed with error -71 [ 971.056802][ T201] usb 6-1: USB disconnect, device number 60 [ 971.197580][T18867] usb 4-1: USB disconnect, device number 105 [ 971.304288][T18867] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 972.647328][ T164] hsr_slave_0: left promiscuous mode [ 972.934741][ T164] hsr_slave_1: left promiscuous mode [ 972.936370][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.936394][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.973758][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.973783][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.487249][ T164] veth1_macvtap: left promiscuous mode [ 974.487354][ T164] veth0_macvtap: left promiscuous mode [ 974.487643][ T164] veth1_vlan: left promiscuous mode [ 974.487843][ T164] veth0_vlan: left promiscuous mode [ 975.375856][T22293] binder_alloc: 22292: pid 22292 spamming oneway? 1 buffers allocated for a total size of 4096 [ 975.376244][T22293] binder_alloc: 22292: pid 22292 spamming oneway? 2 buffers allocated for a total size of 5120 [ 975.519796][T22297] jffs2: notice: (22297) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 975.741602][ T164] team0 (unregistering): Port device team_slave_1 removed [ 975.807951][ T164] team0 (unregistering): Port device team_slave_0 removed [ 975.880955][T19389] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 975.890057][T22304] nvmet: adding nsid 1 to subsystem testnqn [ 976.100860][T19389] usb 6-1: Using ep0 maxpacket: 32 [ 976.107257][ T37] audit: type=1800 audit(1786499829.572:6): pid=22305 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.5990" name="device_path" dev="configfs" ino=101353 res=0 errno=0 [ 976.107305][ T37] audit: type=1800 audit(1786499829.602:7): pid=22304 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.5990" name="enable" dev="configfs" ino=101352 res=0 errno=0 [ 976.107489][T19389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.107518][T19389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.107556][T19389] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 976.107579][T19389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.114426][T19389] usb 6-1: config 0 descriptor?? [ 976.123835][T19389] hub 6-1:0.0: USB hub found [ 976.357279][T19389] hub 6-1:0.0: 1 port detected [ 976.793773][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 976.794034][T19389] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 976.794121][T19389] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 976.927406][T19389] usbhid 6-1:0.0: can't add hid device: -71 [ 976.927505][T19389] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 977.037045][T19389] usb 6-1: USB disconnect, device number 61 [ 977.719226][T21989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 977.739925][T22327] jffs2: notice: (22327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 977.789912][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.798056][T21989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 977.885840][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.890454][T21989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 978.036549][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.078697][T21989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 978.106688][T21989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.865086][ T164] IPVS: stop unused estimator thread 0... [ 978.904279][T21989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.988786][T21989] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.022140][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.022369][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.059960][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.060220][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.805493][T22344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 979.805849][T22344] block device autoloading is deprecated and will be removed. [ 980.574993][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6006'. [ 980.575055][T22368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6006'. [ 981.483268][T19389] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 981.682396][T19389] usb 6-1: Using ep0 maxpacket: 8 [ 981.690156][T19389] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 981.690210][T19389] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.690233][T19389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.690256][T19389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 981.690280][T19389] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.690321][T19389] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 981.690343][T19389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.828404][ T201] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 981.984186][ T201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.984238][ T201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.984262][ T201] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.984284][ T201] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.984325][ T201] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 981.984348][ T201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.077751][T21989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.653477][T21989] veth0_vlan: entered promiscuous mode [ 982.667224][T22378] usbtmc 6-1:16.0: simple control status returned 43 [ 982.672932][ T201] gud 5-1:1.0: Failed to add properties (error=-71) [ 982.672969][ T201] gud 5-1:1.0: probe with driver gud failed with error -71 [ 982.745963][ T201] usb 5-1: USB disconnect, device number 39 [ 982.757735][T21989] veth1_vlan: entered promiscuous mode [ 982.828802][T21989] veth0_macvtap: entered promiscuous mode [ 982.837393][T21989] veth1_macvtap: entered promiscuous mode [ 982.864554][T21989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.894508][ T5792] usb 6-1: USB disconnect, device number 62 [ 982.910015][T21989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.920904][T19389] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 982.938009][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.938244][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.938282][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.938317][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.153949][T19389] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.153980][T19389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 983.154006][T19389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 983.176747][T19389] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 983.176775][T19389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.176795][T19389] usb 4-1: Product: syz [ 983.176808][T19389] usb 4-1: Manufacturer: syz [ 983.176822][T19389] usb 4-1: SerialNumber: syz [ 983.213573][T19389] usb 4-1: config 0 descriptor?? [ 983.214590][T22379] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 983.517940][T19389] rc_core: IR keymap rc-streamzap not found [ 983.517962][T19389] Registered IR keymap rc-empty [ 983.519416][T19389] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 983.546612][T19389] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 985.106830][T19389] usb 4-1: USB disconnect, device number 106 [ 985.188892][T22387] kAFS: bad VL server IP address [ 985.727621][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.727641][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.013605][T20199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.013625][T20199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.170873][ T44] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 986.321965][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 986.324293][ T44] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 986.324317][ T44] usb 5-1: config 0 has no interface number 0 [ 986.324363][ T44] usb 5-1: config 0 interface 184 has no altsetting 0 [ 986.327261][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 986.327288][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.327307][ T44] usb 5-1: Product: syz [ 986.327321][ T44] usb 5-1: Manufacturer: syz [ 986.327332][ T44] usb 5-1: SerialNumber: syz [ 986.330217][ T44] usb 5-1: config 0 descriptor?? [ 986.418078][T18867] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 986.571692][T18867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.571740][T18867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.571765][T18867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.571787][T18867] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.571827][T18867] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 986.571851][T18867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.142603][T18867] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 987.201006][T18867] lg-g15 0003:046D:C222.0009: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 987.249859][T18867] usb 6-1: USB disconnect, device number 63 [ 987.408373][T22412] jffs2: notice: (22412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 987.488675][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 987.488704][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 987.489295][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 987.489319][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 987.489338][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 987.489355][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 987.489635][ T44] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 987.496894][ T44] usb 5-1: USB disconnect, device number 40 [ 988.208692][T22421] block nbd2: NBD_DISCONNECT [ 988.915808][T22425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 988.915824][T22425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 988.915878][T22425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6025'. [ 989.252305][ T5742] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 989.354793][T22410] fido_id[22410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 989.420144][ T5742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 989.420162][ T5742] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 989.420184][ T5742] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 989.420196][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.718832][T22438] »»»»»»: renamed from vlan0 (while UP) [ 989.931970][ T5742] gud 5-1:1.0: probe with driver gud failed with error -71 [ 989.967343][ T5742] usb 5-1: USB disconnect, device number 41 [ 991.823731][T22464] printk: legacy console [ttyS0] disabled can't open /dev/ttyS0: No such file or directory syzkaller syzkaller login: [ 1035.513608][T22897] printk: legacy console [ttyS0] enabled [ 1035.794435][T22906] random: crng reseeded on system resumption [ 1038.842475][T22945] jffs2: notice: (22945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1039.036841][ T164] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.383259][T22953] binder: 22948:22953 ioctl 80049367 200000000040 returned -22 [ 1042.070520][T22985] UDC core: g1: couldn't find an available UDC or it's busy [ 1042.106808][ T37] audit: type=1800 audit(1786499895.612:21): pid=22989 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.6197" name="in_ports" dev="configfs" ino=103984 res=0 errno=0 [ 1042.811127][ T44] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1042.972370][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.972422][ T44] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1042.976463][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1042.976489][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.976516][ T44] usb 4-1: Product: syz [ 1042.976529][ T44] usb 4-1: Manufacturer: syz [ 1042.976541][ T44] usb 4-1: SerialNumber: syz [ 1043.246233][T23006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.116575][T23006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.437709][ T44] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1044.437751][ T44] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1044.437771][ T44] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1044.673242][ T44] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1044.830974][ T44] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1044.871028][ T44] usb 4-1: USB disconnect, device number 109 [ 1044.874054][ T44] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1045.940985][T23040] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1046.251025][ T44] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1046.414364][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.414396][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.414417][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1046.414455][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.414478][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.494984][ T44] usb 4-1: config 0 descriptor?? [ 1046.718684][ T37] audit: type=1800 audit(1786499900.222:22): pid=23053 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.6222" name="zoned" dev="configfs" ino=104207 res=0 errno=0 [ 1046.932143][ T44] hid_parser_main: 5 callbacks suppressed [ 1046.932166][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932194][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932230][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932256][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932280][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932304][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932327][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932351][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932377][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1046.932402][ T44] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1047.060253][ T44] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1047.174701][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1047.199596][ T44] usb 4-1: USB disconnect, device number 110 [ 1047.236663][T23061] netlink: 'syz.2.6224': attribute type 1 has an invalid length. [ 1047.675467][T23058] fido_id[23058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1050.360768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.385674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.390774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.410767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.420766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.430767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1050.440769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1051.722438][T23067] Set syz1 is full, maxelem 65536 reached [ 1051.872587][T23073] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1051.872609][T23073] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1051.872640][T23073] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1052.917031][T23073] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1053.158071][T23093] jffs2: notice: (23093) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1053.578869][T23073] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1053.825703][T23102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1054.225964][T23108] md: could not open device unknown-block(1,0). [ 1054.481639][T23111] kvm: pic: single mode not supported [ 1054.482046][T23111] kvm: pic: level sensitive irq not supported [ 1054.482271][T23111] kvm: pic: level sensitive irq not supported [ 1055.295299][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.689251][T23121] loop7: detected capacity change from 0 to 16384 [ 1056.255976][T23127] jffs2: notice: (23127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1057.680334][ T96] [ 1057.680346][ T96] ====================================================== [ 1057.680355][ T96] WARNING: possible circular locking dependency detected [ 1057.680368][ T96] syzkaller #0 Not tainted [ 1057.680379][ T96] ------------------------------------------------------ [ 1057.680387][ T96] kswapd0/96 is trying to acquire lock: [ 1057.680398][ T96] ffff88803da53158 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x62/0x390 [ 1057.680456][ T96] [ 1057.680456][ T96] but task is already holding lock: [ 1057.680463][ T96] ffffffff8e4eefc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9a4/0x31c0 [ 1057.680509][ T96] [ 1057.680509][ T96] which lock already depends on the new lock. [ 1057.680509][ T96] [ 1057.680516][ T96] [ 1057.680516][ T96] the existing dependency chain (in reverse order) is: [ 1057.680524][ T96] [ 1057.680524][ T96] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1057.680549][ T96] fs_reclaim_acquire+0x71/0x100 [ 1057.680576][ T96] kmem_cache_alloc_noprof+0x5c/0x680 [ 1057.680600][ T96] jffs2_do_read_inode+0x33f/0x6a0 [ 1057.680627][ T96] jffs2_iget+0x228/0xcc0 [ 1057.680644][ T96] jffs2_do_fill_super+0x59d/0xc50 [ 1057.680663][ T96] mtd_get_sb+0x18a/0x410 [ 1057.680679][ T96] get_tree_mtd+0x4bd/0x7d0 [ 1057.680696][ T96] vfs_get_tree+0x92/0x2a0 [ 1057.680717][ T96] do_new_mount+0x319/0xdc0 [ 1057.680732][ T96] __se_sys_mount+0x31d/0x420 [ 1057.680747][ T96] do_syscall_64+0x17b/0x530 [ 1057.680763][ T96] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.680789][ T96] [ 1057.680789][ T96] -> #0 (&f->sem){+.+.}-{4:4}: [ 1057.680812][ T96] __lock_acquire+0x15ff/0x2e40 [ 1057.680827][ T96] lock_acquire+0x115/0x350 [ 1057.680854][ T96] mutex_lock_nested+0x5a/0x1d0 [ 1057.680875][ T96] jffs2_do_clear_inode+0x62/0x390 [ 1057.680903][ T96] evict+0x624/0xb50 [ 1057.680924][ T96] prune_icache_sb+0x223/0x2d0 [ 1057.680941][ T96] super_cache_scan+0x3f5/0x500 [ 1057.680963][ T96] do_shrink_slab+0x6d0/0x10e0 [ 1057.680983][ T96] shrink_slab+0x838/0x1220 [ 1057.681001][ T96] shrink_one+0x2a2/0x730 [ 1057.681018][ T96] shrink_node+0x3303/0x3b60 [ 1057.681035][ T96] kswapd+0x17aa/0x31c0 [ 1057.681057][ T96] kthread+0x388/0x470 [ 1057.681080][ T96] ret_from_fork+0x514/0xb70 [ 1057.681104][ T96] ret_from_fork_asm+0x1a/0x30 [ 1057.681127][ T96] [ 1057.681127][ T96] other info that might help us debug this: [ 1057.681127][ T96] [ 1057.681135][ T96] Possible unsafe locking scenario: [ 1057.681135][ T96] [ 1057.681142][ T96] CPU0 CPU1 [ 1057.681148][ T96] ---- ---- [ 1057.681155][ T96] lock(fs_reclaim); [ 1057.681168][ T96] lock(&f->sem); [ 1057.681182][ T96] lock(fs_reclaim); [ 1057.681196][ T96] lock(&f->sem); [ 1057.681207][ T96] [ 1057.681207][ T96] *** DEADLOCK *** [ 1057.681207][ T96] [ 1057.681213][ T96] locks held by kswapd0/96: 2, last CPU#0: [ 1057.681228][ T96] #0: ffffffff8e4eefc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9a4/0x31c0 [ 1057.681275][ T96] #1: ffff8880354fa0e0 (&type->s_umount_key#58){++++}-{4:4}, at: super_cache_scan+0x94/0x500 [ 1057.681328][ T96] [ 1057.681328][ T96] stack backtrace: [ 1057.681340][ T96] CPU: 0 UID: 0 PID: 96 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1057.681362][ T96] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.681374][ T96] Call Trace: [ 1057.681382][ T96] [ 1057.681390][ T96] dump_stack_lvl+0xe8/0x150 [ 1057.681414][ T96] print_circular_bug+0x2e2/0x300 [ 1057.681438][ T96] check_noncircular+0x12f/0x150 [ 1057.681462][ T96] __lock_acquire+0x15ff/0x2e40 [ 1057.681489][ T96] lock_acquire+0x115/0x350 [ 1057.681517][ T96] ? jffs2_do_clear_inode+0x62/0x390 [ 1057.681548][ T96] ? jffs2_do_clear_inode+0x62/0x390 [ 1057.681578][ T96] ? jffs2_do_clear_inode+0x62/0x390 [ 1057.681605][ T96] mutex_lock_nested+0x5a/0x1d0 [ 1057.681627][ T96] ? jffs2_do_clear_inode+0x62/0x390 [ 1057.681658][ T96] jffs2_do_clear_inode+0x62/0x390 [ 1057.681687][ T96] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 1057.681707][ T96] evict+0x624/0xb50 [ 1057.681734][ T96] ? __pfx_evict+0x10/0x10 [ 1057.681758][ T96] ? __list_lru_walk_one+0x3bf/0x410 [ 1057.681789][ T96] prune_icache_sb+0x223/0x2d0 [ 1057.681809][ T96] ? __pfx_prune_icache_sb+0x10/0x10 [ 1057.681828][ T96] ? list_lru_count_one+0x27/0x2d0 [ 1057.681845][ T96] ? list_lru_count_one+0x27/0x2d0 [ 1057.681862][ T96] ? list_lru_count_one+0x27/0x2d0 [ 1057.681879][ T96] ? list_lru_count_one+0x26b/0x2d0 [ 1057.681897][ T96] super_cache_scan+0x3f5/0x500 [ 1057.681923][ T96] do_shrink_slab+0x6d0/0x10e0 [ 1057.681948][ T96] shrink_slab+0x838/0x1220 [ 1057.681967][ T96] ? shrink_slab+0x1e9/0x1220 [ 1057.681988][ T96] ? __pfx_shrink_slab+0x10/0x10 [ 1057.682007][ T96] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 1057.682032][ T96] shrink_one+0x2a2/0x730 [ 1057.682053][ T96] ? shrink_node+0x2ed4/0x3b60 [ 1057.682071][ T96] shrink_node+0x3303/0x3b60 [ 1057.682089][ T96] ? __pfx___schedule+0x10/0x10 [ 1057.682120][ T96] ? shrink_node+0x2ed4/0x3b60 [ 1057.682144][ T96] ? lock_acquire+0x115/0x350 [ 1057.682171][ T96] ? percpu_ref_put+0x19/0x180 [ 1057.682191][ T96] ? __pfx_shrink_node+0x10/0x10 [ 1057.682210][ T96] ? percpu_ref_put+0x19/0x180 [ 1057.682229][ T96] ? percpu_ref_put+0x19/0x180 [ 1057.682250][ T96] ? mem_cgroup_iter+0x410/0x440 [ 1057.682273][ T96] ? mem_cgroup_iter+0x3b/0x440 [ 1057.682296][ T96] kswapd+0x17aa/0x31c0 [ 1057.682326][ T96] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 1057.682353][ T96] ? kswapd+0x9a4/0x31c0 [ 1057.682381][ T96] ? __pfx_kswapd+0x10/0x10 [ 1057.682407][ T96] ? __lock_acquire+0x6df/0x2e40 [ 1057.682427][ T96] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1057.682446][ T96] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.682475][ T96] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1057.682503][ T96] ? __kthread_parkme+0x71/0x1f0 [ 1057.682525][ T96] ? __kthread_parkme+0x196/0x1f0 [ 1057.682548][ T96] kthread+0x388/0x470 [ 1057.682573][ T96] ? __pfx_kswapd+0x10/0x10 [ 1057.682596][ T96] ? __pfx_kthread+0x10/0x10 [ 1057.682621][ T96] ret_from_fork+0x514/0xb70 [ 1057.682647][ T96] ? __pfx_ret_from_fork+0x10/0x10 [ 1057.682672][ T96] ? __switch_to+0xc89/0x1420 [ 1057.682695][ T96] ? __pfx_kthread+0x10/0x10 [ 1057.682720][ T96] ret_from_fork_asm+0x1a/0x30 [ 1057.682751][ T96] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1059.911786][T20199] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.052005][T20199] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.201733][T20199] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.331993][T20199] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.661094][T20199] bridge_slave_1: left allmulticast mode [ 1060.661116][T20199] bridge_slave_1: left promiscuous mode [ 1060.661259][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.781160][T20199] bridge_slave_0: left allmulticast mode [ 1060.781177][T20199] bridge_slave_0: left promiscuous mode [ 1060.781282][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.351280][T20199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.371069][ T13] smbdirect: ib_dev[syz1] removed [ 1061.431690][T20199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.471730][T20199] bond0 (unregistering): Released all slaves [ 1061.569832][T20199] : left promiscuous mode [ 1062.103500][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1062.484158][ T5252] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1062.740846][T20199] hsr_slave_0: left promiscuous mode [ 1062.780858][T20199] hsr_slave_1: left promiscuous mode [ 1062.781499][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.781512][T20199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.821319][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.821332][T20199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.881156][T20199] veth1_macvtap: left promiscuous mode [ 1062.881192][T20199] veth0_macvtap: left promiscuous mode [ 1062.881281][T20199] veth1_vlan: left promiscuous mode [ 1062.881338][T20199] veth0_vlan: left promiscuous mode [ 1063.371092][T20199] team0 (unregistering): Port device team_slave_1 removed [ 1063.411234][T20199] team0 (unregistering): Port device team_slave_0 removed [ 1063.482477][ T5252] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1063.820652][ T5252] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1064.562152][T20199] IPVS: stop unused estimator thread 0... [ 1064.841753][T20199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.066672][T20199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.282111][T20199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.501731][T20199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.792312][T20199] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.946335][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1066.232080][T20199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.272053][ T5252] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1066.511774][T20199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.534120][ T5252] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1066.772472][T20199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.812171][ T5252] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1067.172123][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1067.531552][T20199] bridge_slave_1: left allmulticast mode [ 1067.531578][T20199] bridge_slave_1: left promiscuous mode [ 1067.531765][T20199] bridge0: port 2(bridge_slave_1) entered disabled state