last executing test programs: 5.161331467s ago: executing program 1 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a010400000900000000000a0000010900010073797a31000000004c00048020000180070001006374000014000280080002400000001708000140000000091800018007000100727400000c0002800800014000000009100001800a0001006c696d69740000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$binfmt_elf64(r3, &(0x7f00000036c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc6, 0xc7, 0x1, 0xf, 0x26cc, 0x3, 0x38, 0x2, 0x272, 0x40, 0x177, 0x75, 0x3f76, 0x38, 0x1, 0x7, 0xf, 0x5}, [{0x70000000, 0x9, 0xffffffff, 0x4, 0x8000, 0x613b3a89, 0x5, 0x42}], "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", ['\x00', '\x00']}, 0x1002) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) mq_open(&(0x7f0000000080)='#N\x00', 0x40, 0x142, &(0x7f0000000100)={0x8000, 0x8, 0x3000000, 0x9}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000100000000010000000100000000000007"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0x1, 0x1}, @ptr={0x70742a85, 0xa0002, 0x0, 0x0, 0x1, 0x80000031}, @ptr={0x70742a85, 0x200001, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.594354483s ago: executing program 0 (id=886): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 4.525104932s ago: executing program 0 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) 4.420104367s ago: executing program 0 (id=888): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x85}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8b, 0x80, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}, {0xa3, &(0x7f00000005c0)=@string={0xa3, 0x3, "d313f1a4efe104f2a23bd6de57747ad95814eb1dd71e36996c9d330787f091ec4c0baf794d437d65989ff242425a6922e3b9a368db1342d8c93e809a84775f90d973ec639dfd201b6de969354683952b63724357d9dddd9d794c9542a37d9665755c336c7955c19af6db36cafa37c044be80a8661b3ed0b7bfd9d6dce45d0b2221ae6e9f2681828be1d8a5c97f7f82d9258168271a54af81e7777feb83c6e36b8f"}}]}) 4.390054833s ago: executing program 2 (id=889): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.266100981s ago: executing program 1 (id=890): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x21, 0x0, 0x0, 0x40000000, {0xa, 0x0, 0x6, @private0}}}, 0x3a) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000b, 0x8012, r0, 0x0) 3.236064557s ago: executing program 0 (id=892): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0xa000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r2, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r3, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x8cc0, 0xfffe, 0x4, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0x8200) pwritev(r4, &(0x7f00000022c0)=[{&(0x7f0000001080)="2fed3656614e32386f7624aa7a4fb7425b3debb06bf6f902109fc225390f56f1947b1283257587945140dc119ea30f2b3f9d811e1f086fe1dd326dd4f603298b1a00a8a45a78db426afefecae353a741d02871607a45bcd8779ac02438977a8e386371bbf17211e327b1f66400bf466755eef540421ef1a1bba982a1934f6830cf0eda638381d74904c51be6d63d61cc566d6c6b0f797b5f9f9f0f139b0ced1bf4f0b4c0ae5c864898ac68e1316ea9640f8dd143a20e2280103a4e50c6c664326eac70a8e157078213ec6dabb5e8bf2f5552df53ce8825aabd3edddda1a36716a78427ad08f7e249d09aff24ca19fa59805e00c4670ee57cdb8383e8f7924cd02c645d1be67b79ee74f623f2fe71f8ed8e545898caad97b33dda9531aa5579559172fba4c88b0ce572a494e0564dd051f0871c2f378a9941aff5e1590333f995e5b8ab16ea70b6ff1a1719b7ba6d6fef6b12349286941ef4986f3c8922a808059f2e1ae44a6201e4beaf753514cf3b1fb0f794f5f239a9190935f6f7a32a6179c1c174d4597d99a8e0f50cca79bc98ff31ad01c78eeffee4a40b2b5cd16c933bf1506cbb9bf74b55eebd4e566721c472b02fa0b36498e22bfbdb3c1511958668a482261151e2116f2912151c09edc65e413ef23e56ed5804403bf947d0f6bd94a0ff41dd225d74ed0b906f22934ebdef209f3d80cdcd819105076f85fcfc0af02694ab8ae66c876b3deda4e249bcf3db0f7e945f0079e26fc168383e5279e21a533beabb2e6c993d833570b50095f9c5cfa4e24169c1fb88b3a36b9eed5b04f67b8a69a94ee597f24f342ee8fc575b8eb5a7d2d5a6a8f0eb6d9cbebfd8e8439fdda26895e0b9cc8e6bbc19b7d8d9eb64428bdf86da4365128380d4af456ac0d09bc37bba6b79cefa59e546959ab356a11742df94ddc95f76db4eca03cea248b300d9525b406a3169e2a3d50fb078ae646462b0e70058d0c2f0aee287ede1b0fdd522eb9226767c09dcf1403dd557fddc5799c269304383cc19abb4a96b711e966c1ba176bf2e375dca5b21d08531c214020d6a51569dbd138d1aa40b2f8169b2dfd460ecdc54151a3d6ee8a1f4a661197ef8d84d9909ec97a58c3d6aa9adef6288802775b708fbf65b2e14ee2712a8376d328fb9435317577b6113115967aca049f652eb384c0bcb23b2c735b8e8b584557b4fd0b833617375d31c267a482788f213c2b950209764e1918ebc31d0d6d2f3353a3342786c0a6800eec30d512e7dd73e2fa711e629d7b718612bfc16bcb157b7f2b34405bb7df03a3f4ac894483b59c259ca0494c8798ef40585703d91b3c5356cd9ef5e5fcad81f2cf8b7b97e4d927e46fb49023c8e7166e4f656290161f46a18ddcccf8f863fd3e9e46737d1be9dcb6e1be6c9ec64c225762d65047150436de23065be12dc68f5b8f33d186cb3656ec80548a1f2abd1dc710b2df3f31ae18088c585be7f11f67a84fa377b0f059ca40a2930aa7915aabba84758700c31a07bbf7d630f0d3b315576e4e4e4a64937af0fb116b74122e8eb84a65f1657cc3f86761fb8b9dd11d39338c432c3d8db190105353d3f9e9f6019b665e26e2437078672c333338f58cd1acfe13613eb290ddef069a0dcb5f040d8b6ee590616fd21ba7f98690d6fdc7a22b74e86010d373cc1614098dbf70bb11e223ba12423fee32c980072f47f36154db4dd6eb3dc6e562eca4c92bbecca86f2d704d1a31dc1d87204213eae14c00f45152a6117f99c24702483579ac9e86c86688497bed8e8017d5f4be44540c7b28d2944d0adb8722a96c9239a9728f57f3e04686ceb7cd1161556c85d1963e25ab3635eecdef0c93ccd13ae3b02c85b0336b759523457669e5e0e3a6db47792c05f6514b97706794c42f17eab9a6dd7975326fb16a7f8a857a100664ed3cbcf3d8cf6b328c9c837a1a0735373ced41a7fbc342d6a93dd57d4f14f9f3e29d7442b9e845f13d2d0acb82efc29cc2e29eb87e209f6f3de4b595b9d9734bdb733315253ea0f5605a660f473a6b7e474d9928f415870373b8662b28b921973fa4e6cdece449d83c9ad1511a6e6e820095961c7a40ae6ae4585d0a491620dc5ffc555cb74b5e5560020f400081916086786cbd8707111401dc85153172369891317b923abd13118e0fa32ab5a4763e0adbfcebcb8129a8261617da7966fb881fa610115ab36bc21ea390f4f5d119fcb9aa8d5483eaab988ed3fe53354abe07dcb88072eec1b1f9023f3f5320c7af40359183ab8378dca192bc74ae62f72573dbd76d5cc50466414835b5d1720a74908407f9cabae9724a71be3aab82a65f811f2dfca9503b66ba8799879fcde1b7f4ab73f82ffd3e6dccf1f04702777ab5f39d96a5b40fdc7eedb9a2882086b4eaeebfed91b1cd6fa4926aed2e6e76b935f71c285ac26c7058a330f179f63b8c0cf591299af869434270ba701b49c846a191cb062277c978540f99a6e93af95fa02ea7bf0052e81630fec6cfd42af7fa08223784400ee90bff7124d550513b558bc44801fc9d846e673553bdedd5f435aba5860e3d41c7096814e5fd0b8ac72e302746ec4e8f3ecaf075f3fac1181547f504edf5ab71b5e680cd08189645658d7027a47b4f58e9770b2de690cf47291585f394320cbc7e17b5d78d19ef1e0b0520dee65b3f613d1b9b34f905471736ee905626c23d9500e0d840298e41f78cbd8a1fada4ee2004c5c08a0ffdf36d70a198833c14a00e164e8a054d69850b219f657faa6b001ae67f8dd95d4437f2408d29c82b6ce17a8138a2213efe574865abe072d45dc05695af5701d1067ec91b258fff93056c44e0af447fadc54b9e299ae3647459be909858e791f45f3ca3047c9b8b91dac42591890ba1592cdf2b5553785f7fc0bd3424600f63399b00790a5ceccb693edfd971ce46a3c0351f084452c7bc4b1c1ab78265645c6d43074490e7fa8013ac38f5da9d205078034ac1a9b6b87b8d5ab33288c6fa92999d3dd7b7ac161169101d7a15fc88993d89cb74fb9f5380cf812dc84da7cfdbeda4f45875069d4075066c8a14a8ddb9e88a0a4cf840eb49f0a416c17fac89571427e187323ab566c83e27cce1c6ced2c93f4114352fe1ce24cfb02376e2f02cb1b207f8025703315717c7d51f5cb0c60f1315b9fcb51dadd015279c63f37313ef69a9d9eec53d0fa0c0f71081fc59de9b58963cbad32a2b738b2559834e7c467fe4c7c308ef8e80fb1a1dce6d073691347c8fb367ff5b5b69339c8185362b768e779b45d49b4a9477da9319b48d034064b3813c0517527de50437392cb43ef113eb7ee74ee5e482b26d93e43fe6750df3567df0a44106923f140f210c0b8be7205c2e32cba1e8ffffcd599c3e78482f77f9fe692d43606e1355bd91e88d21dc572b6fbfbaa744d99f0cd2f4d1a5bca5d8f92fcb76a52de42cc3859b55152ed1a4a9a22f94ed45c93fac25cca80079817fba6d4704b26269d217870133fce4a57388867a39bb138600317c3e4b2cca8d3690c012fd3335f99c867904e0aa81b9db463a5c988d0b44601daa387d3c33ac922161269778d4daa48ee10be6528669dc9ec616de4366564013893ba81d43b9a004eff9527e6f28fc0b34f43dfad093d56c7ec04081b776b85aae2dca27675a74d5c000e1b50e1ef2482128b90b8ee456d37cac618516f583415917d87133ecc66f79a872324a68ec710e2c3d1778696d3ff9826d4fcca87cf339a0aa17bce513ff878386440158c0bd018e0c4deb71ba7862f8c61a0ed9ace33f2f602f20f2117623a40282538ff5a9c4656a45f229e8d04db0b37135318065b960387575a6d4ef7b4bd64d68c323f2deae93a293132ead9224f32ac3db79ff91ad0dcc86223f3f0d82099d4bd3173df9c9d60b08b8223af935199a73baf009009dadce546a43e59322ad73d70bf886df29e4f69357c473b893615cdfad08dc5bd2c2a5354fa91db30b36b0118b15f046f02ea83a056ba80cf24065afb630b3e05450feb0efb6fb267b856e2f979befe702113d4b46c41ebfaec61ec4beefe958b32512da2a4ced00277f9ba08a70a8aadc5654b7b3c18e22829800b345830a3f7b2373b8bce5ecf36171c89b35dc1984cee6c59e4b5caf455c1ed0d8892353c6c60b0f8e40254bb478101897e3ddd42c6be39f2044dd805d7299f71505fd999df44bdf43f57066d0e1f1ca1374559f86c57bb45ca5f3031246fdbf3d68907d8f1d26dbc20b0d2d06cf685388e72127817a2a2f98dd4d9eeeb8295e76dadfea22db6f92a0d1a151f67fea377ea07e85a455b2cca00913e605280ff34d06b81e53873a5e88031221cacd55d3b6b1c49fdd9fcfb75aa8c82f87fcc64a4611bc923e822ce92570a62bbafa25865f4c4cb9c8d10ee2a89c35e157bf0890a29fb54618644e54e9ed7825454727aaf9693dc0f54f15ab7ca6c90303de7ad5e1e0ae09e442f9aa1e57b8b18784f0f739af40b80e7d6604178e2964bd43e3394f43808a374ef64e2003112cb027112cefcac1548c7fc199f3d523a1e825fd371e1b2526ec04dd277be6a45738dfa4e4500176fbb5cb0bc448b13579e94e31ce6290678f3030dd289970a58a86a88b0f180e15920b8b5b025d8c836025ccd9673d35ca6056e1a94b21ba437142e14a7cee7c84945f8d1161bc99b1ef12b9e12f790f0637e5dcdb286384e89f31eb7568c660f986cce729dd61b6b0a446bde829af30a1564cdb5c55d989d7d5a1918a022d5d4fb65c049d259157bb9f60d494a9315f454d47769f634cec71c913f532df9cab1684700d5ad1acae5120c8a6940758023589a3b7f45afb25c48c1e3a9e8c5107e0e50a12fb33af7a0fb5a3d7eaa0bd6a63310c5f6c26f3de894fd032a212d0db23678c588c3194e411d0db7645d5dbcfb42a17a192abc430c223d967b1adb19ec3d003425994db4d74c6d9c0d06829e30bb676e94eb4712eae28db6b06ccf43eb9fc5e16f67b63f61fead6a57963884b51dc58169ae94282c837e835e5714b1b09f6cc4a80c98fff3aa0e3dce85f82dc062298ab6c65572cf082d114740493ce9e9cfd519137ce66880ad63f9ab2c156ee88a3e3c2fbe86ed3b763af117100c06832d0670af5232728c68ddafff0ed0d477281bba73e0742a9a20f5b0c0349afd4e9a2fa333f6c60d276f123e87fe644c96a1baa5be2e4bed02bfe1e8a4ab91ca21329737f4ef3c3455c78d484d4ae1d9a2f67270c10a445a5cabfd95e49fcfa242c020b3214b329cfd10ed8c354a286214bcbdaad661f0d196717f3214f4f1990a9693d5d1f528d43d602443d939e5f98b8230cec67ec93fefc5bdab80a177a9b0a33dcfd66429a835b7cbea4460074c8e14b4465267e8522d011e7d2693e599fde4c29a09ece6624b05de57d039c7041e5fb99720ca03446638098b1486109d7bbed946fa5268c96e9c102d2d6a50b5ddecdda8a3aa863e11eb3614ea2b0d6f8ea140ef610786bdef9844d164ea6db20bf2479b22caf76986ba7d847de6d71a196ffa32d53c7c921cc6bf07a85025fe7bac68e22a6c454f01452669cbee0dfdb86513587cda9956316d9e638297b6a72eefe75c958d8db98f6fdf2d6b221edc3e633f45cad685fe5169f44728f9932476b92917e8f0124f2d3c631b86fffc91a914926bc5a14703dd21dbbfa894184a344616d88483527195210a0c09e9b8f44a2cb1e309be1fc5992c4367b65747aaba7699ff3e134cbda638e1ec1752133ec5549c785fa1a9055fe4657cdbe28f283b78fded574cf9099fe180", 0x1000}, {&(0x7f0000002140)="260504538452e5d4a150b202450f0eb2b7cb05e953c58d0c3c4b56254d7cfc7155ef7abf5c445ee20c85ec7b42cd4d6fe12a350f0bee8489340a3b73f79ce6159b0c1fd09a533321bea277c489037daba63943a325c187480c84c02d0d0050e43a0ecd51c57b5f11d4c6fc653fd195e15cf687f7a1431602c7d5cd6c5fb6748f9d3ad4346096afc7ff19226d1edf3c3bf796055a1db3263e01201f471ab57bc3f6e2bfa65d5d0daefd3abe3f7bea19ea4b933264ba5199108e4ac2bf097f6b395f397ccb7e0ac8c0b8a83822695756eac35aeabc9c72ee4e197b7196c1280685f98a6adb2abb4b70af", 0xe9}, {&(0x7f0000002240)}, {&(0x7f0000002280)="3fb428fa82fe73da50723f77de177a70cc7c99bfce4dcee28020366ac3255a3218e3b18735214bd1ae1390156faec6b0855c686e42b9", 0x36}], 0x4, 0x540, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0xa000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local}}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (async) read$FUSE(r2, &(0x7f000000a3c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r3, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x8cc0, 0xfffe, 0x4, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0x8200) (async) pwritev(r4, &(0x7f00000022c0)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002140)="260504538452e5d4a150b202450f0eb2b7cb05e953c58d0c3c4b56254d7cfc7155ef7abf5c445ee20c85ec7b42cd4d6fe12a350f0bee8489340a3b73f79ce6159b0c1fd09a533321bea277c489037daba63943a325c187480c84c02d0d0050e43a0ecd51c57b5f11d4c6fc653fd195e15cf687f7a1431602c7d5cd6c5fb6748f9d3ad4346096afc7ff19226d1edf3c3bf796055a1db3263e01201f471ab57bc3f6e2bfa65d5d0daefd3abe3f7bea19ea4b933264ba5199108e4ac2bf097f6b395f397ccb7e0ac8c0b8a83822695756eac35aeabc9c72ee4e197b7196c1280685f98a6adb2abb4b70af", 0xe9}, {&(0x7f0000002240)}, {&(0x7f0000002280)="3fb428fa82fe73da50723f77de177a70cc7c99bfce4dcee28020366ac3255a3218e3b18735214bd1ae1390156faec6b0855c686e42b9", 0x36}], 0x4, 0x540, 0xa) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) (async) 2.94311073s ago: executing program 0 (id=895): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) 2.931906085s ago: executing program 3 (id=896): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 2.869694105s ago: executing program 0 (id=897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x24, 0x5d, {0x5d, 0x2, "b29c08e57e55c15d3515e8f9a632261a62e237a9cd9a420651418b2d2739869932e2b369e122c2462ddaa9648d2964153fb738db11e3e83abf516a71d35c7dffe970e31539d8065d8f82e879c78b6c520fe3c6c1b0b774b5a02fab"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0xc, 0x14, "0a07041b8875dfe9adbfd4dd6c94ee48732bde0a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xa3}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.854511339s ago: executing program 3 (id=898): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) syz_usb_connect(0x3, 0x8f1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x44, 0x2b, 0x27, 0x8, 0x5ac, 0x9236, 0x723e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8df, 0x2, 0x1, 0xdf, 0x90, 0xd1, "", [{{0x9, 0x4, 0xe0, 0x40, 0xd, 0x3, 0xbe, 0x0, 0xfa, [@generic={0x7, 0x22, "d1754bc856"}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x31, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x3, 0xe, 0x2, [@generic={0x2e, 0x10, "e7fb74507998552ee1663f3338c9abfcd1c8525aee8a2bb945f8783c1a1df242e45fc13da7171adbd116001e"}, @generic={0x8a, 0x11, "b0c4e9c6191c153e378294e1660d03ecb6efb5fac6596678780063e4efa4416c408c7cb261aebc054612440fb257e6f0557508c5ea8334c8f5ddda4d803d50749726eec64625cc980e0aa0ff02555dd6bb99b3a6bb4721e0ea689ddab382552615d95aa2f0c25edf1a28bb4c4fe8ebac1f562a988f2e2bb8f8ebbd6593fe86f0dcbbf4b18e1da0e5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x70, 0x5, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x6, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x4, 0x47, 0x5, [@generic={0xf3, 0x22, "0f1e62dd9ac0242c5367607f0df09a3405e44669dd1d8ea8a40f0ed3f83b89a3eb8ee91633e53ca4a6f57c48e3148a45a9ee04d39a8d53aa3d7c6c81e29d0fee692e954cf713a0551dd47a5a4827a8c4440dc4a078612281faa801456f9e4076093b1a6832a73fc20bdf5e33632ec0c44beb8eba3bc19e8b25a8b66e40a568ec01f080593ccb8d8569640b70d0a706d75a084b1624ae736aacbc7b05a4a2db93199148560725fec57e98dbae90542ab665b6cf3f3f08362cbb32a5567cc27ff938897c777e573278ae9f296cffaaa1966e9603b1e98cdfd863a5eba689a2640aa1c516d010d3ec71a88277dac9a293d60b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5f, 0x5, 0xf9, [@generic={0x69, 0x2, "59c43545de8693d0a3466376c4ba920ba590d03d077dc4822ed7fd2e5a8c1e3e4aaa294953bd7d729901a462dfae99c7a725c6da154c088620d73156d4defc34ee562b5f27c7728b5764483fa1b831bf92c85f8cb37eae8bd0fccf3fab2c79fb9558fabc95393d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0x5, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x44, 0x4}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x4, 0x0, 0x7f, [@generic={0xf0, 0xb, "5a8e5a536945e812cfb51f999c35a74349717b2baa3bd15ba15a8a8b49c6dbe6b2b0b45af6fcc20a46fa9c3aabad1ac8da6a8a422b2731427d6ca697b343e7113332fc369ef7cc20a99243e3f2beae4a646f9be3f94819285686b0fc710195948349a791679516c67d8bec5fe2f7dcddc8c6f025dd372ab9bb9d6ff7083c4baa256a6b64ba98558327465db4fc46c5932dabb9f53582d6e845c740928a03e8309e0c97a203e10be45121f543786c84013f28421fe900fd8a408739330806e0ddca9bc7602ca2ade9cf525539b5f8031720dd91d85bfabae2fa9004181ae08b3f78afbd8d64f0981f8eb5df4caeb1"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x81, 0x3, 0x5, [@generic={0xb, 0xf, "62d9707817b853bf8c"}, @generic={0xff, 0x21, "bad132cf3997d93a36381c9df0914b6880f39afe32eec6789ff3b66e2d140064e701c1825aa9f01d9613965ee47d80c935ad1f2bd7a5834e7de96d9522b8eb2a856bf4cd358bd1d9fe8ac514946ba01155238f9f0c1e6c229722595790d51f83f2420fc10a8c8e0622e2bef6a1d1ce8836ac7050c91d166c9f21e941254c26fe4f0058ab46917a506cd162c70a66f4213b6fa0313c9802906ba06dc1c0427fb1c243c44bdfab23072f5ef9e31c2ce551bc9f9183778be60441ab651420ca8aac35f5209b9b7214b922cc78a79309ed047fb95ca39cc498894a37466b4664d90c44a2336e6e9c1a352a60d3bc4e1b5d358524c71546d2c88caf73cfee46"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x7, 0x7, [@generic={0xec, 0x14, "8c2861a9b0c828c63841f5e8590ec5343e0cda1d9ef3083da75aa3e7191f14d96c2a675530a7c629d7e65b654851a0fa471b546c4b2051a95219085c43d0731f6b40aac51d6a410388f9359ed526a607d403cbbed5a43d7072af5a4f92df988b8abcc2e1494872d49d182b4dded2f75c8daf9cb3a205b6f7b923eef04d97499f88086fd69f7aee049b4992ff379a458d419650b67737e7069ed143b83df22aa74d7644a16a78f783e139544cadd061d7321685a6839b6787eee58ecdc3a4cb6d858c1b2b2da231f8ae2453683267b49918b72596b1c674fe15241ec5656bd20667ae6340a16cc2bc1130"}, @generic={0xb1, 0xa, "9b0e72f2c2afe1c4f73e3469cd8fd3f060a24b9777aae095285fd2d3e81fb0dcbd1c2a441d14737be36a83c310ca64a1e64b95b6ab5bfd338bc825582f4f3647e4398800e15d02111c9481e6413146af9b48074a524070cbb8fc13b1fd8820cf27ac86a0c4eaf4a5904834330a24889e3879de007be2f4c02d44bd28015177b4422dd6177efda57617b512f26663fc9f05c0424111d564dbba1149a5281fbe0cfab2e660847b93a16b75bd2d3c175c"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x2, 0x5, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x0, 0x1, 0x5, [@generic={0xe3, 0x24, "9d9114e359603d0734d0cb522722fae607332bb4546a168e86486b0f2f85a0b03268df3503d6ba0513c515bf89338e21047de561e2e4408befddff2b5639720ae19ccce659536ece4bb18f6bfe3a2c07b52db755e7631753f076f597d43775f93c635f6cc72e63a7e271ccd09f3508408ab18178d775ae66fd2cea8ee957fa68493063bbd76ce73e223d97a84663d1016d7bde0a72d59c4055e301dc5f06b2edad7f510c50e094eb64ee6d38fee1bdc5935f69d1181c27640c75c93f419b6435101a2788a2a1643873b4775a04433a0aa133902e0f8d6cea5ba1297f84f7a7d168"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x60, 0x9, 0x81, 0x9, [@generic={0x5, 0x2, "6d2418"}, @generic={0xeb, 0x7, "37f0d29e7c6cd638d2d3510d36be830b62a508b3b438197df2f0e7283abba27b12a8583fa114fbc590c20c79728f000d88c5152be07c0b39bd5137732feac9c6c8da26c734b56e33cb3d0504cd2dc402b75ea50e8877992ba2731e27f0666f9ea31c92c3da780f5412ad67c4cdea17ae518e17423b56c960ce9f932138b560179273b6fa4366ff955d4648e4335d1b99139b33d55b2fa7694bb0df45e562871557b8e01259b205127474a588beae53a067a21d472d34e2bb172c458c825675be04260b698fd2b8df91775e0ace087c2849360cd2116cde89b944eea3e3f9100df44f5d5911be912373"}]}}]}}, {{0x9, 0x4, 0x20, 0x3, 0x4, 0xff, 0xb6, 0xb7, 0x91, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b06490e1bf1b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb, 0x1, 0x3}, [@country_functional={0xe, 0x24, 0x7, 0x5, 0x401, [0x3f, 0xc7, 0x3ff, 0x2]}, @dmm={0x7, 0x24, 0x14, 0x300, 0x1}, @ncm={0x6, 0x24, 0x1a, 0xff81, 0x5}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "e3a882a0daa3"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xf, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x30}, [@mbim={0xc, 0x24, 0x1b, 0xfffc, 0x101, 0x8, 0x2, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0x8, 0x5}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x49, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x7, 0x8, 0x8}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0xd, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x6, 0x3, 0x8, 0x10, 0x1}, 0x5b, &(0x7f0000000940)={0x5, 0xf, 0x5b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8, 0x8}, @generic={0x1a, 0x10, 0x4, "593518eb3cdfff047f19d36dd63218b6d321a272fb5be0"}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "6d85cb8de053a2b9bd7be1cf66057f7b"}, @generic={0x17, 0x10, 0x3, "d132aad9d0d0bbb924911c964d25aac8b20b6668"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0xd, 0x925}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4a, &(0x7f0000000a00)=@string={0x4a, 0x3, "d4ed71476560ad492cc77e878cf218a5aa8d5974143caecb7540580fb287debe3cc82b10a07915423e30bc9bb4e9aac5d32a24a1b89b5e1f8663704b18346b029da294d0a247acc7"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x449}}, {0x8f, &(0x7f0000000ac0)=@string={0x8f, 0x3, "3f54111b4d98faee25baa846d1cc6a8c44fb2b28bccc0e46c3d5d6a4e1d7ea4aeeaa69729203d3b4a094c6f5827db8fb33870e00740eaef422e134460412618e3d764409b24cba151e0362e7e8ae32603751121431d136e7b18a50819b207e2435000944ba14d46ef4a4265968c503b2d34ee020b697b78863239f6bd4fab426d8561a9344aa40d37b158885e7"}}]}) syz_usb_connect$uac1(0x2, 0xdf, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x1, 0xc0, 0xfd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x98, 0x3, 0x5c, 0xe9, "296ab0969bab3a9e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0xff, 0x2, "b0ed", "6cca"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0xb7, 0x29, 0xf9}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6a, 0x4, 0x0, 0x6, "5f929130e2d3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0x6, {0x7, 0x25, 0x1, 0xc, 0xa, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0xa, 0xff, "32c6", '}'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0xf, 0x3, "", "cf2d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x5, 0x7, 0x7f, 0x7}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0x7, 0x25, 0x1, 0x8, 0x9, 0x6}}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x200, 0xf, 0x6, 0x6, 0xff, 0x6}, 0x4a, &(0x7f0000000d40)={0x5, 0xf, 0x4a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x2, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xf, 0xd8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x0, 0x7f, 0x9, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf2, 0x2, 0x3, 0xf0f, 0x81, [0xff0000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0xe, 0xa, 0x9}]}, 0x9, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xf402}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x4c34}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42d}}, {0xc7, &(0x7f0000000fc0)=@string={0xc7, 0x3, "c6acdae077a424b2ec60673371fdac43fb373d841147db01f6208d1c84eba747b11bf74b1f334e8e59198f6d3901c8478f19a0750800106c76e8c50396b773afe982e129d203025f55a5cbf527a33c37f75e02794bd5d4f108c8254c95dcc7346856e794148bcf23159bd5a5eee028cd51f92e235ca27357cf2fd953937fc3272dc56494f5a540d5e5471e8d834828f4e16642694cd15f39359bffdba05d5279e96857910959e452861c6cec2d14cdfc5b92512e76500efef585f6fef65f4096a822d8a42a"}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001980)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10804}, 0xc, &(0x7f0000001940)={&(0x7f0000001200)={0x704, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x2c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2c1, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @broadcast, @initial, {0x6, 0x650}}, 0x1, 0x3, 0x35, @val={0x10, 0x1, 0x19}, [{0xdd, 0x2f, "5e1a2216e0f5652ace45d5a0d73e6e744b00fd1aaba0b40020a3a08aff0cca84c661e689fb5fb6c8fec4f2a9200864"}, {0xdd, 0xf7, "a76174bf764d0084b8e1033d3036f733c1ffb1895bfd505735b6f40abf20f84d93ddeb6d472abf77f7b6a48236593a309e7bde2e2bdfcce4a3c515a62e584e3568cbd81ca4b8c5da564a7e710da7b77f1e37d2eab5c23b6a9c755956cd72df6df076bec82cb343600e7d5169215962ad7bb53de7bd7fd8bc95ac661fc5d4bd1202c33538029880911ecb20594e37f0ca4d9865418564390fbcb3f9baf04e55d30f97dc0bf9c449d9ddc484b1796ac031f1257d12d0b79ae854a5fb50d112bf577bda4f3215c00855edd964b17cd3d6ceb94119805446ed98e6baf3031333a985bd5f4dd85467a3191aaa92df0793c0e0ddc54e13f69c94"}, {0xdd, 0xfd, "ad15a89f2ab5420f574c59e5ec5b666500f0383ec36ba46a89a284dae2f629f9b7e8854ec47b7ce9f493ef9e669d2994ef2aa6befb99abe656d5d59fbcc8d0db092a9fa34667446c7739c07d0d4235b1c30b2c25564495a962803f7d5cefb7b36599975cc62f8649c394cbfd6e391d0021a125a91b96d87a512eadded8edabe7550647d33a017c06de7d7017ca4a4133a4763f8b206922d7878a3c444f0f7984e6e8fed21f951a11ef2ce165b0d24d2d4531f4ed137685b71597416f49f9a713bb1b2e76f26d097020292ce4465c56fd9402d54a8df9fcc2ab8a629fd253cdcbb2c18d8f17240b341aa3d9ec5f7bdfb549da257645931ecd22d59d1dfd"}, {0xdd, 0x71, "026f83b4983f163e790f62bfbceba226273067c6193cbde50b77dfa6d2b553a1f90fc3704091d63b3cee664abe998ad7671e9be369e7915ddf59bebee33c3d00d35d9ff1bef8b357860ad5f6425c53d0e8d3ae66042df140cb2e02bf42ffeb55ba287b034afea60968d8cd400115d1bbf1"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x31d7]}, @NL80211_ATTR_FRAME={0x3e3, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x247b}, @device_b, @broadcast, @from_mac=@device_b, {0x1, 0x6}, @value=@ver_80211n={0x0, 0x7, 0x1}}, 0x4, @default, 0x12, @val={0x0, 0x8, @random="7f414a84cf5776f8"}, @val={0x1, 0x4, [{0x60, 0x1}, {0x2}, {0xc}, {0x9}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x2, 0xfc, 0x40, 0xf4f}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x65, 0x20}}, [{0xdd, 0x6a, "f15fd29bbd026b7ca66a2b71cc01e59073d91b463c488d2413ee1aa865ec46f3663e6fef682facedb3af362b0f88a377e5940b0c7124ccc2bdf8ba7e38df3db19fbcb7a395ca98bd37153526abad79082fa6ea4846f494f58769803120d36105f725d25631967a33a9a0"}, {0xdd, 0xab, "bf918d5056e5d8879081c8a25e56ee4d6848aabcbf6b337e3d712d1f23727a3ecbfec4b0af92a07302c4c8f67350e20eac335ce5f7fc7f6744bc37f172f2ab7505d623d317137476ac9e5705b7e54949740a64273cf2ce0c40931b8be3df9eee0c3cb5f2cdb1eefa86bd7e2d0d58fe0f25a04c43d1201a57c1977ac00a3ac98b4179df05fabd4b2eed92957d95cfc25a9e5700f297d888f468b5d250bfee74d4e83f638e8a9fe8da3611cd"}, {0xdd, 0x7e, "cd97f3324c568d15d82c47bf6ccae5a46d4a5efc0963a7d0452aa51e12387149c00377a73f5b4f7b9c6a507e8a80a134f87e0b3cdca25eb56bfa1bd56eb37a7288f69381286e34d3db89112397b4c9696c87dafbdc09422378609a6f4873abb5c2924b56611de0dd151059b012e4f702460058480ac8b36edff766d6ca99"}, {0xdd, 0x81, "caa8575e47b4890efba80c2006f2e26038e87f01e9a68030795b70ff3911184ca36bf966d92555e06172528d73d5042cf0cd87ae39823fde128c81dd9f5b3a56966be8b146163ad53552646683cfe961bb2b8077dfa061dd4b526fb95df1fb59b6b043715c5e5f7abca48d9aa879b1fe9bcad8807c3cec0483ce844fb9479a3f95"}, {0xdd, 0x90, "a77414057c2b80d8cae575e76b0eed757374222be54568f754c6a533269cd4dfa2a3a1a335e63654661b169e3edef2f984c476c27ca0833fec589f1ac85ee52e3c75fa726e65987bd8deec3f8adb24f4028a7b102316363686cf72ce59cdcd621b79318ca80c8722f8aad6c44b35c33bf528ed4f39dc1b6e0a9f753a253d09e8c6805704a990230ee0cf9b9ec344b087"}, {0xdd, 0xdb, "cf03909e9389872402339aed7727bbfdb2c7f48e199f2ae8710b35f84abcbffddc71e23af4ebcac452943977446ea4b6be1c84b9a10012d6792295309861d8b7aed7f91b5adad4b1f80eee87656fdb20c821088a612c4f9c705e8cd3168870d3d5275afb93528ec3fa72a62e00bc6e0bf94416e9103399e5894cd21056e759620f8b39aaaee623e3840d0c5a3046938e7aed7cc029018f9030759f7cdada5feed090c87bb4e935de713c96dfe5915c4c6b2a3172d4fedbcc740307c274b8db5ed4a97f33d5df2fac8433bc287a821762a757e382001c2a3dbc2d55"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8f9a}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x704}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000001}}, './file0\x00'}) sendto$inet6(r2, &(0x7f0000001a00)="214dbc34e9e18ef0710cf00c9a249208c372449b40db58f2ad", 0x19, 0x4000, &(0x7f0000001a40)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3}, 0x1c) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001ac0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r3, 0xc396073984a13c2d, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x68, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001bc0)={0x0, 0x10001, 0x0, [0x0, 0xf74, 0x505fbb4d, 0x8, 0x9], [0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0xff, 0x2, 0x101, 0x7, 0x12e14095, 0x1d, 0x5, 0x5, 0x0, 0x4, 0x1, 0x4, 0xfffffffffffffffa, 0x6, 0x200, 0x6, 0x7, 0x56f, 0xff, 0x8, 0x7fff, 0x0, 0x8000000000000001, 0x6, 0xfffffffffffff801, 0x100000001, 0x6, 0x9, 0x10000, 0x7, 0x100000001, 0x4, 0x4, 0xfffffffffffffff1, 0x1, 0x6, 0xffffffff80000000, 0x4, 0x5, 0x4, 0x0, 0xf, 0x6a6a, 0x2, 0x10001, 0x0, 0xd41, 0x4, 0x2, 0x4, 0x7, 0x8, 0x8, 0x365b0000000, 0x4, 0x6f, 0x1ff, 0x800, 0x7ff, 0x3, 0x4, 0x1, 0x1, 0x1, 0x2, 0x91, 0x7, 0x7f, 0x1, 0x8, 0x80, 0x8, 0xae34, 0x7, 0x0, 0xf, 0x9, 0x7f, 0xed80, 0x5, 0xe995, 0x10001, 0x9, 0xb861, 0xb4, 0x2, 0x2, 0xfffffffffffffffa, 0x1, 0xbd6f, 0xe, 0x4, 0x5, 0x294, 0x100, 0xd, 0x8, 0x9, 0x9, 0x331, 0x7, 0x7ff, 0x5, 0x8, 0xd, 0x4, 0x8, 0xfffffffffffffff8, 0x200, 0x79, 0xb80000000000, 0x5, 0x3, 0x2, 0x280]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002000)={0x0, 0x11, 0x0, [0x3, 0x78b, 0x4c, 0x4, 0x4], [0x4, 0x8, 0x10, 0x90, 0x8000000000000001, 0xc, 0x40, 0xbe55, 0xbb, 0xfffffffffffffff8, 0x3, 0x0, 0x4, 0x7, 0x8, 0x5, 0x1, 0x2, 0x9, 0x8, 0x0, 0x10, 0xffffffffffff0001, 0xf, 0x7, 0xfffffffffffffff1, 0x10000, 0xffffffffffffacd2, 0xbef2, 0xe, 0x0, 0x8000000000000000, 0x8, 0x2, 0x4, 0xffffffffffffff8b, 0x2, 0x7, 0x9, 0x0, 0x6, 0x8, 0x4, 0x5, 0x80, 0x80000000, 0x565e, 0x100000000, 0x8, 0xffffffffffffffff, 0xb76d, 0x0, 0xffffffffffffffe9, 0x2, 0x8, 0xffffffffffffffff, 0x3, 0x2, 0xb6d, 0x7, 0x7, 0x0, 0x5, 0x8, 0x4, 0x4, 0x8000000000000001, 0x8, 0x0, 0x0, 0x6, 0xff, 0x100000000, 0xa, 0x4, 0x5, 0xffffffff80000000, 0x7e96c639, 0x1, 0x63, 0x491, 0x6, 0x2ff, 0x8, 0x6, 0x8, 0x91, 0x401, 0xe0a, 0x2, 0x4, 0x3, 0x46, 0xc, 0x7, 0x1, 0x7, 0xffffffffa3c66547, 0xfffffffffffffffa, 0x2, 0x8000, 0x0, 0x0, 0x1, 0x2, 0xfffffffffffffe01, 0x9, 0x9, 0x401, 0x80000001, 0xffffffffffff0001, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x2, 0xfffffffffffffff8, 0x7d99, 0x8]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002440)={0x1, 0x4, {0x6, @usage=0x8d2, r4, 0x5, 0x64, 0x0, 0x1d0, 0x7, 0x53, @usage=0x2, 0x0, 0xa7f, [0x9, 0x0, 0x8000000000000000, 0x7, 0x3, 0x8]}, {0xcd6, @usage=0x7, 0x0, 0x32, 0x7000, 0x557, 0x4, 0x144, 0x402, @struct={0x401, 0x400}, 0x84e, 0x5, [0x6, 0x7fff, 0x200, 0x7, 0x6, 0x3]}, {0x100000001, @usage=0x7, r5, 0x8, 0xa, 0x8, 0x1, 0x9, 0x10, @usage=0x1, 0x8, 0x1, [0x2, 0x1, 0xa, 0x5, 0xa, 0xffffffffffff9c86]}, {0x2, 0x9, 0x4}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000002880)={{r0}, 0x6, &(0x7f0000002840)=[0x6bb0, 0x0, 0x0, 0x400, 0xfffffffffffffc00, 0x6], 0x2, 0x2, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000002900)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000002a00)={0x8, 0x1e7b, 0x6, 0x8, 0x0, 0x10, 0x0, 0x4, 0x1000}) syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000002ac0)=0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002b00), 0x300, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000002b40)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000002b80)={0x0, 0x9, 0x7, [0xe, 0x7, 0x400, 0x3, 0x2, 0x1, 0x101]}, &(0x7f0000002bc0)=0x16) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000002c00)=@assoc_value={r9, 0x9}, &(0x7f0000002c40)=0x8) connect$inet(r7, &(0x7f0000002c80)={0x2, 0x4e22, @multicast2}, 0x10) r10 = accept$phonet_pipe(r7, &(0x7f0000002cc0), &(0x7f0000002d00)=0x10) getsockopt$PNPIPE_INITSTATE(r10, 0x113, 0x4, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000002dc0)=0x1, 0x4) r11 = syz_clone3(&(0x7f0000003000)={0x4000, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80), {0x14}, &(0x7f0000002ec0)=""/79, 0x4f, &(0x7f0000002f40)=""/88, &(0x7f0000002fc0)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58) syz_open_procfs(r11, &(0x7f0000003080)='net/vlan/config\x00') 1.545939306s ago: executing program 3 (id=899): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000010008"], 0x40}, 0xee00) 1.523230673s ago: executing program 3 (id=900): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) inotify_init1(0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.4610114s ago: executing program 3 (id=901): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x85}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8b, 0x80, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}, {0xbe, &(0x7f00000005c0)=@string={0xbe, 0x3, "d313f1a4efe104f2a23bd6de57747ad95814eb1dd71e36996c9d330787f091ec4c0baf794d437d65989ff242425a6922e3b9a368db1342d8c93e809a84775f90d973ec639dfd201b6de969354683952b63724357d9dddd9d794c9542a37d9665755c336c7955c19af6db36cafa37c044be80a8661b3ed0b7bfd9d6dce45d0b2221ae6e9f2681828be1d8a5c97f7f82d9258168271a54af81e7777feb83c6e36b8f0f6a2bd7076e218eb6b665739c661bec01d741273adfea2f1769a9"}}]}) 1.281537641s ago: executing program 2 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xb0, 0x47, 0x107, 0x1, 0xffffffff, {0x8, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xa6, 0x0, 0x1, [@nested={0x4, 0xa3}, @nested={0x4, 0x7c}, @typed={0x6, 0x86, 0x0, 0x0, @str=':\x00'}]}, @generic="5158bb8043e2b000bf6bf4e4cc5f1cedb20f5420ac375958a2b09dc4e794d709ef3e3020b64f7b2838f03b774e2271e2c573e2cd4266d032475edeec404ea4990784e2aed614c2f42d27bf2a170b37881ad2ae49f1f0550c9e4d16ac3cf9f7fcd575c287b59f258a25cb4a624683a7b3b3e90cec5a"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d5}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x147) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0}, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8e) fcntl$notify(r3, 0x402, 0x80000002) 1.055833732s ago: executing program 1 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_TYPE]}, 0x6}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r6) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r6) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="020026bd7000fbdbdf25070000000c000180080005000200000018d0f8afd9fab8294691a6c46deb4fd20967743cb9926bd800fb6b52e65a1ac69e4e6d4cc0034a9ad55363e9eb48eb7dc800af248cb017c5a2f74257eaabdaf76c4f28069d978a41247bbb1703da65286e5b3886cc171c1e88a59fcfc8de6a92d42f69764855d91383a2688e701364820ebd"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)={0x1c, r2, 0x400, 0x70bd2c, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) 752.849532ms ago: executing program 1 (id=904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x300000000000000, 0x885}, 0x48080) 713.590373ms ago: executing program 2 (id=905): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4) 647.618919ms ago: executing program 1 (id=906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101001100000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844) 624.54983ms ago: executing program 2 (id=907): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 581.06705ms ago: executing program 1 (id=908): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) syz_usb_connect(0x3, 0x8f1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x44, 0x2b, 0x27, 0x8, 0x5ac, 0x9236, 0x723e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8df, 0x2, 0x1, 0xdf, 0x90, 0xd1, "", [{{0x9, 0x4, 0xe0, 0x40, 0xd, 0x3, 0xbe, 0x0, 0xfa, [@generic={0x7, 0x22, "d1754bc856"}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x31, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x3, 0xe, 0x2, [@generic={0x2e, 0x10, "e7fb74507998552ee1663f3338c9abfcd1c8525aee8a2bb945f8783c1a1df242e45fc13da7171adbd116001e"}, @generic={0x8a, 0x11, "b0c4e9c6191c153e378294e1660d03ecb6efb5fac6596678780063e4efa4416c408c7cb261aebc054612440fb257e6f0557508c5ea8334c8f5ddda4d803d50749726eec64625cc980e0aa0ff02555dd6bb99b3a6bb4721e0ea689ddab382552615d95aa2f0c25edf1a28bb4c4fe8ebac1f562a988f2e2bb8f8ebbd6593fe86f0dcbbf4b18e1da0e5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x70, 0x5, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x6, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x4, 0x47, 0x5, [@generic={0xf3, 0x22, "0f1e62dd9ac0242c5367607f0df09a3405e44669dd1d8ea8a40f0ed3f83b89a3eb8ee91633e53ca4a6f57c48e3148a45a9ee04d39a8d53aa3d7c6c81e29d0fee692e954cf713a0551dd47a5a4827a8c4440dc4a078612281faa801456f9e4076093b1a6832a73fc20bdf5e33632ec0c44beb8eba3bc19e8b25a8b66e40a568ec01f080593ccb8d8569640b70d0a706d75a084b1624ae736aacbc7b05a4a2db93199148560725fec57e98dbae90542ab665b6cf3f3f08362cbb32a5567cc27ff938897c777e573278ae9f296cffaaa1966e9603b1e98cdfd863a5eba689a2640aa1c516d010d3ec71a88277dac9a293d60b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5f, 0x5, 0xf9, [@generic={0x69, 0x2, "59c43545de8693d0a3466376c4ba920ba590d03d077dc4822ed7fd2e5a8c1e3e4aaa294953bd7d729901a462dfae99c7a725c6da154c088620d73156d4defc34ee562b5f27c7728b5764483fa1b831bf92c85f8cb37eae8bd0fccf3fab2c79fb9558fabc95393d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0x5, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x44, 0x4}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x4, 0x0, 0x7f, [@generic={0xf0, 0xb, "5a8e5a536945e812cfb51f999c35a74349717b2baa3bd15ba15a8a8b49c6dbe6b2b0b45af6fcc20a46fa9c3aabad1ac8da6a8a422b2731427d6ca697b343e7113332fc369ef7cc20a99243e3f2beae4a646f9be3f94819285686b0fc710195948349a791679516c67d8bec5fe2f7dcddc8c6f025dd372ab9bb9d6ff7083c4baa256a6b64ba98558327465db4fc46c5932dabb9f53582d6e845c740928a03e8309e0c97a203e10be45121f543786c84013f28421fe900fd8a408739330806e0ddca9bc7602ca2ade9cf525539b5f8031720dd91d85bfabae2fa9004181ae08b3f78afbd8d64f0981f8eb5df4caeb1"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x81, 0x3, 0x5, [@generic={0xb, 0xf, "62d9707817b853bf8c"}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x7, 0x7, [@generic={0xec, 0x14, "8c2861a9b0c828c63841f5e8590ec5343e0cda1d9ef3083da75aa3e7191f14d96c2a675530a7c629d7e65b654851a0fa471b546c4b2051a95219085c43d0731f6b40aac51d6a410388f9359ed526a607d403cbbed5a43d7072af5a4f92df988b8abcc2e1494872d49d182b4dded2f75c8daf9cb3a205b6f7b923eef04d97499f88086fd69f7aee049b4992ff379a458d419650b67737e7069ed143b83df22aa74d7644a16a78f783e139544cadd061d7321685a6839b6787eee58ecdc3a4cb6d858c1b2b2da231f8ae2453683267b49918b72596b1c674fe15241ec5656bd20667ae6340a16cc2bc1130"}, @generic={0xb1, 0xa, "9b0e72f2c2afe1c4f73e3469cd8fd3f060a24b9777aae095285fd2d3e81fb0dcbd1c2a441d14737be36a83c310ca64a1e64b95b6ab5bfd338bc825582f4f3647e4398800e15d02111c9481e6413146af9b48074a524070cbb8fc13b1fd8820cf27ac86a0c4eaf4a5904834330a24889e3879de007be2f4c02d44bd28015177b4422dd6177efda57617b512f26663fc9f05c0424111d564dbba1149a5281fbe0cfab2e660847b93a16b75bd2d3c175c"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x2, 0x5, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x0, 0x1, 0x5, [@generic={0xe3, 0x24, "9d9114e359603d0734d0cb522722fae607332bb4546a168e86486b0f2f85a0b03268df3503d6ba0513c515bf89338e21047de561e2e4408befddff2b5639720ae19ccce659536ece4bb18f6bfe3a2c07b52db755e7631753f076f597d43775f93c635f6cc72e63a7e271ccd09f3508408ab18178d775ae66fd2cea8ee957fa68493063bbd76ce73e223d97a84663d1016d7bde0a72d59c4055e301dc5f06b2edad7f510c50e094eb64ee6d38fee1bdc5935f69d1181c27640c75c93f419b6435101a2788a2a1643873b4775a04433a0aa133902e0f8d6cea5ba1297f84f7a7d168"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x60, 0x9, 0x81, 0x9, [@generic={0x5, 0x2, "6d2418"}, @generic={0xeb, 0x7, "37f0d29e7c6cd638d2d3510d36be830b62a508b3b438197df2f0e7283abba27b12a8583fa114fbc590c20c79728f000d88c5152be07c0b39bd5137732feac9c6c8da26c734b56e33cb3d0504cd2dc402b75ea50e8877992ba2731e27f0666f9ea31c92c3da780f5412ad67c4cdea17ae518e17423b56c960ce9f932138b560179273b6fa4366ff955d4648e4335d1b99139b33d55b2fa7694bb0df45e562871557b8e01259b205127474a588beae53a067a21d472d34e2bb172c458c825675be04260b698fd2b8df91775e0ace087c2849360cd2116cde89b944eea3e3f9100df44f5d5911be912373"}]}}]}}, {{0x9, 0x4, 0x20, 0x3, 0x4, 0xff, 0xb6, 0xb7, 0x91, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b06490e1bf1b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb, 0x1, 0x3}, [@country_functional={0xe, 0x24, 0x7, 0x5, 0x401, [0x3f, 0xc7, 0x3ff, 0x2]}, @dmm={0x7, 0x24, 0x14, 0x300, 0x1}, @ncm={0x6, 0x24, 0x1a, 0xff81, 0x5}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "e3a882a0daa3"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xf, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x30}, [@mbim={0xc, 0x24, 0x1b, 0xfffc, 0x101, 0x8, 0x2, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0x8, 0x5}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x49, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x7, 0x8, 0x8}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0xd, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x6, 0x3, 0x8, 0x10, 0x1}, 0x5b, &(0x7f0000000940)={0x5, 0xf, 0x5b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8, 0x8}, @generic={0x1a, 0x10, 0x4, "593518eb3cdfff047f19d36dd63218b6d321a272fb5be0"}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "6d85cb8de053a2b9bd7be1cf66057f7b"}, @generic={0x17, 0x10, 0x3, "d132aad9d0d0bbb924911c964d25aac8b20b6668"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0xd, 0x925}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4a, &(0x7f0000000a00)=@string={0x4a, 0x3, "d4ed71476560ad492cc77e878cf218a5aa8d5974143caecb7540580fb287debe3cc82b10a07915423e30bc9bb4e9aac5d32a24a1b89b5e1f8663704b18346b029da294d0a247acc7"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x449}}, {0x8f, &(0x7f0000000ac0)=@string={0x8f, 0x3, "3f54111b4d98faee25baa846d1cc6a8c44fb2b28bccc0e46c3d5d6a4e1d7ea4aeeaa69729203d3b4a094c6f5827db8fb33870e00740eaef422e134460412618e3d764409b24cba151e0362e7e8ae32603751121431d136e7b18a50819b207e2435000944ba14d46ef4a4265968c503b2d34ee020b697b78863239f6bd4fab426d8561a9344aa40d37b158885e7"}}]}) syz_usb_connect$uac1(0x2, 0xdf, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x1, 0xc0, 0xfd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x98, 0x3, 0x5c, 0xe9, "296ab0969bab3a9e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0xff, 0x2, "b0ed", "6cca"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0xb7, 0x29, 0xf9}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6a, 0x4, 0x0, 0x6, "5f929130e2d3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0x6, {0x7, 0x25, 0x1, 0xc, 0xa, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0xa, 0xff, "32c6", '}'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0xf, 0x3, "", "cf2d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x5, 0x7, 0x7f, 0x7}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0x7, 0x25, 0x1, 0x8, 0x9, 0x6}}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x200, 0xf, 0x6, 0x6, 0xff, 0x6}, 0x4a, &(0x7f0000000d40)={0x5, 0xf, 0x4a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x2, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xf, 0xd8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x0, 0x7f, 0x9, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf2, 0x2, 0x3, 0xf0f, 0x81, [0xff0000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0xe, 0xa, 0x9}]}, 0x9, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xf402}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x4c34}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42d}}, {0xc7, &(0x7f0000000fc0)=@string={0xc7, 0x3, "c6acdae077a424b2ec60673371fdac43fb373d841147db01f6208d1c84eba747b11bf74b1f334e8e59198f6d3901c8478f19a0750800106c76e8c50396b773afe982e129d203025f55a5cbf527a33c37f75e02794bd5d4f108c8254c95dcc7346856e794148bcf23159bd5a5eee028cd51f92e235ca27357cf2fd953937fc3272dc56494f5a540d5e5471e8d834828f4e16642694cd15f39359bffdba05d5279e96857910959e452861c6cec2d14cdfc5b92512e76500efef585f6fef65f4096a822d8a42a"}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001980)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10804}, 0xc, &(0x7f0000001940)={&(0x7f0000001200)={0x704, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x2c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2c1, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @broadcast, @initial, {0x6, 0x650}}, 0x1, 0x3, 0x35, @val={0x10, 0x1, 0x19}, [{0xdd, 0x2f, "5e1a2216e0f5652ace45d5a0d73e6e744b00fd1aaba0b40020a3a08aff0cca84c661e689fb5fb6c8fec4f2a9200864"}, {0xdd, 0xf7, "a76174bf764d0084b8e1033d3036f733c1ffb1895bfd505735b6f40abf20f84d93ddeb6d472abf77f7b6a48236593a309e7bde2e2bdfcce4a3c515a62e584e3568cbd81ca4b8c5da564a7e710da7b77f1e37d2eab5c23b6a9c755956cd72df6df076bec82cb343600e7d5169215962ad7bb53de7bd7fd8bc95ac661fc5d4bd1202c33538029880911ecb20594e37f0ca4d9865418564390fbcb3f9baf04e55d30f97dc0bf9c449d9ddc484b1796ac031f1257d12d0b79ae854a5fb50d112bf577bda4f3215c00855edd964b17cd3d6ceb94119805446ed98e6baf3031333a985bd5f4dd85467a3191aaa92df0793c0e0ddc54e13f69c94"}, {0xdd, 0xfd, "ad15a89f2ab5420f574c59e5ec5b666500f0383ec36ba46a89a284dae2f629f9b7e8854ec47b7ce9f493ef9e669d2994ef2aa6befb99abe656d5d59fbcc8d0db092a9fa34667446c7739c07d0d4235b1c30b2c25564495a962803f7d5cefb7b36599975cc62f8649c394cbfd6e391d0021a125a91b96d87a512eadded8edabe7550647d33a017c06de7d7017ca4a4133a4763f8b206922d7878a3c444f0f7984e6e8fed21f951a11ef2ce165b0d24d2d4531f4ed137685b71597416f49f9a713bb1b2e76f26d097020292ce4465c56fd9402d54a8df9fcc2ab8a629fd253cdcbb2c18d8f17240b341aa3d9ec5f7bdfb549da257645931ecd22d59d1dfd"}, {0xdd, 0x71, "026f83b4983f163e790f62bfbceba226273067c6193cbde50b77dfa6d2b553a1f90fc3704091d63b3cee664abe998ad7671e9be369e7915ddf59bebee33c3d00d35d9ff1bef8b357860ad5f6425c53d0e8d3ae66042df140cb2e02bf42ffeb55ba287b034afea60968d8cd400115d1bbf1"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x31d7]}, @NL80211_ATTR_FRAME={0x3e3, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x247b}, @device_b, @broadcast, @from_mac=@device_b, {0x1, 0x6}, @value=@ver_80211n={0x0, 0x7, 0x1}}, 0x4, @default, 0x12, @val={0x0, 0x8, @random="7f414a84cf5776f8"}, @val={0x1, 0x4, [{0x60, 0x1}, {0x2}, {0xc}, {0x9}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x2, 0xfc, 0x40, 0xf4f}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x65, 0x20}}, [{0xdd, 0x6a, "f15fd29bbd026b7ca66a2b71cc01e59073d91b463c488d2413ee1aa865ec46f3663e6fef682facedb3af362b0f88a377e5940b0c7124ccc2bdf8ba7e38df3db19fbcb7a395ca98bd37153526abad79082fa6ea4846f494f58769803120d36105f725d25631967a33a9a0"}, {0xdd, 0xab, "bf918d5056e5d8879081c8a25e56ee4d6848aabcbf6b337e3d712d1f23727a3ecbfec4b0af92a07302c4c8f67350e20eac335ce5f7fc7f6744bc37f172f2ab7505d623d317137476ac9e5705b7e54949740a64273cf2ce0c40931b8be3df9eee0c3cb5f2cdb1eefa86bd7e2d0d58fe0f25a04c43d1201a57c1977ac00a3ac98b4179df05fabd4b2eed92957d95cfc25a9e5700f297d888f468b5d250bfee74d4e83f638e8a9fe8da3611cd"}, {0xdd, 0x7e, "cd97f3324c568d15d82c47bf6ccae5a46d4a5efc0963a7d0452aa51e12387149c00377a73f5b4f7b9c6a507e8a80a134f87e0b3cdca25eb56bfa1bd56eb37a7288f69381286e34d3db89112397b4c9696c87dafbdc09422378609a6f4873abb5c2924b56611de0dd151059b012e4f702460058480ac8b36edff766d6ca99"}, {0xdd, 0x81, "caa8575e47b4890efba80c2006f2e26038e87f01e9a68030795b70ff3911184ca36bf966d92555e06172528d73d5042cf0cd87ae39823fde128c81dd9f5b3a56966be8b146163ad53552646683cfe961bb2b8077dfa061dd4b526fb95df1fb59b6b043715c5e5f7abca48d9aa879b1fe9bcad8807c3cec0483ce844fb9479a3f95"}, {0xdd, 0x90, "a77414057c2b80d8cae575e76b0eed757374222be54568f754c6a533269cd4dfa2a3a1a335e63654661b169e3edef2f984c476c27ca0833fec589f1ac85ee52e3c75fa726e65987bd8deec3f8adb24f4028a7b102316363686cf72ce59cdcd621b79318ca80c8722f8aad6c44b35c33bf528ed4f39dc1b6e0a9f753a253d09e8c6805704a990230ee0cf9b9ec344b087"}, {0xdd, 0xdb, "cf03909e9389872402339aed7727bbfdb2c7f48e199f2ae8710b35f84abcbffddc71e23af4ebcac452943977446ea4b6be1c84b9a10012d6792295309861d8b7aed7f91b5adad4b1f80eee87656fdb20c821088a612c4f9c705e8cd3168870d3d5275afb93528ec3fa72a62e00bc6e0bf94416e9103399e5894cd21056e759620f8b39aaaee623e3840d0c5a3046938e7aed7cc029018f9030759f7cdada5feed090c87bb4e935de713c96dfe5915c4c6b2a3172d4fedbcc740307c274b8db5ed4a97f33d5df2fac8433bc287a821762a757e382001c2a3dbc2d55"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8f9a}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x704}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000001}}, './file0\x00'}) sendto$inet6(r2, &(0x7f0000001a00)="214dbc34e9e18ef0710cf00c9a249208c372449b40db58f2ad", 0x19, 0x4000, &(0x7f0000001a40)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3}, 0x1c) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001ac0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r3, 0xc396073984a13c2d, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x68, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001bc0)={0x0, 0x10001, 0x0, [0x0, 0xf74, 0x505fbb4d, 0x8, 0x9], [0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0xff, 0x2, 0x101, 0x7, 0x12e14095, 0x1d, 0x5, 0x5, 0x0, 0x4, 0x1, 0x4, 0xfffffffffffffffa, 0x6, 0x200, 0x6, 0x7, 0x56f, 0xff, 0x8, 0x7fff, 0x0, 0x8000000000000001, 0x6, 0xfffffffffffff801, 0x100000001, 0x6, 0x9, 0x10000, 0x7, 0x100000001, 0x4, 0x4, 0xfffffffffffffff1, 0x1, 0x6, 0xffffffff80000000, 0x4, 0x5, 0x4, 0x0, 0xf, 0x6a6a, 0x2, 0x10001, 0x0, 0xd41, 0x4, 0x2, 0x4, 0x7, 0x8, 0x8, 0x365b0000000, 0x4, 0x6f, 0x1ff, 0x800, 0x7ff, 0x3, 0x4, 0x1, 0x1, 0x1, 0x2, 0x91, 0x7, 0x7f, 0x1, 0x8, 0x80, 0x8, 0xae34, 0x7, 0x0, 0xf, 0x9, 0x7f, 0xed80, 0x5, 0xe995, 0x10001, 0x9, 0xb861, 0xb4, 0x2, 0x2, 0xfffffffffffffffa, 0x1, 0xbd6f, 0xe, 0x4, 0x5, 0x294, 0x100, 0xd, 0x8, 0x9, 0x9, 0x331, 0x7, 0x7ff, 0x5, 0x8, 0xd, 0x4, 0x8, 0xfffffffffffffff8, 0x200, 0x79, 0xb80000000000, 0x5, 0x3, 0x2, 0x280]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002000)={0x0, 0x11, 0x0, [0x3, 0x78b, 0x4c, 0x4, 0x4], [0x4, 0x8, 0x10, 0x90, 0x8000000000000001, 0xc, 0x40, 0xbe55, 0xbb, 0xfffffffffffffff8, 0x3, 0x0, 0x4, 0x7, 0x8, 0x5, 0x1, 0x2, 0x9, 0x8, 0x0, 0x10, 0xffffffffffff0001, 0xf, 0x7, 0xfffffffffffffff1, 0x10000, 0xffffffffffffacd2, 0xbef2, 0xe, 0x0, 0x8000000000000000, 0x8, 0x2, 0x4, 0xffffffffffffff8b, 0x2, 0x7, 0x9, 0x0, 0x6, 0x8, 0x4, 0x5, 0x80, 0x80000000, 0x565e, 0x100000000, 0x8, 0xffffffffffffffff, 0xb76d, 0x0, 0xffffffffffffffe9, 0x2, 0x8, 0xffffffffffffffff, 0x3, 0x2, 0xb6d, 0x7, 0x7, 0x0, 0x5, 0x8, 0x4, 0x4, 0x8000000000000001, 0x8, 0x0, 0x0, 0x6, 0xff, 0x100000000, 0xa, 0x4, 0x5, 0xffffffff80000000, 0x7e96c639, 0x1, 0x63, 0x491, 0x6, 0x2ff, 0x8, 0x6, 0x8, 0x91, 0x401, 0xe0a, 0x2, 0x4, 0x3, 0x46, 0xc, 0x7, 0x1, 0x7, 0xffffffffa3c66547, 0xfffffffffffffffa, 0x2, 0x8000, 0x0, 0x0, 0x1, 0x2, 0xfffffffffffffe01, 0x9, 0x9, 0x401, 0x80000001, 0xffffffffffff0001, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x2, 0xfffffffffffffff8, 0x7d99, 0x8]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002440)={0x1, 0x4, {0x6, @usage=0x8d2, r4, 0x5, 0x64, 0x0, 0x1d0, 0x7, 0x53, @usage=0x2, 0x0, 0xa7f, [0x9, 0x0, 0x8000000000000000, 0x7, 0x3, 0x8]}, {0xcd6, @usage=0x7, 0x0, 0x32, 0x7000, 0x557, 0x4, 0x144, 0x402, @struct={0x401, 0x400}, 0x84e, 0x5, [0x6, 0x7fff, 0x200, 0x7, 0x6, 0x3]}, {0x100000001, @usage=0x7, r5, 0x8, 0xa, 0x8, 0x1, 0x9, 0x10, @usage=0x1, 0x8, 0x1, [0x2, 0x1, 0xa, 0x5, 0xa, 0xffffffffffff9c86]}, {0x2, 0x9, 0x4}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000002880)={{r0}, 0x6, &(0x7f0000002840)=[0x6bb0, 0x0, 0x0, 0x400, 0xfffffffffffffc00, 0x6], 0x2, 0x2, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000002900)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000002a00)={0x8, 0x1e7b, 0x6, 0x8, 0x0, 0x10, 0x0, 0x4, 0x1000}) syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000002ac0)=0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002b00), 0x300, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000002b40)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000002b80)={0x0, 0x9, 0x7, [0xe, 0x7, 0x400, 0x3, 0x2, 0x1, 0x101]}, &(0x7f0000002bc0)=0x16) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000002c00)=@assoc_value={r9, 0x9}, &(0x7f0000002c40)=0x8) connect$inet(r7, &(0x7f0000002c80)={0x2, 0x4e22, @multicast2}, 0x10) r10 = accept$phonet_pipe(r7, &(0x7f0000002cc0), &(0x7f0000002d00)=0x10) getsockopt$PNPIPE_INITSTATE(r10, 0x113, 0x4, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000002dc0)=0x1, 0x4) r11 = syz_clone3(&(0x7f0000003000)={0x4000, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80), {0x14}, &(0x7f0000002ec0)=""/79, 0x4f, &(0x7f0000002f40)=""/88, &(0x7f0000002fc0)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58) syz_open_procfs(r11, &(0x7f0000003080)='net/vlan/config\x00') 547.735644ms ago: executing program 2 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./debug/page_tables/kernel\x00', &(0x7f0000000080)='nfs\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) 451.678045ms ago: executing program 2 (id=910): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=911): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000002181a1180002000600142603600e1208000f000000400100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 0s ago: executing program 3 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x27}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x54}}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xb0, 0x47, 0x107, 0x1, 0xffffffff, {0x8, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xa6, 0x0, 0x1, [@nested={0x4, 0xa3}, @nested={0x4, 0x7c}, @typed={0x6, 0x86, 0x0, 0x0, @str=':\x00'}]}, @generic="5158bb8043e2b000bf6bf4e4cc5f1cedb20f5420ac375958a2b09dc4e794d709ef3e3020b64f7b2838f03b774e2271e2c573e2cd4266d032475edeec404ea4990784e2aed614c2f42d27bf2a170b37881ad2ae49f1f0550c9e4d16ac3cf9f7fcd575c287b59f258a25cb4a624683a7b3b3e90cec5a"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d5}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x147) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0}, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8e) fcntl$notify(r4, 0x402, 0x80000002) kernel console output (not intermixed with test programs): 5404][ T7603] RIP: 0033:0x7f214899e159 [ 182.255456][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.255500][ T7603] RSP: 002b:00007f21497c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 182.255562][ T7603] RAX: ffffffffffffffda RBX: 00007f2148c25fa0 RCX: 00007f214899e159 [ 182.255604][ T7603] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 182.255639][ T7603] RBP: 00007f2148a3506b R08: 0000000000000000 R09: 0000000000000000 [ 182.255674][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.255702][ T7603] R13: 00007f2148c26038 R14: 00007f2148c25fa0 R15: 00007ffcf15c1cb8 [ 182.255805][ T7603] [ 182.544473][ T5601] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 182.573886][ T5720] usbhid 2-1:0.0: can't add hid device: -71 [ 182.574118][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 182.593664][ T5720] usb 2-1: USB disconnect, device number 21 [ 182.705752][ T5601] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 182.709349][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.709402][ T5601] usb 1-1: Product: syz [ 182.709418][ T5601] usb 1-1: Manufacturer: syz [ 182.709433][ T5601] usb 1-1: SerialNumber: syz [ 183.146991][ T7603] CIFS: Attempting to mount //127.0.0.1/share [ 183.187097][ T7603] CIFS: VFS: Error connecting to socket. Aborting operation. [ 183.187426][ T7603] CIFS: VFS: cifs_mount failed w/return code = -111 [ 183.224140][ T5697] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 183.270164][ T5601] rtl8150 1-1:1.0: couldn't reset the device [ 183.270500][ T5601] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 183.291979][ T5601] usb 1-1: USB disconnect, device number 31 [ 183.355012][ T5697] usb 4-1: device descriptor read/64, error -71 [ 183.389276][ T5718] usb 3-1: USB disconnect, device number 25 [ 183.594140][ T5697] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 183.724167][ T5697] usb 4-1: device descriptor read/64, error -71 [ 183.835770][ T5697] usb usb4-port1: attempt power cycle [ 183.846754][ T5718] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 183.873882][ T4928] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 183.873915][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 183.873951][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.873968][ T4928] Workqueue: hci2 hci_rx_work [ 183.874020][ T4928] Call Trace: [ 183.874029][ T4928] [ 183.874039][ T4928] dump_stack_lvl+0xe8/0x150 [ 183.874069][ T4928] sysfs_create_dir_ns+0x271/0x2a0 [ 183.874101][ T4928] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.874132][ T4928] ? do_raw_spin_unlock+0xf5/0x200 [ 183.874169][ T4928] kobject_add_internal+0x622/0xcd0 [ 183.874210][ T4928] kobject_add+0x163/0x240 [ 183.874248][ T4928] ? __pfx_kobject_add+0x10/0x10 [ 183.874292][ T4928] ? get_device_parent+0x366/0x3a0 [ 183.874329][ T4928] device_add+0x3fa/0xb80 [ 183.874361][ T4928] hci_conn_add_sysfs+0xd5/0x210 [ 183.874399][ T4928] le_conn_complete_evt+0x10b2/0x17a0 [ 183.874428][ T4928] ? le_conn_complete_evt+0x210/0x17a0 [ 183.874456][ T4928] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 183.874484][ T4928] ? __mutex_unlock_slowpath+0x731/0x900 [ 183.874517][ T4928] ? skb_pull_data+0xf0/0x200 [ 183.874570][ T4928] hci_le_conn_complete_evt+0x187/0x470 [ 183.874604][ T4928] hci_event_packet+0x67a/0xf10 [ 183.874647][ T4928] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.874670][ T4928] ? __pfx_hci_event_packet+0x10/0x10 [ 183.874709][ T4928] ? kcov_remote_start+0x523/0x7e0 [ 183.874740][ T4928] ? hci_send_to_monitor+0xdf/0x600 [ 183.874773][ T4928] hci_rx_work+0x2b4/0x1110 [ 183.874816][ T4928] ? process_scheduled_works+0x97a/0x1630 [ 183.874849][ T4928] process_scheduled_works+0xc3d/0x1630 [ 183.874922][ T4928] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.874975][ T4928] ? assign_work+0x3cf/0x5d0 [ 183.875013][ T4928] worker_thread+0xa47/0xfb0 [ 183.875061][ T4928] ? __kthread_parkme+0x71/0x1f0 [ 183.875108][ T4928] kthread+0x38b/0x480 [ 183.875133][ T4928] ? __pfx_worker_thread+0x10/0x10 [ 183.875163][ T4928] ? __pfx_kthread+0x10/0x10 [ 183.875189][ T4928] ret_from_fork+0x514/0xb70 [ 183.875226][ T4928] ? __pfx_ret_from_fork+0x10/0x10 [ 183.875268][ T4928] ? __switch_to+0xc78/0x1410 [ 183.875301][ T4928] ? __pfx_kthread+0x10/0x10 [ 183.875327][ T4928] ret_from_fork_asm+0x1a/0x30 [ 183.875384][ T4928] [ 183.875871][ T4928] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.875991][ T4928] Bluetooth: hci2: failed to register connection device [ 184.046425][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.052456][ T5718] usb 3-1: not running at top speed; connect to a high speed hub [ 184.052556][ T5718] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 184.081201][ T5718] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.081284][ T5718] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.119406][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.119481][ T5718] usb 3-1: Product: syz [ 184.119613][ T5718] usb 3-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁쨶㟺䓀肾暨㸛럐񿳖巤∋긡齮脦讂즥罿脥❨吚膯矧욃毣ྏ⭪ߗⅮ뚎斶鱳᭦Ǭ䇗㨧ᜯꥩ쁅뵙⤵ᬓ퇘䥨ᡉ䮤➖樨ᦳ핢 [ 184.119715][ T5718] usb 3-1: SerialNumber: syz [ 184.164480][ T5601] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 184.274236][ T5697] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 184.295046][ T5697] usb 4-1: device descriptor read/8, error -71 [ 184.324369][ T5601] usb 2-1: Using ep0 maxpacket: 16 [ 184.325690][ T5601] usb 2-1: New USB device found: idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 184.327047][ T5601] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 184.327073][ T5601] usb 2-1: config 0 has no interface number 0 [ 184.327143][ T5601] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 102, changing to 10 [ 184.327173][ T5601] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 24624, setting to 1024 [ 184.330390][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.330416][ T5601] usb 2-1: Product: syz [ 184.330433][ T5601] usb 2-1: Manufacturer: syz [ 184.330475][ T5601] usb 2-1: SerialNumber: syz [ 184.334280][ T5601] usb 2-1: config 0 descriptor?? [ 184.380623][ T5601] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 184.443380][ T5718] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 184.466432][ T5718] usb 3-1: USB disconnect, device number 26 [ 184.544240][ T5697] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 184.568815][ T5697] usb 4-1: device descriptor read/8, error -71 [ 184.593637][ T5601] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 184.608514][ T5601] usb 2-1: USB disconnect, device number 22 [ 184.631866][ T5601] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 184.637850][ T5601] cypress_m8 2-1:0.35: device disconnected [ 184.674572][ T5697] usb usb4-port1: unable to enumerate USB device [ 184.867654][ T7630] mmap: syz.0.700 (7630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.047269][ T7632] netlink: 168 bytes leftover after parsing attributes in process `syz.2.701'. [ 185.094318][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 185.094357][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 185.424176][ T5720] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 185.495600][ T5697] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 185.524192][ T27] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 185.575000][ T5720] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 185.576233][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.576264][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.576288][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.576340][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.583606][ T5720] usb 3-1: config 0 descriptor?? [ 185.644443][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 185.646630][ T5697] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 185.647994][ T5697] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.648025][ T5697] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.648072][ T5697] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 185.648100][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.648132][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.677041][ T5697] usb 2-1: config 0 descriptor?? [ 185.684445][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 185.689974][ T27] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 185.733309][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.762294][ T27] usb 1-1: config 0 descriptor?? [ 185.776977][ T27] gspca_main: sunplus-2.14.0 probing 041e:400b [ 185.944175][ T4928] Bluetooth: hci2: command tx timeout [ 186.080161][ T5720] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 186.136283][ T7643] netlink: 108 bytes leftover after parsing attributes in process `syz.3.705'. [ 186.142461][ T7643] FAULT_INJECTION: forcing a failure. [ 186.142461][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.142493][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.3.705 Not tainted syzkaller #0 PREEMPT(full) [ 186.142518][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.142537][ T7643] Call Trace: [ 186.142546][ T7643] [ 186.142560][ T7643] dump_stack_lvl+0xe8/0x150 [ 186.142595][ T7643] should_fail_ex+0x3eb/0x540 [ 186.142626][ T7643] _copy_to_user+0x31/0xb0 [ 186.142656][ T7643] simple_read_from_buffer+0xe1/0x170 [ 186.142687][ T7643] proc_fail_nth_read+0x1bb/0x230 [ 186.142721][ T7643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.142775][ T7643] ? rw_verify_area+0x24a/0x4c0 [ 186.142804][ T7643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.142833][ T7643] vfs_read+0x213/0xa80 [ 186.142865][ T7643] ? __pfx___mutex_lock+0x10/0x10 [ 186.142894][ T7643] ? __pfx_vfs_read+0x10/0x10 [ 186.142922][ T7643] ? __fget_files+0x2a/0x420 [ 186.142945][ T7643] ? __fget_files+0x3a2/0x420 [ 186.142968][ T7643] ? __fget_files+0x2a/0x420 [ 186.142997][ T7643] ? fdget+0x1ac/0x250 [ 186.143028][ T7643] ksys_read+0x150/0x270 [ 186.143057][ T7643] ? __pfx_ksys_read+0x10/0x10 [ 186.143096][ T7643] do_syscall_64+0x166/0x520 [ 186.143122][ T7643] ? trace_irq_disable+0x3b/0x140 [ 186.143148][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.143172][ T7643] ? clear_bhb_loop+0x70/0xc0 [ 186.143200][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.143223][ T7643] RIP: 0033:0x7f837ed5e98e [ 186.143244][ T7643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.143264][ T7643] RSP: 002b:00007f837fc43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.143288][ T7643] RAX: ffffffffffffffda RBX: 00007f837fc446c0 RCX: 00007f837ed5e98e [ 186.143305][ T7643] RDX: 000000000000000f RSI: 00007f837fc440a0 RDI: 0000000000000004 [ 186.143320][ T7643] RBP: 00007f837fc44090 R08: 0000000000000000 R09: 0000000000000000 [ 186.143335][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.143349][ T7643] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 186.143385][ T7643] [ 186.334963][ T5697] usbhid 2-1:0.0: can't add hid device: -71 [ 186.335362][ T5697] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 186.402409][ T5697] usb 2-1: USB disconnect, device number 23 [ 186.452659][ T27] gspca_sunplus: reg_r err -32 [ 186.452762][ T27] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 186.492557][ T7645] jffs2: notice: (7645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.533176][ T5720] usb 3-1: USB disconnect, device number 27 [ 186.556718][ T7642] fido_id[7642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 186.581788][ T7645] FAULT_INJECTION: forcing a failure. [ 186.581788][ T7645] name failslab, interval 1, probability 0, space 0, times 0 [ 186.582730][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.3.706 Not tainted syzkaller #0 PREEMPT(full) [ 186.582760][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.582775][ T7645] Call Trace: [ 186.582784][ T7645] [ 186.582801][ T7645] dump_stack_lvl+0xe8/0x150 [ 186.582843][ T7645] should_fail_ex+0x3eb/0x540 [ 186.582875][ T7645] should_failslab+0xa8/0x100 [ 186.582907][ T7645] ? security_inode_alloc+0x39/0x310 [ 186.582933][ T7645] kmem_cache_alloc_noprof+0x9c/0x600 [ 186.582960][ T7645] ? __pfx_make_kgid+0x10/0x10 [ 186.582984][ T7645] ? security_inode_alloc+0x39/0x310 [ 186.583017][ T7645] security_inode_alloc+0x39/0x310 [ 186.583045][ T7645] inode_init_always_gfp+0x97e/0xd30 [ 186.583075][ T7645] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 186.583109][ T7645] alloc_inode+0x82/0x1b0 [ 186.583137][ T7645] new_inode+0x1f/0x170 [ 186.583166][ T7645] shmem_get_inode+0x3a4/0x1030 [ 186.583209][ T7645] ? __pfx_shmem_get_inode+0x10/0x10 [ 186.583240][ T7645] ? from_kgid+0x1c6/0x660 [ 186.583265][ T7645] ? make_vfsuid+0x49/0xa0 [ 186.583300][ T7645] ? generic_permission+0x2ba/0x660 [ 186.583328][ T7645] shmem_mknod+0x17d/0x340 [ 186.583355][ T7645] shmem_mkdir+0x33/0x70 [ 186.583392][ T7645] vfs_mkdir+0x40e/0x630 [ 186.583432][ T7645] filename_mkdirat+0x285/0x510 [ 186.583463][ T7645] ? __might_fault+0xaf/0x130 [ 186.583502][ T7645] ? __pfx_filename_mkdirat+0x10/0x10 [ 186.583539][ T7645] ? do_getname+0x151/0x250 [ 186.583577][ T7645] __se_sys_mkdirat+0x35/0x150 [ 186.583612][ T7645] do_syscall_64+0x166/0x520 [ 186.583639][ T7645] ? trace_irq_disable+0x3b/0x140 [ 186.583666][ T7645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.583691][ T7645] ? clear_bhb_loop+0x70/0xc0 [ 186.583719][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.583742][ T7645] RIP: 0033:0x7f837ed9e159 [ 186.583764][ T7645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.583785][ T7645] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 186.583818][ T7645] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 186.583835][ T7645] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 186.583852][ T7645] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 186.583868][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.583883][ T7645] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 186.583926][ T7645] [ 187.103737][ T7652] FAULT_INJECTION: forcing a failure. [ 187.103737][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 187.103771][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.1.708 Not tainted syzkaller #0 PREEMPT(full) [ 187.103797][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.103812][ T7652] Call Trace: [ 187.103821][ T7652] [ 187.103832][ T7652] dump_stack_lvl+0xe8/0x150 [ 187.103868][ T7652] should_fail_ex+0x3eb/0x540 [ 187.103897][ T7652] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 187.103921][ T7652] should_failslab+0xa8/0x100 [ 187.103956][ T7652] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 187.103979][ T7652] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 187.104008][ T7652] ? jffs2_alloc_inode+0x28/0x40 [ 187.104029][ T7652] ? jffs2_alloc_inode+0x28/0x40 [ 187.104059][ T7652] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 187.104082][ T7652] jffs2_alloc_inode+0x28/0x40 [ 187.104106][ T7652] alloc_inode+0x6a/0x1b0 [ 187.104132][ T7652] new_inode+0x1f/0x170 [ 187.104160][ T7652] jffs2_new_inode+0xdd/0xd20 [ 187.104190][ T7652] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 187.104222][ T7652] ? jffs2_mkdir+0x83/0xec0 [ 187.104249][ T7652] ? __pfx_jffs2_new_inode+0x10/0x10 [ 187.104270][ T7652] ? jffs2_mkdir+0x83/0xec0 [ 187.104293][ T7652] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 187.104326][ T7652] ? jffs2_mkdir+0x83/0xec0 [ 187.104359][ T7652] jffs2_mkdir+0x189/0xec0 [ 187.104390][ T7652] ? generic_permission+0x2ba/0x660 [ 187.104416][ T7652] ? __pfx_jffs2_mkdir+0x10/0x10 [ 187.104447][ T7652] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 187.104472][ T7652] ? security_inode_mkdir+0xc3/0x340 [ 187.104503][ T7652] vfs_mkdir+0x40e/0x630 [ 187.104543][ T7652] filename_mkdirat+0x285/0x510 [ 187.104573][ T7652] ? __might_fault+0xaf/0x130 [ 187.104614][ T7652] ? __pfx_filename_mkdirat+0x10/0x10 [ 187.104649][ T7652] ? do_getname+0x151/0x250 [ 187.104687][ T7652] __se_sys_mkdirat+0x35/0x150 [ 187.104723][ T7652] do_syscall_64+0x166/0x520 [ 187.104758][ T7652] ? trace_irq_disable+0x3b/0x140 [ 187.104786][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.104811][ T7652] ? clear_bhb_loop+0x70/0xc0 [ 187.104840][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.104864][ T7652] RIP: 0033:0x7f71d4d9e159 [ 187.104886][ T7652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.104906][ T7652] RSP: 002b:00007f71d5bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 187.104932][ T7652] RAX: ffffffffffffffda RBX: 00007f71d5025fa0 RCX: 00007f71d4d9e159 [ 187.104950][ T7652] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 187.104967][ T7652] RBP: 00007f71d4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.104983][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.104997][ T7652] R13: 00007f71d5026038 R14: 00007f71d5025fa0 R15: 00007ffeb0cb01b8 [ 187.105035][ T7652] [ 187.388245][ T5697] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 187.536527][ T5697] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 187.541093][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.541121][ T5697] usb 2-1: Product: syz [ 187.541138][ T5697] usb 2-1: Manufacturer: syz [ 187.541249][ T5697] usb 2-1: SerialNumber: syz [ 187.714132][ T5718] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 187.870225][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.870886][ T5718] usb 4-1: not running at top speed; connect to a high speed hub [ 187.870919][ T5718] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 187.871953][ T5718] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.871985][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 187.925546][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.925576][ T5718] usb 4-1: Product: syz [ 187.925592][ T5718] usb 4-1: SerialNumber: syz [ 187.991243][ T7652] CIFS: Attempting to mount //127.0.0.1/share [ 188.005735][ T7652] CIFS: VFS: Error connecting to socket. Aborting operation. [ 188.005812][ T7652] CIFS: VFS: cifs_mount failed w/return code = -111 [ 188.028444][ T4928] Bluetooth: hci2: command tx timeout [ 188.094773][ T5697] rtl8150 2-1:1.0: couldn't reset the device [ 188.095094][ T5697] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 188.107342][ T5697] usb 2-1: USB disconnect, device number 24 [ 188.180845][ T5718] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 188.197404][ T5718] usb 4-1: USB disconnect, device number 32 [ 188.318910][ T5687] usb 1-1: USB disconnect, device number 32 [ 188.639918][ T7677] jffs2: notice: (7677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.764250][ T5687] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 188.914153][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 188.914925][ T5687] usb 1-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 188.916119][ T5687] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.916150][ T5687] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.916179][ T5687] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 188.916199][ T5687] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.916223][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.918397][ T5687] usb 1-1: config 0 descriptor?? [ 188.960599][ T5720] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 189.114191][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 189.115198][ T5720] usb 4-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 189.116520][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.119762][ T5720] usb 4-1: config 0 descriptor?? [ 189.126155][ T5720] gspca_main: sunplus-2.14.0 probing 041e:400b [ 189.273219][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 189.439144][ T7697] netlink: 108 bytes leftover after parsing attributes in process `syz.2.726'. [ 189.552508][ T5687] usbhid 1-1:0.0: can't add hid device: -71 [ 189.552621][ T5687] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.569429][ T5687] usb 1-1: USB disconnect, device number 33 [ 189.732738][ T5720] gspca_sunplus: reg_r err -32 [ 189.732831][ T5720] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 190.114185][ T4928] Bluetooth: hci2: command tx timeout [ 191.738411][ T5720] usb 4-1: USB disconnect, device number 33 [ 192.649230][ T7712] jffs2: notice: (7712) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 192.675035][ T7712] FAULT_INJECTION: forcing a failure. [ 192.675035][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 192.675068][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.2.728 Not tainted syzkaller #0 PREEMPT(full) [ 192.675093][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.675107][ T7712] Call Trace: [ 192.675116][ T7712] [ 192.675125][ T7712] dump_stack_lvl+0xe8/0x150 [ 192.675160][ T7712] should_fail_ex+0x3eb/0x540 [ 192.675189][ T7712] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 192.675230][ T7712] should_failslab+0xa8/0x100 [ 192.675265][ T7712] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 192.675288][ T7712] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 192.675316][ T7712] ? jffs2_alloc_inode+0x28/0x40 [ 192.675337][ T7712] ? jffs2_alloc_inode+0x28/0x40 [ 192.675366][ T7712] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 192.675388][ T7712] jffs2_alloc_inode+0x28/0x40 [ 192.675412][ T7712] alloc_inode+0x6a/0x1b0 [ 192.675436][ T7712] new_inode+0x1f/0x170 [ 192.675464][ T7712] jffs2_new_inode+0xdd/0xd20 [ 192.675493][ T7712] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 192.675523][ T7712] ? jffs2_mkdir+0x83/0xec0 [ 192.675550][ T7712] ? __pfx_jffs2_new_inode+0x10/0x10 [ 192.675570][ T7712] ? jffs2_mkdir+0x83/0xec0 [ 192.675593][ T7712] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 192.675625][ T7712] ? jffs2_mkdir+0x83/0xec0 [ 192.675655][ T7712] jffs2_mkdir+0x189/0xec0 [ 192.675683][ T7712] ? generic_permission+0x2ba/0x660 [ 192.675708][ T7712] ? __pfx_jffs2_mkdir+0x10/0x10 [ 192.675736][ T7712] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 192.675760][ T7712] ? security_inode_mkdir+0xc3/0x340 [ 192.675791][ T7712] vfs_mkdir+0x40e/0x630 [ 192.675830][ T7712] filename_mkdirat+0x285/0x510 [ 192.675860][ T7712] ? __might_fault+0xaf/0x130 [ 192.675900][ T7712] ? __pfx_filename_mkdirat+0x10/0x10 [ 192.675935][ T7712] ? do_getname+0x151/0x250 [ 192.675983][ T7712] __se_sys_mkdirat+0x35/0x150 [ 192.676019][ T7712] do_syscall_64+0x166/0x520 [ 192.676047][ T7712] ? trace_irq_disable+0x3b/0x140 [ 192.676074][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.676099][ T7712] ? clear_bhb_loop+0x70/0xc0 [ 192.676127][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.676150][ T7712] RIP: 0033:0x7f612b99e159 [ 192.676172][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.676193][ T7712] RSP: 002b:00007f612c7f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.676220][ T7712] RAX: ffffffffffffffda RBX: 00007f612bc25fa0 RCX: 00007f612b99e159 [ 192.676239][ T7712] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 192.676256][ T7712] RBP: 00007f612ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 192.676270][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.676284][ T7712] R13: 00007f612bc26038 R14: 00007f612bc25fa0 R15: 00007ffceeeee408 [ 192.676320][ T7712] [ 192.742439][ T7715] FAULT_INJECTION: forcing a failure. [ 192.742439][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 192.742524][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.3.731 Not tainted syzkaller #0 PREEMPT(full) [ 192.742590][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.742628][ T7715] Call Trace: [ 192.742651][ T7715] [ 192.742679][ T7715] dump_stack_lvl+0xe8/0x150 [ 192.742774][ T7715] should_fail_ex+0x3eb/0x540 [ 192.742844][ T7715] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 192.742917][ T7715] should_failslab+0xa8/0x100 [ 192.743013][ T7715] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 192.743110][ T7715] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 192.743184][ T7715] ? shmem_alloc_inode+0x28/0x40 [ 192.743260][ T7715] ? shmem_alloc_inode+0x28/0x40 [ 192.743346][ T7715] ? do_raw_spin_lock+0x12b/0x2f0 [ 192.743434][ T7715] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 192.743535][ T7715] shmem_alloc_inode+0x28/0x40 [ 192.743615][ T7715] alloc_inode+0x6a/0x1b0 [ 192.743674][ T7715] new_inode+0x1f/0x170 [ 192.743748][ T7715] shmem_get_inode+0x3a4/0x1030 [ 192.743827][ T7715] ? apparmor_capable+0x126/0x170 [ 192.743922][ T7715] ? __pfx_shmem_get_inode+0x10/0x10 [ 192.743995][ T7715] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 192.744081][ T7715] ? generic_permission+0x32e/0x660 [ 192.744149][ T7715] shmem_mknod+0x17d/0x340 [ 192.744217][ T7715] shmem_mkdir+0x33/0x70 [ 192.744310][ T7715] vfs_mkdir+0x40e/0x630 [ 192.744406][ T7715] filename_mkdirat+0x285/0x510 [ 192.744490][ T7715] ? __might_fault+0xaf/0x130 [ 192.744593][ T7715] ? __pfx_filename_mkdirat+0x10/0x10 [ 192.744680][ T7715] ? do_getname+0x151/0x250 [ 192.744778][ T7715] __se_sys_mkdirat+0x35/0x150 [ 192.744842][ T7715] do_syscall_64+0x166/0x520 [ 192.744868][ T7715] ? trace_irq_disable+0x3b/0x140 [ 192.744894][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.744918][ T7715] ? clear_bhb_loop+0x70/0xc0 [ 192.744946][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.744970][ T7715] RIP: 0033:0x7f837ed9e159 [ 192.744991][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.745010][ T7715] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.745035][ T7715] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 192.745051][ T7715] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 192.745067][ T7715] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 192.745082][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.745095][ T7715] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 192.745129][ T7715] [ 192.849246][ T5687] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 192.864749][ T5697] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 192.954469][ T5720] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 193.025189][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 193.039029][ T5697] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 193.046890][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.057145][ T5697] usb 1-1: config 0 descriptor?? [ 193.080163][ T5697] gspca_main: sunplus-2.14.0 probing 041e:400b [ 193.124922][ T5687] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.138822][ T5687] usb 2-1: not running at top speed; connect to a high speed hub [ 193.138860][ T5687] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 193.148907][ T5720] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 193.175529][ T5687] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.175566][ T5687] usb 2-1: config 1 interface 0 has no altsetting 0 [ 193.186538][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.186611][ T5720] usb 3-1: Product: syz [ 193.186705][ T5720] usb 3-1: Manufacturer: syz [ 193.186750][ T5720] usb 3-1: SerialNumber: syz [ 193.404232][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.404266][ T5687] usb 2-1: Product: syz [ 193.404284][ T5687] usb 2-1: SerialNumber: syz [ 193.622604][ T5687] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 193.638030][ T5687] usb 2-1: USB disconnect, device number 25 [ 193.639570][ T7712] CIFS: Attempting to mount //127.0.0.1/share [ 193.640813][ T7712] CIFS: VFS: Error connecting to socket. Aborting operation. [ 193.640861][ T7712] CIFS: VFS: cifs_mount failed w/return code = -101 [ 193.718911][ T5720] rtl8150 3-1:1.0: couldn't reset the device [ 193.719360][ T5720] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 193.740938][ T5720] usb 3-1: USB disconnect, device number 28 [ 193.743513][ T5697] gspca_sunplus: reg_r err -32 [ 193.743602][ T5697] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 194.347092][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347151][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.494421][ T5687] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 194.540420][ T7739] FAULT_INJECTION: forcing a failure. [ 194.540420][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 194.540445][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.3.741 Not tainted syzkaller #0 PREEMPT(full) [ 194.540463][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.540473][ T7739] Call Trace: [ 194.540480][ T7739] [ 194.540487][ T7739] dump_stack_lvl+0xe8/0x150 [ 194.540513][ T7739] should_fail_ex+0x3eb/0x540 [ 194.540534][ T7739] should_failslab+0xa8/0x100 [ 194.540557][ T7739] ? security_inode_alloc+0x39/0x310 [ 194.540575][ T7739] kmem_cache_alloc_noprof+0x9c/0x600 [ 194.540593][ T7739] ? __pfx_make_kgid+0x10/0x10 [ 194.540611][ T7739] ? security_inode_alloc+0x39/0x310 [ 194.540632][ T7739] security_inode_alloc+0x39/0x310 [ 194.540651][ T7739] inode_init_always_gfp+0x97e/0xd30 [ 194.540671][ T7739] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 194.540696][ T7739] alloc_inode+0x82/0x1b0 [ 194.540713][ T7739] new_inode+0x1f/0x170 [ 194.540734][ T7739] shmem_get_inode+0x3a4/0x1030 [ 194.540758][ T7739] ? apparmor_capable+0x126/0x170 [ 194.540785][ T7739] ? __pfx_shmem_get_inode+0x10/0x10 [ 194.540838][ T7739] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 194.540874][ T7739] ? generic_permission+0x32e/0x660 [ 194.540903][ T7739] shmem_mknod+0x17d/0x340 [ 194.540933][ T7739] shmem_mkdir+0x33/0x70 [ 194.540960][ T7739] vfs_mkdir+0x40e/0x630 [ 194.540988][ T7739] filename_mkdirat+0x285/0x510 [ 194.541010][ T7739] ? __might_fault+0xaf/0x130 [ 194.541038][ T7739] ? __pfx_filename_mkdirat+0x10/0x10 [ 194.541063][ T7739] ? do_getname+0x151/0x250 [ 194.541090][ T7739] __se_sys_mkdirat+0x35/0x150 [ 194.541115][ T7739] do_syscall_64+0x166/0x520 [ 194.541134][ T7739] ? trace_irq_disable+0x3b/0x140 [ 194.541154][ T7739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.541171][ T7739] ? clear_bhb_loop+0x70/0xc0 [ 194.541191][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.541207][ T7739] RIP: 0033:0x7f837ed9e159 [ 194.541229][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.541243][ T7739] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 194.541262][ T7739] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 194.541275][ T7739] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 194.541286][ T7739] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 194.541297][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.541307][ T7739] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 194.541331][ T7739] [ 194.577247][ T5718] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 194.661961][ T5687] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.663695][ T5687] usb 2-1: not running at top speed; connect to a high speed hub [ 194.663790][ T5687] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 194.671370][ T5687] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.671467][ T5687] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.699341][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.699418][ T5687] usb 2-1: Product: syz [ 194.699457][ T5687] usb 2-1: SerialNumber: syz [ 194.725046][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 194.769703][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.769851][ T5718] usb 3-1: New USB device found: idVendor=0545, idProduct=8080, bcdDevice=0.01 [ 194.789117][ T5718] usb 3-1: config index 0 descriptor too short (expected 22, got 18) [ 194.789346][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.994896][ T5687] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 195.007731][ T5687] usb 2-1: USB disconnect, device number 26 [ 195.089412][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.091459][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.092658][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.098741][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.116390][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.141607][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.143283][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.150778][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.174511][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.176209][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.222245][ T5718] usb 3-1: string descriptor 0 read error: -71 [ 195.233821][ T5718] usb 3-1: USB disconnect, device number 29 [ 195.454175][ T5697] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 195.587828][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 195.594138][ T5697] usb 4-1: device descriptor read/64, error -71 [ 195.643591][ T5718] usb 1-1: USB disconnect, device number 34 [ 195.710000][ T7754] netlink: 168 bytes leftover after parsing attributes in process `syz.1.747'. [ 195.844629][ T5697] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 195.974241][ T5697] usb 4-1: device descriptor read/64, error -71 [ 196.057612][ T7766] FAULT_INJECTION: forcing a failure. [ 196.057612][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 196.057647][ T7766] CPU: 0 UID: 0 PID: 7766 Comm: syz.0.751 Not tainted syzkaller #0 PREEMPT(full) [ 196.057675][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.057691][ T7766] Call Trace: [ 196.057700][ T7766] [ 196.057711][ T7766] dump_stack_lvl+0xe8/0x150 [ 196.057747][ T7766] should_fail_ex+0x3eb/0x540 [ 196.057777][ T7766] should_failslab+0xa8/0x100 [ 196.057809][ T7766] ? security_inode_alloc+0x39/0x310 [ 196.057835][ T7766] kmem_cache_alloc_noprof+0x9c/0x600 [ 196.057862][ T7766] ? __pfx_make_kgid+0x10/0x10 [ 196.057885][ T7766] ? security_inode_alloc+0x39/0x310 [ 196.057917][ T7766] security_inode_alloc+0x39/0x310 [ 196.057945][ T7766] inode_init_always_gfp+0x97e/0xd30 [ 196.057974][ T7766] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 196.058012][ T7766] alloc_inode+0x82/0x1b0 [ 196.058036][ T7766] new_inode+0x1f/0x170 [ 196.058064][ T7766] shmem_get_inode+0x3a4/0x1030 [ 196.058096][ T7766] ? apparmor_capable+0x126/0x170 [ 196.058134][ T7766] ? __pfx_shmem_get_inode+0x10/0x10 [ 196.058165][ T7766] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 196.058201][ T7766] ? generic_permission+0x32e/0x660 [ 196.058229][ T7766] shmem_mknod+0x17d/0x340 [ 196.058256][ T7766] shmem_mkdir+0x33/0x70 [ 196.058293][ T7766] vfs_mkdir+0x40e/0x630 [ 196.058332][ T7766] filename_mkdirat+0x285/0x510 [ 196.058362][ T7766] ? __might_fault+0xaf/0x130 [ 196.058402][ T7766] ? __pfx_filename_mkdirat+0x10/0x10 [ 196.058438][ T7766] ? do_getname+0x151/0x250 [ 196.058476][ T7766] __se_sys_mkdirat+0x35/0x150 [ 196.058512][ T7766] do_syscall_64+0x166/0x520 [ 196.058539][ T7766] ? trace_irq_disable+0x3b/0x140 [ 196.058578][ T7766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.058602][ T7766] ? clear_bhb_loop+0x70/0xc0 [ 196.058631][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.058656][ T7766] RIP: 0033:0x7f214899e159 [ 196.058678][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.058700][ T7766] RSP: 002b:00007f21497c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 196.058726][ T7766] RAX: ffffffffffffffda RBX: 00007f2148c25fa0 RCX: 00007f214899e159 [ 196.058743][ T7766] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 196.058760][ T7766] RBP: 00007f2148a3506b R08: 0000000000000000 R09: 0000000000000000 [ 196.058775][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.058789][ T7766] R13: 00007f2148c26038 R14: 00007f2148c25fa0 R15: 00007ffcf15c1cb8 [ 196.058824][ T7766] [ 196.148313][ T5697] usb usb4-port1: attempt power cycle [ 196.611377][ T7774] netlink: 'syz.0.755': attribute type 15 has an invalid length. [ 196.625988][ T5697] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 196.626934][ T5601] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 196.627061][ T5718] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 196.658177][ T5697] usb 4-1: device descriptor read/8, error -71 [ 196.775173][ T5601] usb 3-1: Using ep0 maxpacket: 32 [ 196.776858][ T5601] usb 3-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 196.778843][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.781396][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.781925][ T5718] usb 2-1: not running at top speed; connect to a high speed hub [ 196.781972][ T5718] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 196.783320][ T5718] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.783351][ T5718] usb 2-1: config 1 interface 0 has no altsetting 0 [ 196.784643][ T5601] usb 3-1: config 0 descriptor?? [ 196.812883][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.812955][ T5718] usb 2-1: Product: syz [ 196.812991][ T5718] usb 2-1: SerialNumber: syz [ 196.841218][ T5601] gspca_main: sunplus-2.14.0 probing 041e:400b [ 196.934162][ T5697] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 196.936850][ T7781] netlink: 108 bytes leftover after parsing attributes in process `syz.0.759'. [ 196.961682][ T5697] usb 4-1: device descriptor read/8, error -71 [ 197.064419][ T5697] usb usb4-port1: unable to enumerate USB device [ 197.102716][ T5718] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 197.120629][ T5718] usb 2-1: USB disconnect, device number 27 [ 197.140424][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 197.402575][ T5601] gspca_sunplus: reg_r err -32 [ 197.402662][ T5601] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 197.682834][ T7796] FAULT_INJECTION: forcing a failure. [ 197.682834][ T7796] name failslab, interval 1, probability 0, space 0, times 0 [ 197.682859][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.1.765 Not tainted syzkaller #0 PREEMPT(full) [ 197.682877][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.682887][ T7796] Call Trace: [ 197.682893][ T7796] [ 197.682900][ T7796] dump_stack_lvl+0xe8/0x150 [ 197.682926][ T7796] should_fail_ex+0x3eb/0x540 [ 197.682947][ T7796] should_failslab+0xa8/0x100 [ 197.682970][ T7796] ? security_inode_alloc+0x39/0x310 [ 197.682987][ T7796] kmem_cache_alloc_noprof+0x9c/0x600 [ 197.683006][ T7796] ? __pfx_make_kgid+0x10/0x10 [ 197.683023][ T7796] ? security_inode_alloc+0x39/0x310 [ 197.683045][ T7796] security_inode_alloc+0x39/0x310 [ 197.683063][ T7796] inode_init_always_gfp+0x97e/0xd30 [ 197.683089][ T7796] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 197.683113][ T7796] alloc_inode+0x82/0x1b0 [ 197.683130][ T7796] new_inode+0x1f/0x170 [ 197.683149][ T7796] shmem_get_inode+0x3a4/0x1030 [ 197.683179][ T7796] ? __pfx_shmem_get_inode+0x10/0x10 [ 197.683201][ T7796] ? from_kgid+0x1c6/0x660 [ 197.683218][ T7796] ? make_vfsuid+0x49/0xa0 [ 197.683243][ T7796] ? generic_permission+0x2ba/0x660 [ 197.683262][ T7796] shmem_mknod+0x17d/0x340 [ 197.683281][ T7796] shmem_mkdir+0x33/0x70 [ 197.683308][ T7796] vfs_mkdir+0x40e/0x630 [ 197.683335][ T7796] filename_mkdirat+0x285/0x510 [ 197.683356][ T7796] ? __might_fault+0xaf/0x130 [ 197.683384][ T7796] ? __pfx_filename_mkdirat+0x10/0x10 [ 197.683409][ T7796] ? do_getname+0x151/0x250 [ 197.683436][ T7796] __se_sys_mkdirat+0x35/0x150 [ 197.683461][ T7796] do_syscall_64+0x166/0x520 [ 197.683480][ T7796] ? trace_irq_disable+0x3b/0x140 [ 197.683500][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.683516][ T7796] ? clear_bhb_loop+0x70/0xc0 [ 197.683536][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.683552][ T7796] RIP: 0033:0x7f71d4d9e159 [ 197.683567][ T7796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.683584][ T7796] RSP: 002b:00007f71d5bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 197.683601][ T7796] RAX: ffffffffffffffda RBX: 00007f71d5025fa0 RCX: 00007f71d4d9e159 [ 197.683614][ T7796] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 197.683625][ T7796] RBP: 00007f71d4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 197.683635][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.683666][ T7796] R13: 00007f71d5026038 R14: 00007f71d5025fa0 R15: 00007ffeb0cb01b8 [ 197.683702][ T7796] [ 198.136386][ T4928] block nbd0: Receive control failed (result -32) [ 198.139873][ T7791] block nbd0: shutting down sockets [ 198.447457][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 198.624144][ T5601] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 198.774097][ T5601] usb 4-1: Using ep0 maxpacket: 32 [ 198.774726][ T5601] usb 4-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 198.775808][ T5601] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.775834][ T5601] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.775855][ T5601] usb 4-1: config 0 has no interface number 0 [ 198.775896][ T5601] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 198.775920][ T5601] usb 4-1: config 0 interface 1 has no altsetting 0 [ 198.778522][ T5601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.778548][ T5601] usb 4-1: Product: syz [ 198.778563][ T5601] usb 4-1: Manufacturer: syz [ 198.778578][ T5601] usb 4-1: SerialNumber: syz [ 198.781644][ T5601] usb 4-1: config 0 descriptor?? [ 198.851240][ T5697] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 198.994582][ T5601] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 198.994617][ T5601] cx231xx 4-1:0.1: Not found matching IAD interface [ 198.998099][ T5601] usb 4-1: USB disconnect, device number 38 [ 199.029623][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.030119][ T5697] usb 2-1: not running at top speed; connect to a high speed hub [ 199.030153][ T5697] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 199.031301][ T5697] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.031334][ T5697] usb 2-1: config 1 interface 0 has no altsetting 0 [ 199.033628][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.033655][ T5697] usb 2-1: Product: syz [ 199.033673][ T5697] usb 2-1: SerialNumber: syz [ 199.312038][ T5697] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 199.326203][ T5697] usb 2-1: USB disconnect, device number 28 [ 199.399121][ T5601] usb 3-1: USB disconnect, device number 30 [ 199.697532][ T7829] FAULT_INJECTION: forcing a failure. [ 199.697532][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 199.697556][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.3.777 Not tainted syzkaller #0 PREEMPT(full) [ 199.697574][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.697584][ T7829] Call Trace: [ 199.697590][ T7829] [ 199.697597][ T7829] dump_stack_lvl+0xe8/0x150 [ 199.697623][ T7829] should_fail_ex+0x3eb/0x540 [ 199.697643][ T7829] should_failslab+0xa8/0x100 [ 199.697666][ T7829] ? security_inode_alloc+0x39/0x310 [ 199.697684][ T7829] kmem_cache_alloc_noprof+0x9c/0x600 [ 199.697701][ T7829] ? __pfx_make_kgid+0x10/0x10 [ 199.697717][ T7829] ? security_inode_alloc+0x39/0x310 [ 199.697738][ T7829] security_inode_alloc+0x39/0x310 [ 199.697757][ T7829] inode_init_always_gfp+0x97e/0xd30 [ 199.697779][ T7829] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 199.697802][ T7829] alloc_inode+0x82/0x1b0 [ 199.697818][ T7829] new_inode+0x1f/0x170 [ 199.697836][ T7829] shmem_get_inode+0x3a4/0x1030 [ 199.697866][ T7829] ? __pfx_shmem_get_inode+0x10/0x10 [ 199.697886][ T7829] ? from_kgid+0x1c6/0x660 [ 199.697902][ T7829] ? make_vfsuid+0x49/0xa0 [ 199.697926][ T7829] ? generic_permission+0x2ba/0x660 [ 199.697944][ T7829] shmem_mknod+0x17d/0x340 [ 199.697961][ T7829] shmem_mkdir+0x33/0x70 [ 199.697986][ T7829] vfs_mkdir+0x40e/0x630 [ 199.698011][ T7829] filename_mkdirat+0x285/0x510 [ 199.698031][ T7829] ? __might_fault+0xaf/0x130 [ 199.698057][ T7829] ? __pfx_filename_mkdirat+0x10/0x10 [ 199.698081][ T7829] ? do_getname+0x151/0x250 [ 199.698106][ T7829] __se_sys_mkdirat+0x35/0x150 [ 199.698129][ T7829] do_syscall_64+0x166/0x520 [ 199.698147][ T7829] ? trace_irq_disable+0x3b/0x140 [ 199.698165][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.698181][ T7829] ? clear_bhb_loop+0x70/0xc0 [ 199.698201][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.698216][ T7829] RIP: 0033:0x7f837ed9e159 [ 199.698231][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.698245][ T7829] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 199.698268][ T7829] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 199.698280][ T7829] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 199.698291][ T7829] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 199.698301][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.698329][ T7829] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 199.698369][ T7829] [ 199.745841][ T5601] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 199.918340][ T5601] usb 3-1: device descriptor read/64, error -71 [ 200.174144][ T5601] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 200.264341][ T5687] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 200.305139][ T5601] usb 3-1: device descriptor read/64, error -71 [ 200.415435][ T5601] usb usb3-port1: attempt power cycle [ 200.430543][ T5687] usb 1-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 200.446026][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.446057][ T5687] usb 1-1: Product: syz [ 200.446074][ T5687] usb 1-1: Manufacturer: syz [ 200.446090][ T5687] usb 1-1: SerialNumber: syz [ 200.453565][ T5687] usb 1-1: NFC: intf ffff88807d18a000 id ffffffff8fc79b40 [ 200.530282][ T5687] nfcmrvl 1-1:1.0: NFC: registered with nci successfully [ 200.624903][ T7855] FAULT_INJECTION: forcing a failure. [ 200.624903][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.624929][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.3.786 Not tainted syzkaller #0 PREEMPT(full) [ 200.624947][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.624958][ T7855] Call Trace: [ 200.624964][ T7855] [ 200.624971][ T7855] dump_stack_lvl+0xe8/0x150 [ 200.624997][ T7855] should_fail_ex+0x3eb/0x540 [ 200.625018][ T7855] __kvm_read_guest_page+0x18d/0x240 [ 200.625048][ T7855] kvm_fetch_guest_virt+0x10c/0x160 [ 200.625066][ T7855] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 200.625092][ T7855] __do_insn_fetch_bytes+0x53a/0x6c0 [ 200.625117][ T7855] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 200.625136][ T7855] ? x86_decode_insn+0x495f/0x5af0 [ 200.625166][ T7855] x86_decode_insn+0x374/0x5af0 [ 200.625195][ T7855] ? is_bpf_text_address+0x292/0x2b0 [ 200.625231][ T7855] ? __pfx_x86_decode_insn+0x10/0x10 [ 200.625250][ T7855] ? kernel_text_address+0xa5/0xe0 [ 200.625275][ T7855] ? __pfx_x86_decode_insn+0x10/0x10 [ 200.625296][ T7855] ? x86_emulate_insn+0xf/0x4350 [ 200.625322][ T7855] ? __asan_memset+0x22/0x50 [ 200.625376][ T7855] ? init_decode_cache+0xf3/0x160 [ 200.625396][ T7855] ? init_emulate_ctxt+0x4c4/0x640 [ 200.625417][ T7855] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 200.625444][ T7855] x86_emulate_instruction+0x323/0x1e70 [ 200.625471][ T7855] ? handle_mmio_page_fault+0x13e/0xd80 [ 200.625492][ T7855] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 200.625513][ T7855] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 200.625527][ T7855] ? kvm_io_bus_write+0x25a/0x580 [ 200.625545][ T7855] ? vmx_vcpu_run+0x1c1a/0x2db0 [ 200.625570][ T7855] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 200.625601][ T7855] ? lock_acquire+0x115/0x350 [ 200.625620][ T7855] kvm_mmu_page_fault+0x7e9/0xa40 [ 200.625651][ T7855] vt_handle_exit+0x28/0x160 [ 200.625669][ T7855] vcpu_run+0x4e8f/0x7a70 [ 200.625721][ T7855] ? vcpu_run+0x35f8/0x7a70 [ 200.625788][ T7855] ? __pfx_vcpu_run+0x10/0x10 [ 200.625809][ T7855] ? complete_emulated_mmio+0x1f2/0x910 [ 200.625832][ T7855] ? __asan_memcpy+0x40/0x70 [ 200.625849][ T7855] ? complete_emulated_mmio+0x535/0x910 [ 200.625879][ T7855] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 200.625906][ T7855] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 200.625933][ T7855] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.625971][ T7855] kvm_vcpu_ioctl+0xa61/0xfd0 [ 200.626000][ T7855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.626039][ T7855] ? __fget_files+0x2a/0x420 [ 200.626058][ T7855] ? __fget_files+0x2a/0x420 [ 200.626074][ T7855] ? __fget_files+0x2a/0x420 [ 200.626094][ T7855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.626115][ T7855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.626140][ T7855] __se_sys_ioctl+0xfc/0x170 [ 200.626163][ T7855] do_syscall_64+0x166/0x520 [ 200.626181][ T7855] ? trace_irq_disable+0x3b/0x140 [ 200.626200][ T7855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.626216][ T7855] ? clear_bhb_loop+0x70/0xc0 [ 200.626235][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.626250][ T7855] RIP: 0033:0x7f837ed9e159 [ 200.626265][ T7855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.626278][ T7855] RSP: 002b:00007f837fc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.626296][ T7855] RAX: ffffffffffffffda RBX: 00007f837f026090 RCX: 00007f837ed9e159 [ 200.626308][ T7855] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 200.626317][ T7855] RBP: 00007f837fc23090 R08: 0000000000000000 R09: 0000000000000000 [ 200.626327][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.626336][ T7855] R13: 00007f837f026128 R14: 00007f837f026090 R15: 00007ffd48469708 [ 200.626361][ T7855] [ 200.802828][ T5601] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.900036][ T5601] usb 3-1: device descriptor read/8, error -71 [ 201.029573][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 201.035129][ T32] audit: type=1326 audit(1790947263.119:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.0.778" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214899e159 code=0x0 [ 201.174376][ T5601] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 201.205726][ T5601] usb 3-1: device descriptor read/8, error -71 [ 201.314706][ T5601] usb usb3-port1: unable to enumerate USB device [ 201.344111][ T5718] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 201.496517][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.497031][ T5718] usb 2-1: not running at top speed; connect to a high speed hub [ 201.497063][ T5718] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 201.498141][ T5718] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.498174][ T5718] usb 2-1: config 1 interface 0 has no altsetting 0 [ 201.500141][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.500162][ T5718] usb 2-1: Product: syz [ 201.500173][ T5718] usb 2-1: SerialNumber: syz [ 201.723378][ T5718] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 201.737524][ T5718] usb 2-1: USB disconnect, device number 29 [ 201.966016][ T7864] fuse: Bad value for 'fd' [ 202.158925][ T7870] FAULT_INJECTION: forcing a failure. [ 202.158925][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 202.158950][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.3.792 Not tainted syzkaller #0 PREEMPT(full) [ 202.158973][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.158984][ T7870] Call Trace: [ 202.158990][ T7870] [ 202.158996][ T7870] dump_stack_lvl+0xe8/0x150 [ 202.159022][ T7870] should_fail_ex+0x3eb/0x540 [ 202.159043][ T7870] should_failslab+0xa8/0x100 [ 202.159066][ T7870] ? security_inode_alloc+0x39/0x310 [ 202.159087][ T7870] kmem_cache_alloc_noprof+0x9c/0x600 [ 202.159105][ T7870] ? __pfx_make_kgid+0x10/0x10 [ 202.159124][ T7870] ? security_inode_alloc+0x39/0x310 [ 202.159146][ T7870] security_inode_alloc+0x39/0x310 [ 202.159165][ T7870] inode_init_always_gfp+0x97e/0xd30 [ 202.159186][ T7870] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 202.159210][ T7870] alloc_inode+0x82/0x1b0 [ 202.159226][ T7870] new_inode+0x1f/0x170 [ 202.159245][ T7870] shmem_get_inode+0x3a4/0x1030 [ 202.159276][ T7870] ? __pfx_shmem_get_inode+0x10/0x10 [ 202.159298][ T7870] ? from_kgid+0x1c6/0x660 [ 202.159315][ T7870] ? make_vfsuid+0x49/0xa0 [ 202.159340][ T7870] ? generic_permission+0x2ba/0x660 [ 202.159359][ T7870] shmem_mknod+0x17d/0x340 [ 202.159377][ T7870] shmem_mkdir+0x33/0x70 [ 202.159403][ T7870] vfs_mkdir+0x40e/0x630 [ 202.159430][ T7870] filename_mkdirat+0x285/0x510 [ 202.159451][ T7870] ? __might_fault+0xaf/0x130 [ 202.159479][ T7870] ? __pfx_filename_mkdirat+0x10/0x10 [ 202.159515][ T7870] ? do_getname+0x151/0x250 [ 202.159543][ T7870] __se_sys_mkdirat+0x35/0x150 [ 202.159568][ T7870] do_syscall_64+0x166/0x520 [ 202.159588][ T7870] ? trace_irq_disable+0x3b/0x140 [ 202.159607][ T7870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.159632][ T7870] ? clear_bhb_loop+0x70/0xc0 [ 202.159652][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.159669][ T7870] RIP: 0033:0x7f837ed9e159 [ 202.159684][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.159698][ T7870] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 202.159715][ T7870] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 202.159728][ T7870] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 202.159739][ T7870] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 202.159749][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.159759][ T7870] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 202.159788][ T7870] [ 202.444410][ T7872] netlink: '&e': attribute type 2 has an invalid length. [ 203.005842][ T5697] usb 1-1: USB disconnect, device number 35 [ 203.014518][ T5697] usb 1-1: NFC: intf ffff88807d18a000 [ 203.174230][ T5718] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 203.211730][ T7902] FAULT_INJECTION: forcing a failure. [ 203.211730][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 203.211757][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.2.804 Not tainted syzkaller #0 PREEMPT(full) [ 203.211776][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.211786][ T7902] Call Trace: [ 203.211792][ T7902] [ 203.211798][ T7902] dump_stack_lvl+0xe8/0x150 [ 203.211825][ T7902] should_fail_ex+0x3eb/0x540 [ 203.211845][ T7902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 203.211870][ T7902] should_failslab+0xa8/0x100 [ 203.211893][ T7902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 203.211916][ T7902] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 203.211934][ T7902] ? shmem_alloc_inode+0x28/0x40 [ 203.211956][ T7902] ? shmem_alloc_inode+0x28/0x40 [ 203.211983][ T7902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 203.212006][ T7902] shmem_alloc_inode+0x28/0x40 [ 203.212028][ T7902] alloc_inode+0x6a/0x1b0 [ 203.212045][ T7902] new_inode+0x1f/0x170 [ 203.212063][ T7902] ? shmem_get_inode+0x29a/0x1030 [ 203.212088][ T7902] shmem_get_inode+0x3a4/0x1030 [ 203.212118][ T7902] ? __pfx_shmem_get_inode+0x10/0x10 [ 203.212144][ T7902] ? mas_preallocate+0x55e/0x840 [ 203.212165][ T7902] __shmem_file_setup+0x20b/0x370 [ 203.212212][ T7902] ? __pfx___shmem_file_setup+0x10/0x10 [ 203.212244][ T7902] ? vma_set_pgoff+0x163/0x290 [ 203.212279][ T7902] shmem_zero_setup+0x90/0x130 [ 203.212306][ T7902] mmap_region+0x1f86/0x2c60 [ 203.212350][ T7902] ? __lock_acquire+0x747/0x2de0 [ 203.212378][ T7902] ? __lock_acquire+0x747/0x2de0 [ 203.212403][ T7902] ? __pfx_mmap_region+0x10/0x10 [ 203.212438][ T7902] ? pick_task_fair+0x1112/0x15a0 [ 203.212476][ T7902] ? lock_acquire+0x115/0x350 [ 203.212583][ T7902] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 203.212678][ T7902] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 203.212710][ T7902] ? cap_mmap_addr+0xb1/0xf0 [ 203.212748][ T7902] ? bpf_lsm_mmap_addr+0x9/0x50 [ 203.212770][ T7902] ? security_mmap_addr+0x71/0x240 [ 203.212825][ T7902] do_mmap+0xe0a/0x1300 [ 203.212866][ T7902] ? __pfx_do_mmap+0x10/0x10 [ 203.212910][ T7902] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 203.212934][ T7902] ? down_write_killable+0x179/0x230 [ 203.212969][ T7902] ? __pfx_down_write_killable+0x10/0x10 [ 203.213001][ T7902] ? apparmor_mmap_file+0x1cc/0x390 [ 203.213035][ T7902] ? security_mmap_file+0x4df/0xa20 [ 203.213064][ T7902] vm_mmap_pgoff+0x272/0x4e0 [ 203.213088][ T7902] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 203.213105][ T7902] ? ksys_write+0xf8/0x270 [ 203.213124][ T7902] ? __pfx___se_sys_futex+0x10/0x10 [ 203.213149][ T7902] ? __pfx_ksys_write+0x10/0x10 [ 203.213170][ T7902] ? ksys_mmap_pgoff+0xf3/0x760 [ 203.213194][ T7902] ? __x64_sys_mmap+0x7f/0x140 [ 203.213222][ T7902] do_syscall_64+0x166/0x520 [ 203.213241][ T7902] ? trace_irq_disable+0x3b/0x140 [ 203.213260][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.213277][ T7902] ? clear_bhb_loop+0x70/0xc0 [ 203.213297][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.213314][ T7902] RIP: 0033:0x7f612b99e159 [ 203.213329][ T7902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.213343][ T7902] RSP: 002b:00007f612c7f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 203.213361][ T7902] RAX: ffffffffffffffda RBX: 00007f612bc25fa0 RCX: 00007f612b99e159 [ 203.213373][ T7902] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 203.213384][ T7902] RBP: 00007f612ba3506b R08: ffffffffffffffff R09: 000000000000c000 [ 203.213395][ T7902] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 203.213405][ T7902] R13: 00007f612bc26038 R14: 00007f612bc25fa0 R15: 00007ffceeeee408 [ 203.213430][ T7902] [ 203.422181][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.437977][ T5718] usb 4-1: not running at top speed; connect to a high speed hub [ 203.438017][ T5718] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 203.485445][ T5718] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.485488][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 203.526067][ T5697] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 203.569010][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.569039][ T5718] usb 4-1: Product: syz [ 203.569055][ T5718] usb 4-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁 [ 203.569079][ T5718] usb 4-1: SerialNumber: syz [ 203.664366][ T5697] usb 1-1: device descriptor read/64, error -71 [ 203.894123][ T5697] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 203.912172][ T5718] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 203.925646][ T5718] usb 4-1: USB disconnect, device number 39 [ 203.974163][ T5687] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 204.024913][ T5697] usb 1-1: device descriptor read/64, error -71 [ 204.126639][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.126692][ T5687] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 204.127704][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.127729][ T5687] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 204.127774][ T5687] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 204.127838][ T5687] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 204.127867][ T5687] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 204.127886][ T5687] usb 3-1: config 1 interface 1 has no altsetting 0 [ 204.130821][ T5687] usb 3-1: string descriptor 0 read error: -22 [ 204.130941][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.139016][ T5697] usb usb1-port1: attempt power cycle [ 204.282734][ T7908] jffs2: notice: (7908) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.306056][ T7908] FAULT_INJECTION: forcing a failure. [ 204.306056][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 204.306100][ T7908] CPU: 1 UID: 0 PID: 7908 Comm: syz.1.807 Not tainted syzkaller #0 PREEMPT(full) [ 204.306127][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.306141][ T7908] Call Trace: [ 204.306150][ T7908] [ 204.306159][ T7908] dump_stack_lvl+0xe8/0x150 [ 204.306198][ T7908] should_fail_ex+0x3eb/0x540 [ 204.306219][ T7908] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 204.306251][ T7908] should_failslab+0xa8/0x100 [ 204.306286][ T7908] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 204.306307][ T7908] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 204.306338][ T7908] ? jffs2_alloc_inode+0x28/0x40 [ 204.306354][ T7908] ? jffs2_alloc_inode+0x28/0x40 [ 204.306374][ T7908] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 204.306390][ T7908] jffs2_alloc_inode+0x28/0x40 [ 204.306425][ T7908] alloc_inode+0x6a/0x1b0 [ 204.306450][ T7908] new_inode+0x1f/0x170 [ 204.306476][ T7908] jffs2_new_inode+0xdd/0xd20 [ 204.306506][ T7908] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 204.306529][ T7908] ? jffs2_mkdir+0x83/0xec0 [ 204.306548][ T7908] ? __pfx_jffs2_new_inode+0x10/0x10 [ 204.306581][ T7908] ? jffs2_mkdir+0x83/0xec0 [ 204.306604][ T7908] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 204.306641][ T7908] ? jffs2_mkdir+0x83/0xec0 [ 204.306671][ T7908] jffs2_mkdir+0x189/0xec0 [ 204.306692][ T7908] ? generic_permission+0x2ba/0x660 [ 204.306724][ T7908] ? __pfx_jffs2_mkdir+0x10/0x10 [ 204.306755][ T7908] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 204.306782][ T7908] ? security_inode_mkdir+0xc3/0x340 [ 204.306816][ T7908] vfs_mkdir+0x40e/0x630 [ 204.306844][ T7908] filename_mkdirat+0x285/0x510 [ 204.306879][ T7908] ? __might_fault+0xaf/0x130 [ 204.306920][ T7908] ? __pfx_filename_mkdirat+0x10/0x10 [ 204.306955][ T7908] ? do_getname+0x151/0x250 [ 204.306991][ T7908] __se_sys_mkdirat+0x35/0x150 [ 204.307015][ T7908] do_syscall_64+0x166/0x520 [ 204.307054][ T7908] ? trace_irq_disable+0x3b/0x140 [ 204.307081][ T7908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.307104][ T7908] ? clear_bhb_loop+0x70/0xc0 [ 204.307135][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.307152][ T7908] RIP: 0033:0x7f71d4d9e159 [ 204.307168][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.307197][ T7908] RSP: 002b:00007f71d5bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 204.307224][ T7908] RAX: ffffffffffffffda RBX: 00007f71d5025fa0 RCX: 00007f71d4d9e159 [ 204.307241][ T7908] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 204.307257][ T7908] RBP: 00007f71d4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 204.307271][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.307289][ T7908] R13: 00007f71d5026038 R14: 00007f71d5025fa0 R15: 00007ffeb0cb01b8 [ 204.307315][ T7908] [ 204.484374][ T5697] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 204.510965][ T5697] usb 1-1: device descriptor read/8, error -71 [ 204.587617][ T5687] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 204.587651][ T5687] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 204.587669][ T5687] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 204.710629][ T7906] input: syz0 as /devices/virtual/input/input10 [ 204.746391][ T5697] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 204.766098][ T5697] usb 1-1: device descriptor read/8, error -71 [ 204.876276][ T5697] usb usb1-port1: unable to enumerate USB device [ 205.141230][ T5687] usb 3-1: USB disconnect, device number 35 [ 205.264540][ T5718] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 205.426521][ T5718] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 205.427681][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.427717][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.427734][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.427765][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.429756][ T5718] usb 2-1: config 0 descriptor?? [ 205.933599][ T7937] jffs2: notice: (7937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.951039][ T5687] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 205.966307][ T7937] FAULT_INJECTION: forcing a failure. [ 205.966307][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 205.966352][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT(full) [ 205.966378][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.966391][ T7937] Call Trace: [ 205.966400][ T7937] [ 205.966409][ T7937] dump_stack_lvl+0xe8/0x150 [ 205.966444][ T7937] should_fail_ex+0x3eb/0x540 [ 205.966463][ T7937] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 205.966517][ T7937] should_failslab+0xa8/0x100 [ 205.966551][ T7937] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 205.966572][ T7937] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 205.966602][ T7937] ? jffs2_alloc_inode+0x28/0x40 [ 205.966616][ T7937] ? jffs2_alloc_inode+0x28/0x40 [ 205.966636][ T7937] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 205.966668][ T7937] jffs2_alloc_inode+0x28/0x40 [ 205.966704][ T7937] alloc_inode+0x6a/0x1b0 [ 205.966727][ T7937] new_inode+0x1f/0x170 [ 205.966752][ T7937] jffs2_new_inode+0xdd/0xd20 [ 205.966779][ T7937] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 205.966800][ T7937] ? jffs2_mkdir+0x83/0xec0 [ 205.966831][ T7937] ? __pfx_jffs2_new_inode+0x10/0x10 [ 205.966852][ T7937] ? jffs2_mkdir+0x83/0xec0 [ 205.966873][ T7937] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 205.966903][ T7937] ? jffs2_mkdir+0x83/0xec0 [ 205.966938][ T7937] jffs2_mkdir+0x189/0xec0 [ 205.966958][ T7937] ? generic_permission+0x2ba/0x660 [ 205.966993][ T7937] ? __pfx_jffs2_mkdir+0x10/0x10 [ 205.967022][ T7937] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 205.967044][ T7937] ? security_inode_mkdir+0xc3/0x340 [ 205.967076][ T7937] vfs_mkdir+0x40e/0x630 [ 205.967103][ T7937] filename_mkdirat+0x285/0x510 [ 205.967136][ T7937] ? __might_fault+0xaf/0x130 [ 205.967177][ T7937] ? __pfx_filename_mkdirat+0x10/0x10 [ 205.967210][ T7937] ? do_getname+0x151/0x250 [ 205.967245][ T7937] __se_sys_mkdirat+0x35/0x150 [ 205.967269][ T7937] do_syscall_64+0x166/0x520 [ 205.967304][ T7937] ? trace_irq_disable+0x3b/0x140 [ 205.967331][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.967353][ T7937] ? clear_bhb_loop+0x70/0xc0 [ 205.967384][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.967400][ T7937] RIP: 0033:0x7f837ed9e159 [ 205.967415][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.967431][ T7937] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 205.967466][ T7937] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 205.967484][ T7937] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 205.967499][ T7937] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 205.967512][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.967525][ T7937] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 205.967563][ T7937] [ 206.259661][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.279043][ T5687] usb 3-1: not running at top speed; connect to a high speed hub [ 206.279080][ T5687] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 206.299617][ T5687] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.299657][ T5687] usb 3-1: config 1 interface 0 has no altsetting 0 [ 206.325224][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.325282][ T5687] usb 3-1: Product: syz [ 206.325300][ T5687] usb 3-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁 [ 206.325326][ T5687] usb 3-1: SerialNumber: syz [ 206.554976][ T5687] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 206.572940][ T5687] usb 3-1: USB disconnect, device number 36 [ 206.884184][ T5720] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 206.993086][ T5718] usbhid 2-1:0.0: can't add hid device: -71 [ 206.993198][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.012848][ T5718] usb 2-1: USB disconnect, device number 30 [ 207.037689][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.058049][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.070086][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.084995][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.086071][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.089442][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.091148][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.093249][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.148029][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.148608][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.236491][ T7956] syz.2.826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 207.237485][ T7956] FAULT_INJECTION: forcing a failure. [ 207.237485][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 207.237516][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.2.826 Not tainted syzkaller #0 PREEMPT(full) [ 207.237542][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.237557][ T7956] Call Trace: [ 207.237566][ T7956] [ 207.237576][ T7956] dump_stack_lvl+0xe8/0x150 [ 207.237613][ T7956] should_fail_ex+0x3eb/0x540 [ 207.237644][ T7956] should_failslab+0xa8/0x100 [ 207.237679][ T7956] __kmalloc_cache_noprof+0x9e/0x600 [ 207.237708][ T7956] ? __nft_trans_set_add+0x5e/0x710 [ 207.237737][ T7956] ? __nft_trans_set_add+0x5e/0x710 [ 207.237767][ T7956] ? __asan_memset+0x22/0x50 [ 207.237795][ T7956] __nft_trans_set_add+0x5e/0x710 [ 207.237834][ T7956] nf_tables_newset+0x1d87/0x2570 [ 207.237875][ T7956] ? __pfx_nf_tables_newset+0x10/0x10 [ 207.237907][ T7956] ? lock_acquire+0x115/0x350 [ 207.237947][ T7956] ? __nla_parse+0x40/0x60 [ 207.237982][ T7956] nfnetlink_rcv+0x1288/0x28c0 [ 207.238047][ T7956] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 207.238122][ T7956] ? skb_clone+0x246/0x3a0 [ 207.238165][ T7956] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.238195][ T7956] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.238232][ T7956] netlink_unicast+0x7bd/0x940 [ 207.238273][ T7956] netlink_sendmsg+0x7c3/0xae0 [ 207.238311][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.238358][ T7956] ? apparmor_socket_sendmsg+0x98/0x360 [ 207.238397][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.238428][ T7956] sock_sendmsg_nosec+0x13a/0x180 [ 207.238464][ T7956] ____sys_sendmsg+0x54e/0x850 [ 207.238497][ T7956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.238534][ T7956] ? import_iovec+0x73/0xa0 [ 207.238566][ T7956] ___sys_sendmsg+0x2a5/0x360 [ 207.238591][ T7956] ? __lock_acquire+0x747/0x2de0 [ 207.238622][ T7956] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.238653][ T7956] ? futex_wait+0x2a2/0x390 [ 207.238710][ T7956] ? __fget_files+0x3a2/0x420 [ 207.238735][ T7956] ? __fget_files+0x2a/0x420 [ 207.238773][ T7956] __x64_sys_sendmsg+0x1b1/0x290 [ 207.238803][ T7956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.238854][ T7956] do_syscall_64+0x166/0x520 [ 207.238882][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.238906][ T7956] ? clear_bhb_loop+0x70/0xc0 [ 207.238934][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.238958][ T7956] RIP: 0033:0x7f612b99e159 [ 207.238979][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.238999][ T7956] RSP: 002b:00007f612c7f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.239036][ T7956] RAX: ffffffffffffffda RBX: 00007f612bc25fa0 RCX: 00007f612b99e159 [ 207.239053][ T7956] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 207.239076][ T7956] RBP: 00007f612ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 207.239090][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.239105][ T7956] R13: 00007f612bc26038 R14: 00007f612bc25fa0 R15: 00007ffceeeee408 [ 207.239140][ T7956] [ 207.706903][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.708977][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.918086][ T5718] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 208.011834][ T7969] jffs2: notice: (7969) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.015204][ T5760] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.042668][ T7969] FAULT_INJECTION: forcing a failure. [ 208.042668][ T7969] name failslab, interval 1, probability 0, space 0, times 0 [ 208.042700][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.0.831 Not tainted syzkaller #0 PREEMPT(full) [ 208.042746][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.042763][ T7969] Call Trace: [ 208.042772][ T7969] [ 208.042782][ T7969] dump_stack_lvl+0xe8/0x150 [ 208.042817][ T7969] should_fail_ex+0x3eb/0x540 [ 208.042846][ T7969] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 208.042888][ T7969] should_failslab+0xa8/0x100 [ 208.042922][ T7969] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 208.042945][ T7969] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 208.042972][ T7969] ? jffs2_alloc_inode+0x28/0x40 [ 208.042993][ T7969] ? jffs2_alloc_inode+0x28/0x40 [ 208.043023][ T7969] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 208.043047][ T7969] jffs2_alloc_inode+0x28/0x40 [ 208.043070][ T7969] alloc_inode+0x6a/0x1b0 [ 208.043096][ T7969] new_inode+0x1f/0x170 [ 208.043124][ T7969] jffs2_new_inode+0xdd/0xd20 [ 208.043154][ T7969] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 208.043184][ T7969] ? jffs2_mkdir+0x83/0xec0 [ 208.043212][ T7969] ? __pfx_jffs2_new_inode+0x10/0x10 [ 208.043233][ T7969] ? jffs2_mkdir+0x83/0xec0 [ 208.043256][ T7969] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 208.043288][ T7969] ? jffs2_mkdir+0x83/0xec0 [ 208.043320][ T7969] jffs2_mkdir+0x189/0xec0 [ 208.043344][ T7969] ? generic_permission+0x2ba/0x660 [ 208.043366][ T7969] ? __pfx_jffs2_mkdir+0x10/0x10 [ 208.043390][ T7969] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 208.043414][ T7969] ? security_inode_mkdir+0xc3/0x340 [ 208.043446][ T7969] vfs_mkdir+0x40e/0x630 [ 208.043485][ T7969] filename_mkdirat+0x285/0x510 [ 208.043515][ T7969] ? __might_fault+0xaf/0x130 [ 208.043555][ T7969] ? __pfx_filename_mkdirat+0x10/0x10 [ 208.043590][ T7969] ? do_getname+0x151/0x250 [ 208.043629][ T7969] __se_sys_mkdirat+0x35/0x150 [ 208.043665][ T7969] do_syscall_64+0x166/0x520 [ 208.043693][ T7969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.043728][ T7969] ? clear_bhb_loop+0x70/0xc0 [ 208.043757][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.043782][ T7969] RIP: 0033:0x7f214899e159 [ 208.043804][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.043824][ T7969] RSP: 002b:00007f21497c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 208.043850][ T7969] RAX: ffffffffffffffda RBX: 00007f2148c25fa0 RCX: 00007f214899e159 [ 208.043868][ T7969] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 208.043905][ T7969] RBP: 00007f2148a3506b R08: 0000000000000000 R09: 0000000000000000 [ 208.043921][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.043935][ T7969] R13: 00007f2148c26038 R14: 00007f2148c25fa0 R15: 00007ffcf15c1cb8 [ 208.043973][ T7969] [ 208.096653][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 208.113088][ T5718] usb 2-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 208.157541][ T5760] usb 3-1: device descriptor read/64, error -71 [ 208.175986][ T5718] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 208.176041][ T5718] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 208.176088][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.407921][ T5760] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 208.545537][ T5760] usb 3-1: device descriptor read/64, error -71 [ 208.568896][ T5718] usb 2-1: string descriptor 0 read error: -71 [ 208.569792][ T5718] mdc800 2-1:1.0: probe fails -> wrong Interface [ 208.573069][ T5718] usb 2-1: USB disconnect, device number 31 [ 208.659165][ T5760] usb usb3-port1: attempt power cycle [ 208.662049][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.662101][ T5720] usb 4-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 208.663004][ T5720] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.663040][ T5720] usb 4-1: can't read configurations, error -71 [ 208.994150][ T5760] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 209.014616][ T5760] usb 3-1: device descriptor read/8, error -71 [ 209.233957][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 209.254686][ T5760] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 209.287320][ T5760] usb 3-1: device descriptor read/8, error -71 [ 209.394437][ T5760] usb usb3-port1: unable to enumerate USB device [ 209.424308][ T5687] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 209.577542][ T5687] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.577963][ T5687] usb 2-1: not running at top speed; connect to a high speed hub [ 209.577983][ T5687] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 209.578798][ T5687] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.578817][ T5687] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.580441][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.580456][ T5687] usb 2-1: Product: syz [ 209.580466][ T5687] usb 2-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁 [ 209.580480][ T5687] usb 2-1: SerialNumber: syz [ 209.664160][ T5718] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 209.714819][ T5720] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 209.802053][ T5687] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 209.813384][ T5687] usb 2-1: USB disconnect, device number 32 [ 209.821370][ T5718] usb 1-1: New USB device found: idVendor=056a, idProduct=0039, bcdDevice=0.00 [ 209.822535][ T5718] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.822576][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.822611][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.869744][ T5718] usb 1-1: config 0 descriptor?? [ 209.880967][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 209.882762][ T5720] usb 4-1: New USB device found: idVendor=08e4, idProduct=0163, bcdDevice=0.40 [ 209.883943][ T5720] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 209.918833][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.918863][ T5720] usb 4-1: Product: syz [ 209.918879][ T5720] usb 4-1: Manufacturer: syz [ 209.918895][ T5720] usb 4-1: SerialNumber: syz [ 210.105513][ T7989] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.63.0), cmd(4) [ 210.156299][ T5720] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 210.226295][ T5720] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.268094][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.355542][ T848] usb 4-1: USB disconnect, device number 41 [ 210.401181][ T7992] jffs2: notice: (7992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.422787][ T7992] FAULT_INJECTION: forcing a failure. [ 210.422787][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 210.422834][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.1.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.422856][ T7992] Tainted: [L]=SOFTLOCKUP [ 210.422862][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.422872][ T7992] Call Trace: [ 210.422898][ T7992] [ 210.422904][ T7992] dump_stack_lvl+0xe8/0x150 [ 210.422932][ T7992] should_fail_ex+0x3eb/0x540 [ 210.422954][ T7992] should_failslab+0xa8/0x100 [ 210.422979][ T7992] ? security_inode_alloc+0x39/0x310 [ 210.422997][ T7992] kmem_cache_alloc_noprof+0x9c/0x600 [ 210.423018][ T7992] ? __pfx_make_kgid+0x10/0x10 [ 210.423035][ T7992] ? security_inode_alloc+0x39/0x310 [ 210.423058][ T7992] security_inode_alloc+0x39/0x310 [ 210.423078][ T7992] inode_init_always_gfp+0x97e/0xd30 [ 210.423098][ T7992] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 210.423115][ T7992] alloc_inode+0x82/0x1b0 [ 210.423131][ T7992] new_inode+0x1f/0x170 [ 210.423151][ T7992] jffs2_new_inode+0xdd/0xd20 [ 210.423171][ T7992] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 210.423193][ T7992] ? jffs2_mkdir+0x83/0xec0 [ 210.423212][ T7992] ? __pfx_jffs2_new_inode+0x10/0x10 [ 210.423226][ T7992] ? jffs2_mkdir+0x83/0xec0 [ 210.423242][ T7992] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 210.423265][ T7992] ? jffs2_mkdir+0x83/0xec0 [ 210.423288][ T7992] jffs2_mkdir+0x189/0xec0 [ 210.423310][ T7992] ? generic_permission+0x2ba/0x660 [ 210.423328][ T7992] ? __pfx_jffs2_mkdir+0x10/0x10 [ 210.423349][ T7992] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 210.423366][ T7992] ? security_inode_mkdir+0xc3/0x340 [ 210.423388][ T7992] vfs_mkdir+0x40e/0x630 [ 210.423416][ T7992] filename_mkdirat+0x285/0x510 [ 210.423437][ T7992] ? __might_fault+0xaf/0x130 [ 210.423466][ T7992] ? __pfx_filename_mkdirat+0x10/0x10 [ 210.423491][ T7992] ? do_getname+0x151/0x250 [ 210.423524][ T7992] __se_sys_mkdirat+0x35/0x150 [ 210.423549][ T7992] do_syscall_64+0x166/0x520 [ 210.423570][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.423586][ T7992] ? clear_bhb_loop+0x70/0xc0 [ 210.423606][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.423623][ T7992] RIP: 0033:0x7f71d4d9e159 [ 210.423638][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.423652][ T7992] RSP: 002b:00007f71d5bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 210.423670][ T7992] RAX: ffffffffffffffda RBX: 00007f71d5025fa0 RCX: 00007f71d4d9e159 [ 210.423682][ T7992] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 210.423694][ T7992] RBP: 00007f71d4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 210.423704][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.423714][ T7992] R13: 00007f71d5026038 R14: 00007f71d5025fa0 R15: 00007ffeb0cb01b8 [ 210.423764][ T7992] [ 211.064993][ T7999] cgroup: Need name or subsystem set [ 211.175988][ T990] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 211.324157][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 211.324905][ T990] usb 3-1: New USB device found: idVendor=046d, idProduct=c29c, bcdDevice=0.00 [ 211.325861][ T990] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 211.325923][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.325957][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.325993][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.328512][ T990] usb 3-1: config 0 descriptor?? [ 211.709364][ T8012] xt_nfacct: accounting object `' does not exist [ 211.784376][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 211.785521][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 211.785578][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 211.855033][ T990] usbhid 3-1:0.0: can't add hid device: -71 [ 211.855143][ T990] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.863925][ T990] usb 3-1: USB disconnect, device number 41 [ 212.014223][ T5687] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 212.167939][ T5687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.168462][ T5687] usb 4-1: not running at top speed; connect to a high speed hub [ 212.168496][ T5687] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 212.169649][ T5687] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.169679][ T5687] usb 4-1: config 1 interface 0 has no altsetting 0 [ 212.172808][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.172852][ T5687] usb 4-1: Product: syz [ 212.172887][ T5687] usb 4-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁쨶㟺䓀肾暨㸛럐񿳖巤∋긡齮脦讂즥罿脥❨吚膯矧욃毣 [ 212.172944][ T5687] usb 4-1: SerialNumber: syz [ 212.390405][ T5718] usbhid 1-1:0.0: can't add hid device: -71 [ 212.390538][ T5718] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.412043][ T5718] usb 1-1: USB disconnect, device number 40 [ 212.477611][ T5687] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 212.499725][ T5687] usb 4-1: USB disconnect, device number 42 [ 212.504874][ T848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 212.566200][ T8022] jffs2: notice: (8022) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 212.581208][ T8022] FAULT_INJECTION: forcing a failure. [ 212.581208][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 212.581303][ T8022] CPU: 0 UID: 0 PID: 8022 Comm: syz.0.853 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.581378][ T8022] Tainted: [L]=SOFTLOCKUP [ 212.581397][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.581433][ T8022] Call Trace: [ 212.581453][ T8022] [ 212.581479][ T8022] dump_stack_lvl+0xe8/0x150 [ 212.581563][ T8022] should_fail_ex+0x3eb/0x540 [ 212.581637][ T8022] should_failslab+0xa8/0x100 [ 212.581712][ T8022] ? security_inode_alloc+0x39/0x310 [ 212.581775][ T8022] kmem_cache_alloc_noprof+0x9c/0x600 [ 212.581848][ T8022] ? __pfx_make_kgid+0x10/0x10 [ 212.581905][ T8022] ? security_inode_alloc+0x39/0x310 [ 212.581979][ T8022] security_inode_alloc+0x39/0x310 [ 212.582043][ T8022] inode_init_always_gfp+0x97e/0xd30 [ 212.582117][ T8022] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 212.582174][ T8022] alloc_inode+0x82/0x1b0 [ 212.582230][ T8022] new_inode+0x1f/0x170 [ 212.582295][ T8022] jffs2_new_inode+0xdd/0xd20 [ 212.582366][ T8022] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 212.582435][ T8022] ? jffs2_mkdir+0x83/0xec0 [ 212.582496][ T8022] ? __pfx_jffs2_new_inode+0x10/0x10 [ 212.582539][ T8022] ? jffs2_mkdir+0x83/0xec0 [ 212.582591][ T8022] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 212.582679][ T8022] ? jffs2_mkdir+0x83/0xec0 [ 212.582749][ T8022] jffs2_mkdir+0x189/0xec0 [ 212.582811][ T8022] ? generic_permission+0x2ba/0x660 [ 212.582898][ T8022] ? __pfx_jffs2_mkdir+0x10/0x10 [ 212.582954][ T8022] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 212.583020][ T8022] ? security_inode_mkdir+0xc3/0x340 [ 212.583097][ T8022] vfs_mkdir+0x40e/0x630 [ 212.583192][ T8022] filename_mkdirat+0x285/0x510 [ 212.583263][ T8022] ? __might_fault+0xaf/0x130 [ 212.583355][ T8022] ? __pfx_filename_mkdirat+0x10/0x10 [ 212.583442][ T8022] ? do_getname+0x151/0x250 [ 212.583536][ T8022] __se_sys_mkdirat+0x35/0x150 [ 212.583621][ T8022] do_syscall_64+0x166/0x520 [ 212.583687][ T8022] ? trace_irq_disable+0x3b/0x140 [ 212.583762][ T8022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.583832][ T8022] ? clear_bhb_loop+0x70/0xc0 [ 212.583906][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.583970][ T8022] RIP: 0033:0x7f214899e159 [ 212.584031][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.584092][ T8022] RSP: 002b:00007f21497c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 212.584151][ T8022] RAX: ffffffffffffffda RBX: 00007f2148c25fa0 RCX: 00007f214899e159 [ 212.584197][ T8022] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 212.584236][ T8022] RBP: 00007f2148a3506b R08: 0000000000000000 R09: 0000000000000000 [ 212.584273][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.584310][ T8022] R13: 00007f2148c26038 R14: 00007f2148c25fa0 R15: 00007ffcf15c1cb8 [ 212.584392][ T8022] [ 212.635029][ T848] usb 2-1: device descriptor read/64, error -71 [ 212.874363][ T848] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 213.005238][ T848] usb 2-1: device descriptor read/64, error -71 [ 213.114615][ T848] usb usb2-port1: attempt power cycle [ 213.206092][ T5718] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 213.334870][ T5718] usb 3-1: device descriptor read/64, error -71 [ 213.454176][ T848] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 213.476469][ T848] usb 2-1: device descriptor read/8, error -71 [ 213.574663][ T5718] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 213.618124][ T8065] jffs2: notice: (8065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.622053][ T8065] FAULT_INJECTION: forcing a failure. [ 213.622053][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 213.622077][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.3.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.622096][ T8065] Tainted: [L]=SOFTLOCKUP [ 213.622102][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.622111][ T8065] Call Trace: [ 213.622117][ T8065] [ 213.622123][ T8065] dump_stack_lvl+0xe8/0x150 [ 213.622150][ T8065] should_fail_ex+0x3eb/0x540 [ 213.622169][ T8065] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 213.622184][ T8065] should_failslab+0xa8/0x100 [ 213.622206][ T8065] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 213.622220][ T8065] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 213.622237][ T8065] ? jffs2_alloc_inode+0x28/0x40 [ 213.622251][ T8065] ? jffs2_alloc_inode+0x28/0x40 [ 213.622269][ T8065] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 213.622283][ T8065] jffs2_alloc_inode+0x28/0x40 [ 213.622298][ T8065] alloc_inode+0x6a/0x1b0 [ 213.622317][ T8065] new_inode+0x1f/0x170 [ 213.622336][ T8065] jffs2_new_inode+0xdd/0xd20 [ 213.622354][ T8065] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 213.622374][ T8065] ? jffs2_mkdir+0x83/0xec0 [ 213.622391][ T8065] ? __pfx_jffs2_new_inode+0x10/0x10 [ 213.622403][ T8065] ? jffs2_mkdir+0x83/0xec0 [ 213.622418][ T8065] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 213.622439][ T8065] ? jffs2_mkdir+0x83/0xec0 [ 213.622459][ T8065] jffs2_mkdir+0x189/0xec0 [ 213.622478][ T8065] ? generic_permission+0x2ba/0x660 [ 213.622494][ T8065] ? __pfx_jffs2_mkdir+0x10/0x10 [ 213.622513][ T8065] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 213.622528][ T8065] ? security_inode_mkdir+0xc3/0x340 [ 213.622548][ T8065] vfs_mkdir+0x40e/0x630 [ 213.622573][ T8065] filename_mkdirat+0x285/0x510 [ 213.622592][ T8065] ? __might_fault+0xaf/0x130 [ 213.622618][ T8065] ? __pfx_filename_mkdirat+0x10/0x10 [ 213.622640][ T8065] ? do_getname+0x151/0x250 [ 213.622665][ T8065] __se_sys_mkdirat+0x35/0x150 [ 213.622687][ T8065] do_syscall_64+0x166/0x520 [ 213.622705][ T8065] ? trace_irq_disable+0x3b/0x140 [ 213.622722][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.622738][ T8065] ? clear_bhb_loop+0x70/0xc0 [ 213.622757][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.622771][ T8065] RIP: 0033:0x7f837ed9e159 [ 213.622785][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.622797][ T8065] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 213.622815][ T8065] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 213.622827][ T8065] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 213.622838][ T8065] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 213.622847][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.622856][ T8065] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 213.622898][ T8065] [ 213.666002][ T5697] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 213.704303][ T5718] usb 3-1: device descriptor read/64, error -71 [ 213.714929][ T848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 213.735925][ T848] usb 2-1: device descriptor read/8, error -71 [ 213.819339][ T5718] usb usb3-port1: attempt power cycle [ 213.849225][ T848] usb usb2-port1: unable to enumerate USB device [ 213.917023][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.918322][ T5697] usb 1-1: not running at top speed; connect to a high speed hub [ 213.918393][ T5697] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 213.921113][ T5697] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.921189][ T5697] usb 1-1: config 1 interface 0 has no altsetting 0 [ 213.926455][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.926522][ T5697] usb 1-1: Product: syz [ 213.926566][ T5697] usb 1-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁쨶㟺䓀肾暨㸛럐񿳖巤∋긡齮脦讂즥罿脥❨吚膯矧욃毣 [ 213.926631][ T5697] usb 1-1: SerialNumber: syz [ 214.158899][ T5697] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 214.163108][ T5697] usb 1-1: USB disconnect, device number 41 [ 214.178078][ T5718] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 214.195435][ T5718] usb 3-1: device descriptor read/8, error -71 [ 214.248245][ T8068] loop0: detected capacity change from 0 to 3904 [ 214.435623][ T5718] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 214.464653][ T5718] usb 3-1: device descriptor read/8, error -71 [ 214.584676][ T5718] usb usb3-port1: unable to enumerate USB device [ 214.759682][ T8084] jffs2: notice: (8084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.770760][ T8084] FAULT_INJECTION: forcing a failure. [ 214.770760][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 214.770850][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.0.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.770949][ T8084] Tainted: [L]=SOFTLOCKUP [ 214.770975][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.771006][ T8084] Call Trace: [ 214.771032][ T8084] [ 214.771053][ T8084] dump_stack_lvl+0xe8/0x150 [ 214.771147][ T8084] should_fail_ex+0x3eb/0x540 [ 214.771235][ T8084] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 214.771305][ T8084] should_failslab+0xa8/0x100 [ 214.771389][ T8084] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 214.771454][ T8084] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 214.771529][ T8084] ? jffs2_alloc_inode+0x28/0x40 [ 214.771583][ T8084] ? jffs2_alloc_inode+0x28/0x40 [ 214.771666][ T8084] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 214.771723][ T8084] jffs2_alloc_inode+0x28/0x40 [ 214.771780][ T8084] alloc_inode+0x6a/0x1b0 [ 214.771845][ T8084] new_inode+0x1f/0x170 [ 214.771913][ T8084] jffs2_new_inode+0xdd/0xd20 [ 214.771988][ T8084] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 214.772064][ T8084] ? jffs2_mkdir+0x83/0xec0 [ 214.772139][ T8084] ? __pfx_jffs2_new_inode+0x10/0x10 [ 214.772192][ T8084] ? jffs2_mkdir+0x83/0xec0 [ 214.772248][ T8084] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 214.772330][ T8084] ? jffs2_mkdir+0x83/0xec0 [ 214.772404][ T8084] jffs2_mkdir+0x189/0xec0 [ 214.772477][ T8084] ? generic_permission+0x2ba/0x660 [ 214.772541][ T8084] ? __pfx_jffs2_mkdir+0x10/0x10 [ 214.772626][ T8084] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 214.772702][ T8084] ? security_inode_mkdir+0xc3/0x340 [ 214.772775][ T8084] vfs_mkdir+0x40e/0x630 [ 214.772889][ T8084] filename_mkdirat+0x285/0x510 [ 214.772958][ T8084] ? __might_fault+0xaf/0x130 [ 214.773055][ T8084] ? __pfx_filename_mkdirat+0x10/0x10 [ 214.773141][ T8084] ? do_getname+0x151/0x250 [ 214.773239][ T8084] __se_sys_mkdirat+0x35/0x150 [ 214.773325][ T8084] do_syscall_64+0x166/0x520 [ 214.773391][ T8084] ? trace_irq_disable+0x3b/0x140 [ 214.773464][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.773523][ T8084] ? clear_bhb_loop+0x70/0xc0 [ 214.773597][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.773662][ T8084] RIP: 0033:0x7f214899e159 [ 214.773718][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.773767][ T8084] RSP: 002b:00007f21497c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 214.773833][ T8084] RAX: ffffffffffffffda RBX: 00007f2148c25fa0 RCX: 00007f214899e159 [ 214.773879][ T8084] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 214.773918][ T8084] RBP: 00007f2148a3506b R08: 0000000000000000 R09: 0000000000000000 [ 214.773963][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.774006][ T8084] R13: 00007f2148c26038 R14: 00007f2148c25fa0 R15: 00007ffcf15c1cb8 [ 214.774105][ T8084] [ 215.271874][ T8091] binder: BINDER_SET_CONTEXT_MGR already set [ 215.418647][ T8093] gadgetfs: bound to dummy_udc driver [ 216.073262][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059c39800: rx timeout, send abort [ 216.111568][ T8091] syz.1.882 (8091): drop_caches: 2 [ 216.214184][ T5697] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 216.366177][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.366608][ T5697] usb 1-1: not running at top speed; connect to a high speed hub [ 216.366652][ T5697] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 216.367490][ T5697] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.367512][ T5697] usb 1-1: config 1 interface 0 has no altsetting 0 [ 216.369177][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.369194][ T5697] usb 1-1: Product: syz [ 216.369205][ T5697] usb 1-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁쨶㟺䓀肾暨㸛럐񿳖巤∋긡齮脦讂즥罿脥❨吚膯矧욃毣 [ 216.369226][ T5697] usb 1-1: SerialNumber: syz [ 216.394530][ T5687] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 216.411863][ T5720] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 216.544118][ T5720] usb 3-1: device descriptor read/64, error -71 [ 216.561367][ T5687] usb 2-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 216.562859][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.573906][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059c39800: abort rx timeout. Force session deactivation [ 216.594327][ T5687] usb 2-1: config 0 descriptor?? [ 216.620364][ T5697] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 216.639803][ T5697] usb 1-1: USB disconnect, device number 42 [ 216.697903][ T8109] jffs2: notice: (8109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.702761][ T8109] FAULT_INJECTION: forcing a failure. [ 216.702761][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 216.702804][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.3.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.702841][ T8109] Tainted: [L]=SOFTLOCKUP [ 216.702849][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.702863][ T8109] Call Trace: [ 216.702871][ T8109] [ 216.702881][ T8109] dump_stack_lvl+0xe8/0x150 [ 216.702915][ T8109] should_fail_ex+0x3eb/0x540 [ 216.702935][ T8109] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 216.702969][ T8109] should_failslab+0xa8/0x100 [ 216.703003][ T8109] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 216.703024][ T8109] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 216.703058][ T8109] ? jffs2_alloc_inode+0x28/0x40 [ 216.703073][ T8109] ? jffs2_alloc_inode+0x28/0x40 [ 216.703094][ T8109] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 216.703125][ T8109] jffs2_alloc_inode+0x28/0x40 [ 216.703149][ T8109] alloc_inode+0x6a/0x1b0 [ 216.703173][ T8109] new_inode+0x1f/0x170 [ 216.703201][ T8109] jffs2_new_inode+0xdd/0xd20 [ 216.703227][ T8109] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 216.703249][ T8109] ? jffs2_mkdir+0x83/0xec0 [ 216.703286][ T8109] ? __pfx_jffs2_new_inode+0x10/0x10 [ 216.703307][ T8109] ? jffs2_mkdir+0x83/0xec0 [ 216.703329][ T8109] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 216.703366][ T8109] ? jffs2_mkdir+0x83/0xec0 [ 216.703389][ T8109] jffs2_mkdir+0x189/0xec0 [ 216.703410][ T8109] ? generic_permission+0x2ba/0x660 [ 216.703447][ T8109] ? __pfx_jffs2_mkdir+0x10/0x10 [ 216.703475][ T8109] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 216.703537][ T8109] ? security_inode_mkdir+0xc3/0x340 [ 216.703562][ T8109] vfs_mkdir+0x40e/0x630 [ 216.703609][ T8109] filename_mkdirat+0x285/0x510 [ 216.703640][ T8109] ? __might_fault+0xaf/0x130 [ 216.703685][ T8109] ? __pfx_filename_mkdirat+0x10/0x10 [ 216.703712][ T8109] ? do_getname+0x151/0x250 [ 216.703755][ T8109] __se_sys_mkdirat+0x35/0x150 [ 216.703791][ T8109] do_syscall_64+0x166/0x520 [ 216.703817][ T8109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.703844][ T8109] ? clear_bhb_loop+0x70/0xc0 [ 216.703864][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.703880][ T8109] RIP: 0033:0x7f837ed9e159 [ 216.703912][ T8109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.703932][ T8109] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 216.703956][ T8109] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 216.703974][ T8109] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 216.703992][ T8109] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 216.704006][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.704019][ T8109] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 216.704062][ T8109] [ 216.784362][ T5720] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 216.817521][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 216.919334][ T5720] usb 3-1: device descriptor read/64, error -71 [ 217.035610][ T5720] usb usb3-port1: attempt power cycle [ 217.374081][ T5720] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 217.407424][ T5720] usb 3-1: device descriptor read/8, error -71 [ 217.644183][ T5720] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 217.664766][ T5720] usb 3-1: device descriptor read/8, error -71 [ 217.774599][ T5720] usb usb3-port1: unable to enumerate USB device [ 217.805222][ T848] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 217.824140][ T5718] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 217.934152][ T848] usb 1-1: device descriptor read/64, error -71 [ 217.974224][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 217.975008][ T5718] usb 4-1: New USB device found: idVendor=05ac, idProduct=9236, bcdDevice=72.3e [ 217.976119][ T5718] usb 4-1: config 1 has an invalid interface number: 224 but max is 1 [ 217.976147][ T5718] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.976167][ T5718] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.976188][ T5718] usb 4-1: config 1 has an invalid interface number: 32 but max is 1 [ 217.976241][ T5718] usb 4-1: config 1 has no interface number 0 [ 217.976260][ T5718] usb 4-1: config 1 has no interface number 1 [ 217.976317][ T5718] usb 4-1: config 1 interface 224 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 217.976345][ T5718] usb 4-1: config 1 interface 224 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 217.976383][ T5718] usb 4-1: config 1 interface 224 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 217.976403][ T5718] usb 4-1: config 1 interface 224 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 217.976421][ T5718] usb 4-1: config 1 interface 224 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 64 [ 217.976440][ T5718] usb 4-1: config 1 interface 224 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 217.976460][ T5718] usb 4-1: config 1 interface 224 altsetting 64 endpoint 0xC has invalid maxpacket 96, setting to 64 [ 217.976489][ T5718] usb 4-1: config 1 interface 32 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 217.976527][ T5718] usb 4-1: config 1 interface 32 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 217.976544][ T5718] usb 4-1: config 1 interface 224 has no altsetting 0 [ 217.976557][ T5718] usb 4-1: config 1 interface 32 has no altsetting 0 [ 217.978770][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.978815][ T5718] usb 4-1: Product: щ [ 217.978832][ T5718] usb 4-1: Manufacturer: 䝱恥䦭윬蝾ꔘ趪瑙㰔쮮䁵མ螲뻞젼ါ禠䈕〾鮼얪⫓ꄤ鮸὞掆䭰㐘ɫꊝ킔䞢재 [ 217.978883][ T5718] usb 4-1: SerialNumber: 吿ᬑ額먥䚨쳑豪פּ⠫첼䘎헃ꓖퟡ䫪ꫮ物Β듓钠綂﮸蜳๴䘴ሄ蹡瘽ॄ䲲ᖺ̞껨怲儷ᐒ턱誱腐ₛ⑾5䐉ᒺ滔ꓴ夦앨눃仓⃠鞶袷⍣殟䀹⚴囘錚ꩄ퍀ᕻ薈 [ 217.994914][ T8131] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 218.210515][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.214533][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.244122][ T848] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 218.296541][ T5718] appledisplay 4-1:1.224: Could not find int-in endpoint [ 218.299448][ T5718] usbhid 4-1:1.224: couldn't find an input interrupt endpoint [ 218.331595][ T5718] usb 4-1: USB disconnect, device number 43 [ 218.376795][ T848] usb 1-1: device descriptor read/64, error -71 [ 218.486261][ T848] usb usb1-port1: attempt power cycle [ 218.824117][ T848] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 218.846819][ T848] usb 1-1: device descriptor read/8, error -71 [ 219.084118][ T848] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 219.104778][ T848] usb 1-1: device descriptor read/8, error -71 [ 219.126774][ T8139] jffs2: notice: (8139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.131279][ T8139] FAULT_INJECTION: forcing a failure. [ 219.131279][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 219.131304][ T8139] CPU: 0 UID: 0 PID: 8139 Comm: syz.2.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.131326][ T8139] Tainted: [L]=SOFTLOCKUP [ 219.131331][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.131341][ T8139] Call Trace: [ 219.131347][ T8139] [ 219.131354][ T8139] dump_stack_lvl+0xe8/0x150 [ 219.131384][ T8139] should_fail_ex+0x3eb/0x540 [ 219.131404][ T8139] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 219.131420][ T8139] should_failslab+0xa8/0x100 [ 219.131444][ T8139] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 219.131459][ T8139] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 219.131479][ T8139] ? jffs2_alloc_inode+0x28/0x40 [ 219.131494][ T8139] ? jffs2_alloc_inode+0x28/0x40 [ 219.131513][ T8139] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 219.131529][ T8139] jffs2_alloc_inode+0x28/0x40 [ 219.131550][ T8139] alloc_inode+0x6a/0x1b0 [ 219.131567][ T8139] new_inode+0x1f/0x170 [ 219.131587][ T8139] jffs2_new_inode+0xdd/0xd20 [ 219.131607][ T8139] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 219.131629][ T8139] ? jffs2_mkdir+0x83/0xec0 [ 219.131648][ T8139] ? __pfx_jffs2_new_inode+0x10/0x10 [ 219.131662][ T8139] ? jffs2_mkdir+0x83/0xec0 [ 219.131678][ T8139] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 219.131701][ T8139] ? jffs2_mkdir+0x83/0xec0 [ 219.131724][ T8139] jffs2_mkdir+0x189/0xec0 [ 219.131744][ T8139] ? generic_permission+0x2ba/0x660 [ 219.131762][ T8139] ? __pfx_jffs2_mkdir+0x10/0x10 [ 219.131803][ T8139] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 219.131829][ T8139] ? security_inode_mkdir+0xc3/0x340 [ 219.131860][ T8139] vfs_mkdir+0x40e/0x630 [ 219.131911][ T8139] filename_mkdirat+0x285/0x510 [ 219.131940][ T8139] ? __might_fault+0xaf/0x130 [ 219.131968][ T8139] ? __pfx_filename_mkdirat+0x10/0x10 [ 219.131992][ T8139] ? do_getname+0x151/0x250 [ 219.132018][ T8139] __se_sys_mkdirat+0x35/0x150 [ 219.132043][ T8139] do_syscall_64+0x166/0x520 [ 219.132063][ T8139] ? trace_irq_disable+0x3b/0x140 [ 219.132081][ T8139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.132097][ T8139] ? clear_bhb_loop+0x70/0xc0 [ 219.132116][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.132132][ T8139] RIP: 0033:0x7f612b99e159 [ 219.132147][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.132160][ T8139] RSP: 002b:00007f612c7f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 219.132177][ T8139] RAX: ffffffffffffffda RBX: 00007f612bc25fa0 RCX: 00007f612b99e159 [ 219.132188][ T8139] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 219.132199][ T8139] RBP: 00007f612ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 219.132209][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.132218][ T8139] R13: 00007f612bc26038 R14: 00007f612bc25fa0 R15: 00007ffceeeee408 [ 219.132242][ T8139] [ 219.214639][ T5720] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 219.234816][ T848] usb usb1-port1: unable to enumerate USB device [ 219.357783][ T5687] usb 2-1: Cannot read MAC address [ 219.358018][ T5687] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 219.437106][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.438382][ T5720] usb 4-1: not running at top speed; connect to a high speed hub [ 219.438452][ T5720] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 219.445984][ T5720] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.446082][ T5720] usb 4-1: config 1 interface 0 has no altsetting 0 [ 219.478046][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.478106][ T5720] usb 4-1: Product: syz [ 219.478158][ T5720] usb 4-1: Manufacturer: Ꮣꓱ㮢瑗ᑘᷫỗ餶鵬ܳୌ禯䍍敽龘䋲婂≩맣梣Ꮫ㻉骀瞄遟珙揬ﶝᬠ㕩荆⮕牣坃鷝䱹䊕綣斖屵氳啹髁쨶㟺䓀肾暨㸛럐񿳖巤∋긡齮脦讂즥罿脥❨吚膯矧욃毣ྏ⭪ߗⅮ뚎斶鱳᭦Ǭ䇗㨧ᜯꥩ [ 219.478260][ T5720] usb 4-1: SerialNumber: syz [ 219.582413][ T5687] usb 2-1: USB disconnect, device number 37 [ 219.749528][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 219.800090][ T5720] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 219.830066][ T5720] usb 4-1: USB disconnect, device number 44 [ 220.134135][ T27] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 220.164148][ T5687] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 220.284084][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 220.284654][ T27] usb 2-1: New USB device found: idVendor=05ac, idProduct=9236, bcdDevice=72.3e [ 220.285708][ T27] usb 2-1: config 1 has an invalid interface number: 224 but max is 1 [ 220.285734][ T27] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.285762][ T27] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.285779][ T27] usb 2-1: config 1 has an invalid interface number: 32 but max is 1 [ 220.285802][ T27] usb 2-1: config 1 has no interface number 0 [ 220.285813][ T27] usb 2-1: config 1 has no interface number 1 [ 220.285863][ T27] usb 2-1: config 1 interface 224 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 220.285879][ T27] usb 2-1: config 1 interface 224 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 220.285895][ T27] usb 2-1: config 1 interface 224 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 220.285913][ T27] usb 2-1: config 1 interface 224 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 220.285944][ T27] usb 2-1: config 1 interface 224 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 64 [ 220.285960][ T27] usb 2-1: config 1 interface 224 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 220.285978][ T27] usb 2-1: config 1 interface 224 altsetting 64 endpoint 0xC has invalid maxpacket 96, setting to 64 [ 220.286003][ T27] usb 2-1: config 1 interface 32 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 220.286019][ T27] usb 2-1: config 1 interface 32 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 220.286033][ T27] usb 2-1: config 1 interface 224 has no altsetting 0 [ 220.286045][ T27] usb 2-1: config 1 interface 32 has no altsetting 0 [ 220.288568][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.288591][ T27] usb 2-1: Product: щ [ 220.288605][ T27] usb 2-1: Manufacturer: 䝱恥䦭윬蝾ꔘ趪瑙㰔쮮䁵མ螲뻞젼ါ禠䈕〾鮼얪⫓ꄤ鮸὞掆䭰㐘ɫꊝ킔䞢재 [ 220.288630][ T27] usb 2-1: SerialNumber: 吿ᬑ額먥䚨쳑豪פּ⠫첼䘎헃ꓖퟡ䫪ꫮ物Β듓钠綂﮸蜳๴䘴ሄ蹡瘽ॄ䲲ᖺ̞껨怲儷ᐒ턱誱腐ₛ⑾5䐉ᒺ滔ꓴ夦앨눃仓⃠鞶袷⍣殟䀹⚴囘錚ꩄ퍀ᕻ薈 [ 220.292825][ T8157] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 220.315929][ T5687] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 220.316042][ T5687] usb 3-1: no configurations [ 220.316083][ T5687] usb 3-1: can't read configurations, error -22 [ 220.444549][ T5687] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 220.508831][ T8161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.911'. [ 220.570625][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.573050][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.595217][ T5687] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 220.595261][ T5687] usb 3-1: no configurations [ 220.595274][ T5687] usb 3-1: can't read configurations, error -22 [ 220.595551][ T5687] usb usb3-port1: attempt power cycle [ 220.782536][ T8168] jffs2: notice: (8168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.803808][ T8168] FAULT_INJECTION: forcing a failure. [ 220.803808][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 220.803844][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.803874][ T8168] Tainted: [L]=SOFTLOCKUP [ 220.803881][ T8168] Hardware name: Google Goo ** replaying previous printk message ** [ 220.803881][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.803894][ T8168] Call Trace: [ 220.803903][ T8168] [ 220.803912][ T8168] dump_stack_lvl+0xe8/0x150 [ 220.803945][ T8168] should_fail_ex+0x3eb/0x540 [ 220.803980][ T8168] should_failslab+0xa8/0x100 [ 220.804012][ T8168] ? jffs2_do_new_inode+0x27/0x510 [ 220.804043][ T8168] kmem_cache_alloc_noprof+0x9c/0x600 [ 220.804068][ T8168] ? jffs2_do_new_inode+0x27/0x510 [ 220.804099][ T8168] ? __pfx_from_kgid+0x10/0x10 [ 220.804128][ T8168] jffs2_do_new_inode+0x27/0x510 [ 220.804162][ T8168] jffs2_new_inode+0x45c/0xd20 [ 220.804194][ T8168] ? __pfx_jffs2_new_inode+0x10/0x10 [ 220.804212][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 220.804231][ T8168] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 220.804264][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 220.804300][ T8168] jffs2_mkdir+0x189/0xec0 [ 220.804327][ T8168] ? generic_permission+0x2ba/0x660 [ 220.804351][ T8168] ? __pfx_jffs2_mkdir+0x10/0x10 [ 220.804390][ T8168] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 220.804413][ T8168] ? security_inode_mkdir+0xc3/0x340 [ 220.804441][ T8168] vfs_mkdir+0x40e/0x630 [ 220.804474][ T8168] filename_mkdirat+0x285/0x510 [ 220.804498][ T8168] ? __might_fault+0xaf/0x130 [ 220.804534][ T8168] ? __pfx_filename_mkdirat+0x10/0x10 [ 220.804567][ T8168] ? do_getname+0x151/0x250 [ 220.804599][ T8168] __se_sys_mkdirat+0x35/0x150 [ 220.804628][ T8168] do_syscall_64+0x166/0x520 [ 220.804651][ T8168] ? trace_irq_disable+0x3b/0x140 [ 220.804676][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.804698][ T8168] ? clear_bhb_loop+0x70/0xc0 [ 220.804722][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.804742][ T8168] RIP: 0033:0x7f837ed9e159 [ 220.804761][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.804778][ T8168] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 220.804801][ T8168] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 220.804819][ T8168] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 220.804835][ T8168] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 220.804848][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.804861][ T8168] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 220.804893][ T8168] [ 220.809922][ T8168] ================================================================== [ 220.809960][ T8168] BUG: KASAN: slab-use-after-free in jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 220.810042][ T8168] Read of size 4 at addr ffff8880748ad668 by task syz.3.914/8168 [ 220.810087][ T8168] [ 220.810116][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.810189][ T8168] Tainted: [L]=SOFTLOCKUP [ 220.810214][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.810244][ T8168] Call Trace: [ 220.810263][ T8168] [ 220.810297][ T8168] dump_stack_lvl+0xe8/0x150 [ 220.810363][ T8168] print_address_description+0x55/0x1e0 [ 220.810444][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 220.810502][ T8168] print_report+0x58/0x70 [ 220.810573][ T8168] kasan_report+0x117/0x150 [ 220.810647][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 220.810733][ T8168] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 220.810831][ T8168] jffs2_do_clear_inode+0x58/0x390 [ 220.810908][ T8168] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 220.810992][ T8168] evict+0x624/0xb50 [ 220.811067][ T8168] ? __pfx_evict+0x10/0x10 [ 220.811140][ T8168] ? do_raw_spin_unlock+0xf5/0x200 [ 220.811223][ T8168] ? _raw_spin_unlock+0x28/0x50 [ 220.811282][ T8168] ? iput+0xb7f/0xf00 [ 220.811345][ T8168] jffs2_new_inode+0x48a/0xd20 [ 220.811403][ T8168] ? __pfx_jffs2_new_inode+0x10/0x10 [ 220.811460][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 220.811537][ T8168] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 220.811658][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 220.811725][ T8168] jffs2_mkdir+0x189/0xec0 [ 220.811786][ T8168] ? generic_permission+0x2ba/0x660 [ 220.811837][ T8168] ? __pfx_jffs2_mkdir+0x10/0x10 [ 220.811903][ T8168] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 220.811961][ T8168] ? security_inode_mkdir+0xc3/0x340 [ 220.812028][ T8168] vfs_mkdir+0x40e/0x630 [ 220.812126][ T8168] filename_mkdirat+0x285/0x510 [ 220.812207][ T8168] ? __might_fault+0xaf/0x130 [ 220.812302][ T8168] ? __pfx_filename_mkdirat+0x10/0x10 [ 220.812379][ T8168] ? do_getname+0x151/0x250 [ 220.812465][ T8168] __se_sys_mkdirat+0x35/0x150 [ 220.812541][ T8168] do_syscall_64+0x166/0x520 [ 220.812606][ T8168] ? trace_irq_disable+0x3b/0x140 [ 220.812672][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.812723][ T8168] ? clear_bhb_loop+0x70/0xc0 [ 220.812788][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.812847][ T8168] RIP: 0033:0x7f837ed9e159 [ 220.812894][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=3838892 recv=3165180 n=-1 (errno 104: Connection reset by peer) [ 220.812937][ T8168] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 220.813002][ T8168] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 220.813042][ T8168] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 220.813081][ T8168] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 220.813119][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.813156][ T8168] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 220.813217][ T8168] [ 220.813236][ T8168] [ 220.813261][ T8168] Allocated by task 8109: [ 220.813290][ T8168] kasan_save_track+0x3e/0x80 [ 220.813349][ T8168] __kasan_slab_alloc+0x6c/0x80 [ 220.813408][ T8168] kmem_cache_alloc_noprof+0x2b4/0x600 [ 220.813470][ T8168] jffs2_scan_make_ino_cache+0x89/0x1d0 [ 220.813559][ T8168] jffs2_sum_scan_sumnode+0x498/0x2870 [ 220.813643][ T8168] jffs2_scan_medium+0x882/0x7240 [ 220.813712][ T8168] jffs2_do_mount_fs+0x775/0x22b0 [ 220.813790][ T8168] jffs2_do_fill_super+0x555/0xc50 [ 220.813831][ T8168] mtd_get_sb+0x192/0x420 [ 220.813900][ T8168] get_tree_mtd+0x597/0x7d0 [ 220.813974][ T8168] vfs_get_tree+0x92/0x2a0 [ 220.814032][ T8168] do_new_mount+0x319/0xdc0 [ 220.814091][ T8168] __se_sys_mount+0x31d/0x420 [ 220.814137][ T8168] do_syscall_64+0x166/0x520 [ 220.814186][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.814234][ T8168] [ 220.814250][ T8168] Freed by task 5614: [ 220.814273][ T8168] kasan_save_track+0x3e/0x80 [ 220.814372][ T8168] kasan_save_free_info+0x40/0x50 [ 220.814412][ T8168] __kasan_slab_free+0x5c/0x80 [ 220.814476][ T8168] kmem_cache_free+0x182/0x650 [ 220.814530][ T8168] jffs2_free_ino_caches+0xec/0x1c0 [ 220.814613][ T8168] jffs2_put_super+0x6c/0x170 [ 220.814655][ T8168] generic_shutdown_super+0x13d/0x2d0 [ 220.814709][ T8168] kill_mtd_super+0x23/0x70 [ 220.814778][ T8168] jffs2_kill_sb+0x96/0xb0 [ 220.814821][ T8168] deactivate_locked_super+0xbe/0x110 [ 220.814882][ T8168] cleanup_mnt+0x3d3/0x460 [ 220.814940][ T8168] task_work_run+0x1d9/0x260 [ 220.814996][ T8168] exit_to_user_mode_loop+0x204/0x770 [ 220.815055][ T8168] do_syscall_64+0x328/0x520 [ 220.815112][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.815161][ T8168] [ 220.815178][ T8168] The buggy address belongs to the object at ffff8880748ad640 [ 220.815178][ T8168] which belongs to the cache jffs2_inode_cache of size 48 [ 220.815226][ T8168] The buggy address is located 40 bytes inside of [ 220.815226][ T8168] freed 48-byte region [ffff8880748ad640, ffff8880748ad670) [ 220.815284][ T8168] [ 220.815303][ T8168] The buggy address belongs to the physical page: [ 220.815341][ T8168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x748ad [ 220.815390][ T8168] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 220.815447][ T8168] page_type: f5(slab) [ 220.815497][ T8168] raw: 00fff00000000000 ffff88801ef1ab40 dead000000000100 dead000000000122 [ 220.815552][ T8168] raw: 0000000000000000 0000000200400040 00000000f5000000 0000000000000000 [ 220.815582][ T8168] page dumped because: kasan: bad access detected [ 220.815611][ T8168] page_owner tracks the page as allocated [ 220.815630][ T8168] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7250, tgid 7249 (syz.0.573), ts 159222570416 [ 220.815718][ T8168] post_alloc_hook+0x1f9/0x250 [ 220.815766][ T8168] get_page_from_freelist+0x220f/0x2280 [ 220.815825][ T8168] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 220.815883][ T8168] allocate_slab+0x7d/0x5e0 [ 220.815973][ T8168] refill_objects+0x2d5/0x350 [ 220.816040][ T8168] __pcs_replace_empty_main+0x2c8/0x6c0 [ 220.816106][ T8168] kmem_cache_alloc_noprof+0x394/0x600 [ 220.816171][ T8168] jffs2_do_new_inode+0x27/0x510 [ 220.816245][ T8168] jffs2_new_inode+0x45c/0xd20 [ 220.816306][ T8168] jffs2_mkdir+0x189/0xec0 [ 220.816360][ T8168] vfs_mkdir+0x40e/0x630 [ 220.816428][ T8168] filename_mkdirat+0x285/0x510 [ 220.816491][ T8168] __se_sys_mkdirat+0x35/0x150 [ 220.816551][ T8168] do_syscall_64+0x166/0x520 [ 220.816608][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.816657][ T8168] page last free pid 7249 tgid 7249 ts 159215335311 stack trace: [ 220.816695][ T8168] __free_frozen_pages+0xc97/0xd90 [ 220.816743][ T8168] rcu_core+0x926/0x1260 [ 220.816805][ T8168] handle_softirqs+0x223/0x840 [ 220.816875][ T8168] __irq_exit_rcu+0xcb/0x220 [ 220.816931][ T8168] irq_exit_rcu+0x9/0x30 [ 220.816986][ T8168] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 220.817035][ T8168] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.817090][ T8168] [ 220.817100][ T8168] Memory state around the buggy address: [ 220.817128][ T8168] ffff8880748ad500: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 220.817164][ T8168] ffff8880748ad580: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 220.817201][ T8168] >ffff8880748ad600: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 220.817228][ T8168] ^ [ 220.817259][ T8168] ffff8880748ad680: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 220.817304][ T8168] ffff8880748ad700: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 220.817350][ T8168] ================================================================== [ 220.838261][ T8168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.842333][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.853198][ T8168] Tainted: [L]=SOFTLOCKUP [ 221.857529][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.867585][ T8168] Call Trace: [ 221.870867][ T8168] [ 221.873804][ T8168] vpanic+0x26f/0x710 [ 221.877815][ T8168] panic+0xc5/0xd0 [ 221.881555][ T8168] ? __pfx_panic+0x10/0x10 [ 221.885993][ T8168] ? preempt_schedule_thunk+0x16/0x40 [ 221.891373][ T8168] ? preempt_schedule_thunk+0x16/0x40 [ 221.896775][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 221.902502][ T8168] check_panic_on_warn+0x89/0xb0 [ 221.907460][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 221.913199][ T8168] end_report+0x73/0x170 [ 221.917481][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 221.923216][ T8168] kasan_report+0x128/0x150 [ 221.927745][ T8168] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 221.933484][ T8168] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 221.939046][ T8168] jffs2_do_clear_inode+0x58/0x390 [ 221.944182][ T8168] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 221.949658][ T8168] evict+0x624/0xb50 [ 221.953573][ T8168] ? __pfx_evict+0x10/0x10 [ 221.958005][ T8168] ? do_raw_spin_unlock+0xf5/0x200 [ 221.963141][ T8168] ? _raw_spin_unlock+0x28/0x50 [ 221.968002][ T8168] ? iput+0xb7f/0xf00 [ 221.972005][ T8168] jffs2_new_inode+0x48a/0xd20 [ 221.976781][ T8168] ? __pfx_jffs2_new_inode+0x10/0x10 [ 221.982073][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 221.986583][ T8168] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 221.992491][ T8168] ? jffs2_mkdir+0x83/0xec0 [ 221.997005][ T8168] jffs2_mkdir+0x189/0xec0 [ 222.001453][ T8168] ? generic_permission+0x2ba/0x660 [ 222.006665][ T8168] ? __pfx_jffs2_mkdir+0x10/0x10 [ 222.011616][ T8168] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 222.016645][ T8168] ? security_inode_mkdir+0xc3/0x340 [ 222.021937][ T8168] vfs_mkdir+0x40e/0x630 [ 222.026198][ T8168] filename_mkdirat+0x285/0x510 [ 222.031153][ T8168] ? __might_fault+0xaf/0x130 [ 222.035850][ T8168] ? __pfx_filename_mkdirat+0x10/0x10 [ 222.041239][ T8168] ? do_getname+0x151/0x250 [ 222.045777][ T8168] __se_sys_mkdirat+0x35/0x150 [ 222.050552][ T8168] do_syscall_64+0x166/0x520 [ 222.055155][ T8168] ? trace_irq_disable+0x3b/0x140 [ 222.060207][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.066282][ T8168] ? clear_bhb_loop+0x70/0xc0 [ 222.070977][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.076880][ T8168] RIP: 0033:0x7f837ed9e159 [ 222.081333][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.100949][ T8168] RSP: 002b:00007f837fc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 222.109371][ T8168] RAX: ffffffffffffffda RBX: 00007f837f025fa0 RCX: 00007f837ed9e159 [ 222.117347][ T8168] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 222.125328][ T8168] RBP: 00007f837ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 222.133307][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.141287][ T8168] R13: 00007f837f026038 R14: 00007f837f025fa0 R15: 00007ffd48469708 [ 222.149276][ T8168] [ 222.152498][ T8168] Kernel Offset: disabled [ 222.156831][ T8168] Rebooting in 86400 seconds..