last executing test programs: 9.288848421s ago: executing program 1 (id=1099): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) creat(0x0, 0xd931d3864d39dcca) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 6.703789072s ago: executing program 3 (id=1109): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x3, 0xfffffffc}]}) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 6.576194211s ago: executing program 0 (id=1111): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208004500002800000000000290780000e7ffe00003000f0090780001bff9000000050000000200000009"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 5.614934608s ago: executing program 0 (id=1113): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 5.454603904s ago: executing program 1 (id=1114): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mknod(0x0, 0x8000, 0xd02) acct(0x0) acct(0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r5, r7, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r1}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x0, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r6, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) 5.223743056s ago: executing program 0 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[], 0x0) 4.739439354s ago: executing program 0 (id=1118): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'veth0_virt_wifi\x00', {0x4f8}, 0xe54}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff7f, 0x4, 0x3ff, 0x7, 0x9}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x3}, 0x8) 4.712140791s ago: executing program 1 (id=1119): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) read$dsp(r0, &(0x7f0000000200)=""/6, 0x6) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 3.718940604s ago: executing program 2 (id=1120): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x96}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 3.283339232s ago: executing program 3 (id=1121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529e400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) 3.172147597s ago: executing program 1 (id=1122): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 3.108354991s ago: executing program 3 (id=1123): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000200)="bb", 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 3.02753759s ago: executing program 1 (id=1124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 2.940740659s ago: executing program 1 (id=1125): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) 2.899390088s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@erp={0x2a, 0x1, {0x1}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x84}}, 0x0) 2.741193474s ago: executing program 2 (id=1127): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff2, 0x0, 0x1, 0x6, 0x9}}]}]}}}]}, 0x68}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x20, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.740768324s ago: executing program 0 (id=1128): r0 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$can_j1939(0x1d, 0x2, 0x7) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x2c}}, 0x0) 2.217868661s ago: executing program 3 (id=1129): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x3, 0xfffffffc}]}) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.850390275s ago: executing program 2 (id=1130): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) creat(0x0, 0xd931d3864d39dcca) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 329.574766ms ago: executing program 2 (id=1131): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 309.883701ms ago: executing program 2 (id=1132): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 258.544022ms ago: executing program 3 (id=1133): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00008000e8ff0000000000000001000060e6677c5b5462b915d54bec56c73d3696563253127025a2a4330cc236b2eeb1bb94b871a038ea093b8852dff6074921c039238a743a63431cdc2da69795715c0d3fc4e2f65e0a51735b847664a19f4c"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe8}}, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) tkill(r4, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 178.714991ms ago: executing program 2 (id=1134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'veth0_virt_wifi\x00', {0x4f8}, 0xe54}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff7f, 0x4, 0x3ff, 0x7, 0x9}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x3}, 0x8) 0s ago: executing program 3 (id=1135): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x96}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) kernel console output (not intermixed with test programs): 7253] ? show_regs_print_info+0x20/0x20 [ 211.419937][ T7253] ? load_image+0x420/0x420 [ 211.419988][ T7253] ? __might_sleep+0xe0/0xe0 [ 211.420015][ T7253] ? __lock_acquire+0x7d80/0x7d80 [ 211.438537][ T7253] should_fail_ex+0x394/0x4c0 [ 211.444101][ T7253] should_failslab+0x9/0x20 [ 211.449993][ T7253] slab_pre_alloc_hook+0x59/0x300 [ 211.456096][ T7253] ? memcg_list_lru_alloc+0x231/0xb00 [ 211.462596][ T7253] ? memcg_list_lru_alloc+0x231/0xb00 [ 211.469026][ T7253] __kmem_cache_alloc_node+0x53/0x250 [ 211.475349][ T7253] ? memcg_list_lru_alloc+0x231/0xb00 [ 211.481394][ T7253] __kmalloc+0xa7/0x240 [ 211.486924][ T7253] memcg_list_lru_alloc+0x231/0xb00 [ 211.493806][ T7253] ? get_obj_cgroup_from_current+0xd4/0x280 [ 211.500822][ T7253] ? memcg_reparent_list_lrus+0x860/0x860 [ 211.507951][ T7253] ? get_obj_cgroup_from_current+0xd4/0x280 [ 211.515319][ T7253] slab_pre_alloc_hook+0x2ad/0x300 [ 211.520685][ T7253] ? slab_pre_alloc_hook+0xb1/0x300 [ 211.526541][ T7253] kmem_cache_alloc_lru+0x4d/0x2b0 [ 211.532445][ T7253] ? __d_alloc+0x31/0x710 [ 211.537297][ T7253] __d_alloc+0x31/0x710 [ 211.541613][ T7253] d_alloc_pseudo+0x1d/0x70 [ 211.546235][ T7253] alloc_file_pseudo+0xe4/0x210 [ 211.551977][ T7253] ? fput+0x1a0/0x1a0 [ 211.556190][ T7253] ? anon_inode_make_secure_inode+0xfb/0x160 [ 211.562288][ T7253] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 211.567767][ T7253] ? _raw_spin_unlock+0x28/0x40 [ 211.572730][ T7253] __se_sys_memfd_secret+0x125/0x300 [ 211.578595][ T7253] do_syscall_64+0x55/0xb0 [ 211.583472][ T7253] ? clear_bhb_loop+0x40/0x90 [ 211.588982][ T7253] ? clear_bhb_loop+0x40/0x90 [ 211.593983][ T7253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.600688][ T7253] RIP: 0033:0x7fad9c39e159 [ 211.606035][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.628417][ T7253] RSP: 002b:00007fad9a5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 211.638127][ T7253] RAX: ffffffffffffffda RBX: 00007fad9c626090 RCX: 00007fad9c39e159 [ 211.646510][ T7253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.656004][ T7253] RBP: 00007fad9c43506b R08: 0000000000000000 R09: 0000000000000000 [ 211.664628][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.674029][ T7253] R13: 00007fad9c626128 R14: 00007fad9c626090 R15: 00007ffd3f67a6e8 [ 211.682585][ T7253] [ 211.692553][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.704815][ T7252] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 211.717274][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.730025][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.741577][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 211.786197][ T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 211.811093][ T6197] usb 4-1: USB disconnect, device number 6 [ 211.841290][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.869421][ T7256] md/raid:md0: not clean -- starting background reconstruction [ 211.877564][ T7256] md/raid:md0: device ram0 operational as raid disk 0 [ 211.894343][ T8] usb 3-1: Product: syz [ 211.910735][ T8] usb 3-1: Manufacturer: syz [ 211.925682][ T7256] md/raid:md0: cannot start dirty degraded array. [ 212.176653][ T7256] md/raid:md0: failed to run raid set. [ 212.184955][ T7256] md: pers->run() failed ... [ 212.197113][ T6197] usb 3-1: USB disconnect, device number 17 [ 212.249077][ T7252] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 212.260658][ T7252] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 214.654935][ C1] net_ratelimit: 6 callbacks suppressed [ 215.691016][ T7285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.409'. [ 216.397671][ T7285] tipc: Started in network mode [ 216.429010][ T7285] tipc: Node identity 2002a3a, cluster identity 4711 [ 216.465155][ T7285] tipc: Node number set to 33565242 [ 216.475102][ T28] audit: type=1800 audit(1790437172.244:8): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="id" dev="configfs" ino=12952 res=0 errno=0 [ 216.793899][ T7296] md/raid:md0: not clean -- starting background reconstruction [ 216.811656][ T7302] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 216.820241][ T7296] md/raid:md0: device ram0 operational as raid disk 0 [ 216.915571][ T7296] md/raid:md0: cannot start dirty degraded array. [ 216.925127][ T7295] FAULT_INJECTION: forcing a failure. [ 216.925127][ T7295] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.958166][ T7295] CPU: 0 PID: 7295 Comm: syz.2.411 Not tainted syzkaller #0 [ 216.961220][ T7302] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 216.965599][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.965616][ T7295] Call Trace: [ 216.965625][ T7295] [ 216.965635][ T7295] dump_stack_lvl+0x18c/0x250 [ 217.003295][ T7295] ? show_regs_print_info+0x20/0x20 [ 217.014246][ T7295] ? load_image+0x420/0x420 [ 217.018816][ T7295] ? kmem_cache_alloc+0x17e/0x2c0 [ 217.037156][ T7295] ? alloc_file+0x5b/0x600 [ 217.042610][ T7295] ? __se_sys_memfd_secret+0x125/0x300 [ 217.048854][ T7295] ? do_syscall_64+0x55/0xb0 [ 217.048894][ T7295] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.048929][ T7295] should_fail_ex+0x394/0x4c0 [ 217.048971][ T7295] get_futex_key+0x136/0x1030 [ 217.049003][ T7295] ? futex_setup_timer+0xc0/0xc0 [ 217.060847][ T7295] futex_wake+0x127/0x4f0 [ 217.083930][ T7295] ? verify_lock_unused+0x140/0x140 [ 217.090885][ T7295] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 217.092406][ T7302] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 217.097305][ T7295] ? futex_wake_mark+0x150/0x150 [ 217.097342][ T7295] ? percpu_counter_add_batch+0x252/0x2a0 [ 217.097374][ T7295] ? percpu_counter_set+0x1b0/0x1b0 [ 217.120828][ T7295] do_futex+0x35d/0x3e0 [ 217.125407][ T7295] ? fd_install+0x60/0x4e0 [ 217.129974][ T7295] ? __ia32_sys_get_robust_list+0x110/0x110 [ 217.136021][ T7295] __se_sys_futex+0x3a9/0x440 [ 217.141533][ T7295] ? __x64_sys_futex+0xf0/0xf0 [ 217.141576][ T7295] ? __x64_sys_futex+0x21/0xf0 [ 217.141597][ T7295] do_syscall_64+0x55/0xb0 [ 217.141623][ T7295] ? clear_bhb_loop+0x40/0x90 [ 217.141647][ T7295] ? clear_bhb_loop+0x40/0x90 [ 217.141673][ T7295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.141700][ T7295] RIP: 0033:0x7f2ad419e159 [ 217.141722][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.141739][ T7295] RSP: 002b:00007f2ad23f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.141764][ T7295] RAX: ffffffffffffffda RBX: 00007f2ad4425fa8 RCX: 00007f2ad419e159 [ 217.141780][ T7295] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ad4425fac [ 217.141794][ T7295] RBP: 00007f2ad4425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 217.141809][ T7295] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 217.141821][ T7295] R13: 00007f2ad4426038 R14: 00007ffd2d7d6060 R15: 00007ffd2d7d6148 [ 217.141854][ T7295] [ 217.356824][ T7296] md/raid:md0: failed to run raid set. [ 217.408957][ T7296] md: pers->run() failed ... [ 217.558096][ T6197] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 217.646197][ T7302] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 217.674369][ T7302] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 217.814527][ T6197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.305819][ T6197] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 218.675955][ T6197] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 218.697171][ T6197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.717956][ T6197] usb 2-1: Product: syz [ 218.722187][ T6197] usb 2-1: Manufacturer: syz [ 218.972278][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 219.020715][ T6197] usb 2-1: USB disconnect, device number 11 [ 219.174866][ T28] audit: type=1800 audit(1790437175.034:9): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.422" name="id" dev="configfs" ino=12208 res=0 errno=0 [ 220.031431][ C0] net_ratelimit: 10 callbacks suppressed [ 220.225423][ T7340] md/raid:md0: not clean -- starting background reconstruction [ 220.250432][ T7340] md/raid:md0: device ram0 operational as raid disk 0 [ 221.150501][ T7340] md/raid:md0: cannot start dirty degraded array. [ 221.410828][ T7340] md/raid:md0: failed to run raid set. [ 221.416580][ T7340] md: pers->run() failed ... [ 221.564339][ T7363] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 222.368846][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.456895][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.825574][ T28] audit: type=1800 audit(1790437178.684:10): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.433" name="id" dev="configfs" ino=13155 res=0 errno=0 [ 223.845657][ T7387] md/raid:md0: not clean -- starting background reconstruction [ 224.007636][ T7387] md/raid:md0: device ram0 operational as raid disk 0 [ 224.532201][ T7387] md/raid:md0: couldn't allocate thread. [ 224.801297][ T7388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 225.636256][ T7399] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 225.698002][ T7387] md: pers->run() failed ... [ 227.279778][ T28] audit: type=1800 audit(1790437183.134:11): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.444" name="id" dev="configfs" ino=13188 res=0 errno=0 [ 227.788608][ T5818] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.013222][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.045040][ T5818] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.095147][ T5818] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 228.119099][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 228.127419][ T5818] usb 2-1: Product: syz [ 228.135042][ T5818] usb 2-1: Manufacturer: syz [ 228.162900][ T5818] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 228.184232][ T5818] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 228.194218][ T5818] garmin_gps: probe of ttyUSB0 failed with error -22 [ 228.379296][ T7447] md/raid:md0: not clean -- starting background reconstruction [ 228.387440][ T7447] md/raid:md0: device ram0 operational as raid disk 0 [ 228.396834][ T5818] usb 2-1: USB disconnect, device number 12 [ 228.410093][ T5818] garmin_gps 2-1:1.0: device disconnected [ 229.597341][ T7447] md/raid:md0: couldn't allocate thread. [ 230.048677][ T7455] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 230.254948][ T7454] FAULT_INJECTION: forcing a failure. [ 230.254948][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 230.372836][ T7455] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 230.408210][ T7454] CPU: 0 PID: 7454 Comm: syz.0.451 Not tainted syzkaller #0 [ 230.415872][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.426654][ T7454] Call Trace: [ 230.430116][ T7454] [ 230.433111][ T7454] dump_stack_lvl+0x18c/0x250 [ 230.438125][ T7454] ? show_regs_print_info+0x20/0x20 [ 230.443557][ T7454] ? load_image+0x420/0x420 [ 230.448193][ T7454] ? __might_sleep+0xe0/0xe0 [ 230.452826][ T7454] ? __lock_acquire+0x7d80/0x7d80 [ 230.458088][ T7454] should_fail_ex+0x394/0x4c0 [ 230.462863][ T7454] should_failslab+0x9/0x20 [ 230.467412][ T7454] slab_pre_alloc_hook+0x59/0x300 [ 230.472668][ T7454] ? memcg_list_lru_alloc+0x335/0xb00 [ 230.478607][ T7454] ? memcg_list_lru_alloc+0x335/0xb00 [ 230.484113][ T7454] __kmem_cache_alloc_node+0x53/0x250 [ 230.489897][ T7454] ? memcg_list_lru_alloc+0x335/0xb00 [ 230.495483][ T7454] __kmalloc+0xa7/0x240 [ 230.499794][ T7454] memcg_list_lru_alloc+0x335/0xb00 [ 230.505309][ T7454] ? memcg_reparent_list_lrus+0x860/0x860 [ 230.511083][ T7454] ? get_obj_cgroup_from_current+0xd4/0x280 [ 230.517208][ T7454] slab_pre_alloc_hook+0x2ad/0x300 [ 230.522380][ T7454] ? slab_pre_alloc_hook+0xb1/0x300 [ 230.527802][ T7454] kmem_cache_alloc_lru+0x4d/0x2b0 [ 230.533004][ T7454] ? __d_alloc+0x31/0x710 [ 230.537567][ T7454] __d_alloc+0x31/0x710 [ 230.541786][ T7454] d_alloc_pseudo+0x1d/0x70 [ 230.546522][ T7454] alloc_file_pseudo+0xe4/0x210 [ 230.551808][ T7454] ? fput+0x1a0/0x1a0 [ 230.555823][ T7454] ? anon_inode_make_secure_inode+0xfb/0x160 [ 230.562059][ T7454] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 230.567844][ T7454] ? _raw_spin_unlock+0x28/0x40 [ 230.572753][ T7454] __se_sys_memfd_secret+0x125/0x300 [ 230.578123][ T7454] do_syscall_64+0x55/0xb0 [ 230.582671][ T7454] ? clear_bhb_loop+0x40/0x90 [ 230.587407][ T7454] ? clear_bhb_loop+0x40/0x90 [ 230.592143][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.598165][ T7454] RIP: 0033:0x7fe9a3b9e159 [ 230.602721][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.622372][ T7454] RSP: 002b:00007fe9a4b12028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 230.630829][ T7454] RAX: ffffffffffffffda RBX: 00007fe9a3e25fa0 RCX: 00007fe9a3b9e159 [ 230.638839][ T7454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.647024][ T7454] RBP: 00007fe9a3c3506b R08: 0000000000000000 R09: 0000000000000000 [ 230.655031][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.663124][ T7454] R13: 00007fe9a3e26038 R14: 00007fe9a3e25fa0 R15: 00007ffe763a1818 [ 230.671136][ T7454] [ 230.740356][ T7447] md: pers->run() failed ... [ 231.258808][ T7455] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 231.700882][ T7455] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 231.722926][ T7455] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 231.956898][ T28] audit: type=1800 audit(1790437187.814:12): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.455" name="id" dev="configfs" ino=13433 res=0 errno=0 [ 232.479042][ T7484] overlayfs: failed to resolve './file0': -2 [ 232.778052][ T6222] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 232.888067][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.973020][ T6222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.984038][ T6222] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.002378][ T6222] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 233.013163][ T6222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 233.021498][ T6222] usb 3-1: Product: syz [ 233.026227][ T6222] usb 3-1: Manufacturer: syz [ 233.038364][ T6222] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 233.051450][ T6222] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 233.058996][ T6222] garmin_gps: probe of ttyUSB0 failed with error -22 [ 233.080172][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.099576][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.112138][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.144083][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 233.164025][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 233.173390][ T8] usb 2-1: Product: syz [ 233.177669][ T8] usb 2-1: Manufacturer: syz [ 233.196504][ T8] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 233.217529][ T8] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 233.230321][ T8] garmin_gps: probe of ttyUSB1 failed with error -8 [ 234.503981][ T6346] usb 2-1: USB disconnect, device number 13 [ 234.510792][ T8] usb 3-1: USB disconnect, device number 18 [ 234.561484][ T6346] garmin_gps 2-1:1.0: device disconnected [ 234.657021][ T8] garmin_gps 3-1:1.0: device disconnected [ 234.773432][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 236.257854][ C0] net_ratelimit: 12 callbacks suppressed [ 236.588076][ T28] audit: type=1800 audit(1790437192.294:13): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.464" name="id" dev="configfs" ino=13483 res=0 errno=0 [ 236.796934][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.038592][ T6197] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 238.550796][ T6197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.584018][ T6197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.622348][ T6197] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.808044][ T8] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 239.694747][ T8] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 241.007388][ T8] usb 2-1: config 0 has no interface number 0 [ 241.014434][ T8] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 241.028044][ T8] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 241.041683][ T8] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 241.052949][ T8] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.067775][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 241.080765][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.094382][ T8] usb 2-1: config 0 descriptor?? [ 241.114125][ T6197] usb 3-1: string descriptor 0 read error: -71 [ 241.126073][ T6197] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 241.136890][ T6197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 241.168310][ T8] usb 2-1: can't set config #0, error -71 [ 241.192591][ T8] usb 2-1: USB disconnect, device number 14 [ 241.201766][ T6197] usb 3-1: can't set config #1, error -71 [ 241.223240][ T6197] usb 3-1: USB disconnect, device number 19 [ 241.348512][ T28] audit: type=1800 audit(1790437197.204:14): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.476" name="id" dev="configfs" ino=13576 res=0 errno=0 [ 241.547951][ C1] net_ratelimit: 2 callbacks suppressed [ 241.726181][ T7561] FAULT_INJECTION: forcing a failure. [ 241.726181][ T7561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 241.742757][ T7561] CPU: 0 PID: 7561 Comm: syz.3.481 Not tainted syzkaller #0 [ 241.750285][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.760543][ T7561] Call Trace: [ 241.764013][ T7561] [ 241.767049][ T7561] dump_stack_lvl+0x18c/0x250 [ 241.771764][ T7561] ? show_regs_print_info+0x20/0x20 [ 241.777166][ T7561] ? load_image+0x420/0x420 [ 241.782471][ T7561] ? __lock_acquire+0x7d80/0x7d80 [ 241.787602][ T7561] ? vprintk_emit+0x53d/0x610 [ 241.792492][ T7561] should_fail_ex+0x394/0x4c0 [ 241.797210][ T7561] prepare_alloc_pages+0x1e1/0x5b0 [ 241.802794][ T7561] __alloc_pages+0x134/0x460 [ 241.807401][ T7561] ? zone_statistics+0x170/0x170 [ 241.812455][ T7561] ? __lock_acquire+0x7d80/0x7d80 [ 241.817593][ T7561] ? alloc_pages+0x4e1/0x740 [ 241.822303][ T7561] ? xas_load+0x12b/0x140 [ 241.826744][ T7561] folio_alloc+0x1e/0x30 [ 241.831536][ T7561] filemap_alloc_folio+0xdf/0x490 [ 241.836755][ T7561] ? filemap_add_folio+0x3d0/0x3d0 [ 241.841987][ T7561] __filemap_get_folio+0x3fb/0xbe0 [ 241.847406][ T7561] pagecache_get_page+0x2a/0x250 [ 241.852503][ T7561] aio_setup_ring+0x3b7/0xf30 [ 241.857305][ T7561] ? free_ioctx_reqs+0x190/0x190 [ 241.862533][ T7561] ioctx_alloc+0x316/0x770 [ 241.867008][ T7561] __se_sys_io_setup+0x7b/0x190 [ 241.872315][ T7561] do_syscall_64+0x55/0xb0 [ 241.877016][ T7561] ? clear_bhb_loop+0x40/0x90 [ 241.883016][ T7561] ? clear_bhb_loop+0x40/0x90 [ 241.887800][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.894202][ T7561] RIP: 0033:0x7ff08659e159 [ 241.898811][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.918610][ T7561] RSP: 002b:00007ff08743f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 241.927133][ T7561] RAX: ffffffffffffffda RBX: 00007ff086825fa0 RCX: 00007ff08659e159 [ 241.935120][ T7561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000008fc [ 241.943363][ T7561] RBP: 00007ff08663506b R08: 0000000000000000 R09: 0000000000000000 [ 241.951523][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.959873][ T7561] R13: 00007ff086826038 R14: 00007ff086825fa0 R15: 00007ffdd1bcd0e8 [ 241.968217][ T7561] [ 242.244253][ T7567] overlayfs: failed to resolve './file1': -2 [ 242.418211][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.477997][ T6197] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 242.588341][ T8] usb 2-1: device descriptor read/64, error -71 [ 243.366676][ T6197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.378552][ T6197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.390681][ T6197] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.407067][ T6197] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 243.416912][ T6197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.425314][ T6197] usb 4-1: Product: syz [ 243.429617][ T6197] usb 4-1: Manufacturer: syz [ 243.438829][ T28] audit: type=1800 audit(1790437199.294:15): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.487" name="id" dev="configfs" ino=14394 res=0 errno=0 [ 243.464448][ T6197] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 243.479112][ T6197] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 243.490828][ T6197] garmin_gps: probe of ttyUSB0 failed with error -8 [ 243.648033][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 243.803570][ T6222] libceph: connect (1)[c::]:6789 error -101 [ 243.863950][ T7581] ceph: No mds server is up or the cluster is laggy [ 243.930354][ T6222] libceph: mon0 (1)[c::]:6789 connect error [ 244.247232][ T6222] usb 4-1: USB disconnect, device number 7 [ 244.352220][ T8] usb 2-1: device descriptor read/64, error -71 [ 244.406192][ T6222] garmin_gps 4-1:1.0: device disconnected [ 244.777523][ T8] usb usb2-port1: attempt power cycle [ 244.957443][ T7595] overlayfs: failed to resolve './file1': -2 [ 245.188040][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.418365][ T8] usb 2-1: device not accepting address 17, error -71 [ 249.800022][ T28] audit: type=1800 audit(1790437205.664:16): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="id" dev="configfs" ino=14473 res=0 errno=0 [ 250.127998][ T6197] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 250.354202][ T6197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.378485][ T6197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.407166][ T6197] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.443790][ T6197] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 250.470225][ T6197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 250.486674][ T6197] usb 4-1: Product: syz [ 250.492579][ T6197] usb 4-1: Manufacturer: syz [ 250.537066][ T6197] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 250.544726][ T56] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.567091][ T6197] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 250.589368][ T6197] garmin_gps: probe of ttyUSB0 failed with error -8 [ 250.713636][ T56] usb 3-1: device descriptor read/64, error -71 [ 250.761076][ T5847] usb 4-1: USB disconnect, device number 8 [ 250.800678][ T5847] garmin_gps 4-1:1.0: device disconnected [ 251.028299][ T56] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 251.268003][ T56] usb 3-1: device descriptor read/64, error -71 [ 251.441509][ T56] usb usb3-port1: attempt power cycle [ 252.108371][ T56] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 252.267946][ C0] net_ratelimit: 2 callbacks suppressed [ 252.310244][ T56] usb 3-1: device descriptor read/8, error -71 [ 252.688127][ T56] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 252.765404][ T56] usb 3-1: device descriptor read/8, error -71 [ 252.783644][ T7669] ceph: No mds server is up or the cluster is laggy [ 252.841306][ T6223] libceph: connect (1)[c::]:6789 error -101 [ 252.940073][ T6223] libceph: mon0 (1)[c::]:6789 connect error [ 252.979807][ T56] usb usb3-port1: unable to enumerate USB device [ 254.752212][ T28] audit: type=1800 audit(1790437210.604:17): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.514" name="id" dev="configfs" ino=13726 res=0 errno=0 [ 254.918129][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 254.927284][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 254.936887][ T51] Bluetooth: hci3: hardware error 0x00 [ 255.031626][ T7696] syz.0.519 uses obsolete (PF_INET,SOCK_PACKET) [ 255.063368][ T8] IPVS: starting estimator thread 0... [ 255.188176][ T7697] IPVS: using max 18 ests per chain, 43200 per kthread [ 255.309905][ T5818] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.523489][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.627406][ T5818] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 255.718103][ T5847] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 255.739001][ T5818] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.921531][ T5818] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 255.986086][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 256.050087][ T5818] usb 2-1: Product: syz [ 256.090347][ T5818] usb 2-1: Manufacturer: syz [ 256.230744][ T5818] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 256.307233][ T5818] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 256.332341][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.339746][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.363570][ T5818] garmin_gps: probe of ttyUSB0 failed with error -8 [ 256.412943][ T5818] usb 2-1: USB disconnect, device number 19 [ 256.431568][ T5818] garmin_gps 2-1:1.0: device disconnected [ 256.485339][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.534660][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 256.554333][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.574376][ T5847] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 256.593032][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 256.593284][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.617658][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.626307][ T5847] usb 3-1: Product: syz [ 256.631556][ T5847] usb 3-1: Manufacturer: syz [ 256.642903][ T7699] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 256.653882][ T5847] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 256.669402][ T5847] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 256.868319][ T5847] usb 3-1: USB disconnect, device number 24 [ 256.894794][ T5847] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 256.912488][ T5847] garmin_gps 3-1:1.0: device disconnected [ 256.988201][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 257.467988][ C1] net_ratelimit: 1 callbacks suppressed [ 262.518022][ C1] net_ratelimit: 2 callbacks suppressed [ 262.745460][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.785336][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.098700][ T6223] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 263.268618][ T6223] usb 2-1: device descriptor read/64, error -71 [ 263.278077][ T56] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 263.306687][ T5087] Bluetooth: hci4: sending frame failed (-49) [ 263.317545][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 263.472176][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.495730][ T56] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 263.516213][ T56] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.550737][ T56] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 263.578829][ T6223] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.586727][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 263.603675][ T56] usb 4-1: Product: syz [ 263.611423][ T56] usb 4-1: Manufacturer: syz [ 263.631275][ T7746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.669813][ T56] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 263.698898][ T56] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 263.748088][ T6223] usb 2-1: device descriptor read/64, error -71 [ 263.888634][ T6223] usb usb2-port1: attempt power cycle [ 263.919701][ T5847] usb 4-1: USB disconnect, device number 9 [ 264.187913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 265.858910][ T5847] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 266.808141][ T6223] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.228938][ T5847] garmin_gps 4-1:1.0: device disconnected [ 267.340116][ T6223] usb 2-1: device descriptor read/8, error -71 [ 268.218050][ T5818] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 268.267951][ C1] net_ratelimit: 8 callbacks suppressed [ 268.429208][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.500517][ T5818] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 268.597387][ T5818] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.621949][ T5818] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 268.668097][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 268.680917][ T5818] usb 3-1: Product: syz [ 268.685414][ T5818] usb 3-1: Manufacturer: syz [ 269.009605][ T5818] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 269.039812][ T5818] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 269.058278][ T5818] garmin_gps: probe of ttyUSB0 failed with error -8 [ 269.318016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 269.488379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 269.517946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 269.597907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 269.689232][ T5847] usb 3-1: USB disconnect, device number 25 [ 269.718713][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 269.725914][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.882611][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.910201][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.982796][ T5847] garmin_gps 3-1:1.0: device disconnected [ 270.166732][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 270.184408][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 270.925780][ T7826] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 271.032813][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.054029][ T7826] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 271.073084][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.090549][ T7830] FAULT_INJECTION: forcing a failure. [ 271.090549][ T7830] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 271.129516][ T7826] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 271.136434][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 271.177277][ T7830] CPU: 1 PID: 7830 Comm: syz.1.565 Not tainted syzkaller #0 [ 271.184643][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.194978][ T7830] Call Trace: [ 271.198276][ T7830] [ 271.201217][ T7830] dump_stack_lvl+0x18c/0x250 [ 271.206097][ T7830] ? show_regs_print_info+0x20/0x20 [ 271.211621][ T7830] ? load_image+0x420/0x420 [ 271.216147][ T7830] ? __might_fault+0xaa/0x120 [ 271.220946][ T7830] ? __lock_acquire+0x7d80/0x7d80 [ 271.225986][ T7830] ? preempt_schedule+0xc0/0xd0 [ 271.230951][ T7830] should_fail_ex+0x394/0x4c0 [ 271.235743][ T7830] _copy_from_user+0x2f/0xe0 [ 271.240528][ T7830] ___sys_sendmsg+0x1c7/0x360 [ 271.245251][ T7830] ? __sys_sendmsg+0x2b0/0x2b0 [ 271.250272][ T7830] ? put_user_ifreq+0x85/0xb0 [ 271.255083][ T7830] __se_sys_sendmsg+0x1d0/0x2c0 [ 271.260051][ T7830] ? __x64_sys_sendmsg+0x80/0x80 [ 271.265107][ T7830] ? lockdep_hardirqs_on+0x98/0x150 [ 271.270407][ T7830] do_syscall_64+0x55/0xb0 [ 271.274933][ T7830] ? clear_bhb_loop+0x40/0x90 [ 271.279725][ T7830] ? clear_bhb_loop+0x40/0x90 [ 271.284434][ T7830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.290437][ T7830] RIP: 0033:0x7fad9c39e159 [ 271.294875][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.314516][ T7830] RSP: 002b:00007fad9a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.323823][ T7830] RAX: ffffffffffffffda RBX: 00007fad9c626090 RCX: 00007fad9c39e159 [ 271.332270][ T7830] RDX: 0000000000044000 RSI: 0000200000000080 RDI: 000000000000000a [ 271.341755][ T7830] RBP: 00007fad9c43506b R08: 0000000000000000 R09: 0000000000000000 [ 271.350442][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.359338][ T7830] R13: 00007fad9c626128 R14: 00007fad9c626090 R15: 00007ffd3f67a6e8 [ 271.367903][ T7830] [ 271.420169][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 271.519217][ T7826] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 271.536141][ T7826] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 272.818166][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.908155][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 272.985780][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.707941][ C1] net_ratelimit: 12 callbacks suppressed [ 274.468068][ T7857] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 274.578046][ T7857] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 274.639034][ T7857] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 275.028435][ T56] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 275.086949][ T7857] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 275.097098][ T7857] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 275.220503][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.234247][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.257939][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.267729][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.283396][ T56] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 275.292649][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 275.292673][ T56] usb 3-1: Product: syz [ 275.292689][ T56] usb 3-1: Manufacturer: syz [ 275.323447][ T56] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 275.344577][ T56] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 275.398694][ T56] garmin_gps: probe of ttyUSB0 failed with error -90 [ 275.514279][ T7872] fuse: Unknown parameter 'grou00000000000000000000' [ 275.596649][ T8] usb 3-1: USB disconnect, device number 26 [ 275.723125][ T8] garmin_gps 3-1:1.0: device disconnected [ 276.913019][ T7889] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 276.944625][ T7889] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 276.990234][ T7889] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 277.185158][ T7899] fuse: Unknown parameter 'grou00000000000000000000' [ 277.352502][ T7901] overlayfs: invalid origin (0000) [ 277.446153][ T7889] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 277.465823][ T7889] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 277.588366][ T56] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.788056][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 277.828834][ T56] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 277.837354][ T56] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 277.906200][ T56] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.943430][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.095250][ T7918] futex_wake_op: syz.1.600 tries to shift op by 144; fix this program [ 278.624503][ T7932] fuse: Unknown parameter 'group_id00000000000000000000' [ 278.727753][ T7934] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 278.827443][ T7934] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 278.877809][ T7934] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 279.131469][ T7934] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 279.160447][ T7934] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 279.307943][ C0] net_ratelimit: 4 callbacks suppressed [ 279.392966][ T7947] futex_wake_op: syz.2.610 tries to shift op by 144; fix this program [ 279.846118][ T7962] fuse: Unknown parameter 'group_id00000000000000000000' [ 280.033803][ T7970] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 280.082345][ T7970] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 280.107072][ T7971] FAULT_INJECTION: forcing a failure. [ 280.107072][ T7971] name fail_futex, interval 1, probability 0, space 0, times 0 [ 280.132300][ T7970] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 280.139351][ T7971] CPU: 0 PID: 7971 Comm: syz.2.616 Not tainted syzkaller #0 [ 280.139375][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.139389][ T7971] Call Trace: [ 280.139399][ T7971] [ 280.163785][ T7971] dump_stack_lvl+0x18c/0x250 [ 280.168613][ T7971] ? show_regs_print_info+0x20/0x20 [ 280.173843][ T7971] ? load_image+0x420/0x420 [ 280.178479][ T7971] ? kmem_cache_alloc+0x17e/0x2c0 [ 280.183823][ T7971] ? alloc_file+0x5b/0x600 [ 280.188272][ T7971] ? __se_sys_memfd_secret+0x125/0x300 [ 280.193840][ T7971] ? do_syscall_64+0x55/0xb0 [ 280.198581][ T7971] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.204951][ T7971] should_fail_ex+0x394/0x4c0 [ 280.209683][ T7971] get_futex_key+0x136/0x1030 [ 280.214392][ T7971] ? futex_setup_timer+0xc0/0xc0 [ 280.219554][ T7971] futex_wake+0x127/0x4f0 [ 280.223902][ T7971] ? verify_lock_unused+0x140/0x140 [ 280.229119][ T7971] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 280.235154][ T7971] ? futex_wake_mark+0x150/0x150 [ 280.240122][ T7971] ? percpu_counter_add_batch+0x252/0x2a0 [ 280.246186][ T7971] ? percpu_counter_set+0x1b0/0x1b0 [ 280.251592][ T7971] do_futex+0x35d/0x3e0 [ 280.255768][ T7971] ? fd_install+0x60/0x4e0 [ 280.260209][ T7971] ? __ia32_sys_get_robust_list+0x110/0x110 [ 280.266596][ T7971] __se_sys_futex+0x3a9/0x440 [ 280.271291][ T7971] ? __x64_sys_futex+0xf0/0xf0 [ 280.276071][ T7971] ? __x64_sys_futex+0x21/0xf0 [ 280.280853][ T7971] do_syscall_64+0x55/0xb0 [ 280.285288][ T7971] ? clear_bhb_loop+0x40/0x90 [ 280.289991][ T7971] ? clear_bhb_loop+0x40/0x90 [ 280.294699][ T7971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.300908][ T7971] RIP: 0033:0x7f2ad419e159 [ 280.305341][ T7971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.325146][ T7971] RSP: 002b:00007f2ad23d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.333684][ T7971] RAX: ffffffffffffffda RBX: 00007f2ad4426098 RCX: 00007f2ad419e159 [ 280.341692][ T7971] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ad442609c [ 280.349682][ T7971] RBP: 00007f2ad4426090 R08: 0000000000745d1e R09: 0000000000000000 [ 280.357851][ T7971] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 280.366360][ T7971] R13: 00007f2ad4426128 R14: 00007ffd2d7d6060 R15: 00007ffd2d7d6148 [ 280.374362][ T7971] [ 280.463153][ T6223] usb 4-1: USB disconnect, device number 10 [ 280.967491][ T7970] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 280.980370][ T7970] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 280.989685][ T28] audit: type=1800 audit(1790437236.844:18): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.620" name="id" dev="configfs" ino=14209 res=0 errno=0 [ 281.221225][ T7985] futex_wake_op: syz.0.621 tries to shift op by 144; fix this program [ 281.529862][ T7993] fuse: Unknown parameter 'group_id00000000000000000000' [ 281.923333][ T28] audit: type=1800 audit(1790437237.784:19): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.629" name="id" dev="configfs" ino=15282 res=0 errno=0 [ 281.990103][ T6223] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 282.184267][ T6223] usb 3-1: Using ep0 maxpacket: 8 [ 282.200194][ T6223] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 282.209804][ T6223] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 282.229519][ T6223] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.240080][ T6223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.509121][ T8019] futex_wake_op: syz.0.633 tries to shift op by 144; fix this program [ 283.486146][ T28] audit: type=1800 audit(1790437239.344:20): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.639" name="id" dev="configfs" ino=14307 res=0 errno=0 [ 283.759609][ T8056] futex_wake_op: syz.3.643 tries to shift op by 144; fix this program [ 284.667950][ C1] net_ratelimit: 6 callbacks suppressed [ 284.747175][ T6223] usb 3-1: USB disconnect, device number 27 [ 285.470049][ T28] audit: type=1800 audit(1790437241.334:21): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.650" name="id" dev="configfs" ino=16417 res=0 errno=0 [ 287.857185][ T28] audit: type=1800 audit(1790437243.714:22): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.661" name="id" dev="configfs" ino=15625 res=0 errno=0 [ 288.971312][ T28] audit: type=1800 audit(1790437244.834:23): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.672" name="id" dev="configfs" ino=15723 res=0 errno=0 [ 289.877926][ C1] net_ratelimit: 6 callbacks suppressed [ 290.648017][ T28] audit: type=1800 audit(1790437246.504:24): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.683" name="id" dev="configfs" ino=16544 res=0 errno=0 [ 295.527815][ T28] audit: type=1800 audit(1790437251.384:25): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.694" name="id" dev="configfs" ino=15805 res=0 errno=0 [ 295.651034][ T28] audit: type=1800 audit(1790437251.514:26): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.696" name="id" dev="configfs" ino=16612 res=0 errno=0 [ 295.916052][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 295.972697][ T8223] ceph: No mds server is up or the cluster is laggy [ 296.069352][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 296.276948][ T8229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 297.058794][ T5847] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 297.335660][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.413866][ T5847] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.614062][ T5847] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 297.754439][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.938754][ T8241] fuse: Bad value for 'fd' [ 298.049574][ T28] audit: type=1800 audit(1790437253.914:27): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="in_ports" dev="configfs" ino=15849 res=0 errno=0 [ 298.104613][ T8229] lo: entered promiscuous mode [ 298.196698][ T8229] tunl0: entered promiscuous mode [ 298.266656][ T28] audit: type=1800 audit(1790437254.124:28): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.708" name="id" dev="configfs" ino=15865 res=0 errno=0 [ 298.286897][ T8229] gre0: entered promiscuous mode [ 298.329639][ T8256] fuse: Bad value for 'user_id' [ 298.462468][ T8229] gretap0: entered promiscuous mode [ 298.543456][ T8229] erspan0: entered promiscuous mode [ 298.622136][ T8229] ip_vti0: entered promiscuous mode [ 298.690432][ T8229] ip6_vti0: entered promiscuous mode [ 298.724112][ T8229] sit0: entered promiscuous mode [ 298.770493][ T8270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.794398][ T8270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.805635][ T8229] ip6tnl0: entered promiscuous mode [ 298.814788][ T8263] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 298.856872][ T8266] kvm: pic: level sensitive irq not supported [ 298.857265][ T8266] kvm: pic: non byte read [ 298.871600][ T8266] kvm: pic: level sensitive irq not supported [ 298.871793][ T8266] kvm: pic: non byte read [ 298.887261][ T8266] kvm: pic: level sensitive irq not supported [ 298.887407][ T8266] kvm: pic: non byte read [ 298.957446][ T8229] ip6gre0: entered promiscuous mode [ 299.009027][ T8229] syz_tun: entered promiscuous mode [ 299.173534][ T8229] ip6gretap0: entered promiscuous mode [ 299.452196][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.460634][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.603153][ T8229] bridge0: entered promiscuous mode [ 299.936447][ T8229] vcan0: entered promiscuous mode [ 300.015955][ T8229] bond0: entered promiscuous mode [ 300.085955][ T8229] bond_slave_0: entered promiscuous mode [ 300.092152][ T8229] bond_slave_1: entered promiscuous mode [ 300.111020][ T8229] team0: entered promiscuous mode [ 300.116663][ T8229] team_slave_0: entered promiscuous mode [ 300.178599][ T8229] team_slave_1: entered promiscuous mode [ 301.095587][ T8229] dummy0: entered promiscuous mode [ 301.186272][ T8229] nlmon0: entered promiscuous mode [ 301.199746][ T8229] caif0: entered promiscuous mode [ 301.218333][ T8229] batadv0: entered promiscuous mode [ 301.269317][ T8229] vxcan0: entered promiscuous mode [ 301.312662][ T8229] vxcan1: entered promiscuous mode [ 301.352461][ T8229] veth0: entered promiscuous mode [ 301.376738][ T28] audit: type=1800 audit(1790437257.234:29): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.718" name="in_ports" dev="configfs" ino=15965 res=0 errno=0 [ 301.424027][ T8229] veth1: entered promiscuous mode [ 301.467200][ T8229] wg0: entered promiscuous mode [ 301.508469][ T8229] wg1: entered promiscuous mode [ 301.541300][ T28] audit: type=1800 audit(1790437257.404:30): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.719" name="id" dev="configfs" ino=15977 res=0 errno=0 [ 301.585313][ T8229] wg2: entered promiscuous mode [ 301.632363][ T8229] veth0_to_bridge: entered promiscuous mode [ 301.662402][ T8296] fuse: Bad value for 'user_id' [ 301.693505][ T8229] veth1_to_bridge: entered promiscuous mode [ 301.777664][ T8229] veth0_to_bond: entered promiscuous mode [ 301.841686][ T8229] veth1_to_bond: entered promiscuous mode [ 301.894975][ T8229] veth0_to_team: entered promiscuous mode [ 301.931310][ T8229] veth1_to_team: entered promiscuous mode [ 301.966539][ T8229] veth0_to_batadv: entered promiscuous mode [ 301.981739][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.000902][ T8229] batadv_slave_0: entered promiscuous mode [ 302.021261][ T8229] veth1_to_batadv: entered promiscuous mode [ 302.037112][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.054514][ T8229] batadv_slave_1: entered promiscuous mode [ 302.077759][ T8229] xfrm0: entered promiscuous mode [ 302.100441][ T8229] veth0_to_hsr: entered promiscuous mode [ 302.138745][ T8229] veth1_to_hsr: entered promiscuous mode [ 302.172360][ T8229] hsr0: entered promiscuous mode [ 302.200029][ T8229] veth1_virt_wifi: entered promiscuous mode [ 302.223778][ T8229] veth0_virt_wifi: entered promiscuous mode [ 302.238748][ T8229] virt_wifi0: entered promiscuous mode [ 302.293570][ T8229] vlan0: entered promiscuous mode [ 302.308304][ T8229] vlan1: entered promiscuous mode [ 302.314970][ T8229] macvlan0: entered promiscuous mode [ 302.344356][ T8229] macvlan1: entered promiscuous mode [ 302.355210][ T8229] ipvlan0: entered promiscuous mode [ 302.368192][ T8229] ipvlan1: entered promiscuous mode [ 302.410494][ T8229] macvtap0: entered promiscuous mode [ 302.432311][ T8229] macsec0: entered promiscuous mode [ 302.455188][ T8229] geneve0: entered promiscuous mode [ 302.477387][ T8229] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.486907][ T8229] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.496060][ T8229] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.505598][ T8229] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.516505][ T8229] geneve1: entered promiscuous mode [ 302.538597][ T8229] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 302.557627][ T8229] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 302.583301][ T8229] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 302.603203][ T8229] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 302.646974][ T8229] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 302.694373][ T8229] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 302.739133][ T6222] usb 2-1: USB disconnect, device number 24 [ 302.859498][ T8307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 302.870725][ T8307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 303.088158][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 303.268054][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 303.275224][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 303.283907][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 303.294299][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.298060][ T6222] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 303.304479][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.322194][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.337950][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.347121][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.364876][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 303.530058][ T6222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.541225][ T6222] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 303.551335][ T6222] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.566880][ T6222] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 303.576141][ T6222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 303.584193][ T6222] usb 2-1: Product: syz [ 303.588598][ T6222] usb 2-1: Manufacturer: syz [ 303.596552][ T8311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 303.606743][ T6222] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 303.624667][ T6222] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 303.821253][ T9] usb 2-1: USB disconnect, device number 25 [ 303.844244][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 303.856755][ T9] garmin_gps 2-1:1.0: device disconnected [ 304.174064][ T8282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.423576][ T28] audit: type=1800 audit(1790437260.284:31): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.727" name="in_ports" dev="configfs" ino=16014 res=0 errno=0 [ 304.472189][ T28] audit: type=1800 audit(1790437260.324:32): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.728" name="id" dev="configfs" ino=16755 res=0 errno=0 [ 304.580463][ T8327] fuse: Bad value for 'fd' [ 305.008547][ T6222] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 305.238003][ T6222] usb 3-1: Using ep0 maxpacket: 8 [ 305.251854][ T6222] usb 3-1: no configurations [ 305.256514][ T6222] usb 3-1: can't read configurations, error -22 [ 305.264280][ T28] audit: type=1800 audit(1790437261.124:33): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.737" name="id" dev="configfs" ino=16779 res=0 errno=0 [ 305.359836][ T56] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 305.431332][ T6222] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 305.482191][ T8352] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 305.488976][ T8352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.500090][ T8352] vhci_hcd vhci_hcd.0: Device attached [ 305.511834][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.524859][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.534293][ T8353] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 305.554903][ T11] vhci_hcd: stop threads [ 305.564457][ T11] vhci_hcd: release socket [ 305.570081][ T11] vhci_hcd: disconnect device [ 305.580644][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.591147][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 305.600966][ T56] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.616493][ T56] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 305.625956][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 305.634389][ T56] usb 2-1: Product: syz [ 305.640049][ T56] usb 2-1: Manufacturer: syz [ 305.649280][ T8344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 305.659911][ T56] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 305.668159][ T6222] usb 3-1: Using ep0 maxpacket: 8 [ 305.681029][ T6222] usb 3-1: no configurations [ 305.685759][ T6222] usb 3-1: can't read configurations, error -22 [ 305.693776][ T56] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 305.705919][ T6222] usb usb3-port1: attempt power cycle [ 305.827000][ T9] usb 4-1: USB disconnect, device number 11 [ 305.893080][ T6346] usb 2-1: USB disconnect, device number 26 [ 305.928880][ T6346] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 305.956350][ T6346] garmin_gps 2-1:1.0: device disconnected [ 305.972919][ T28] audit: type=1800 audit(1790437261.834:34): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.740" name="id" dev="configfs" ino=16079 res=0 errno=0 [ 306.138373][ T6222] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.190349][ T6222] usb 3-1: Using ep0 maxpacket: 8 [ 306.198949][ T6222] usb 3-1: no configurations [ 306.203866][ T6222] usb 3-1: can't read configurations, error -22 [ 306.418626][ T6222] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 306.621381][ T6222] usb 3-1: Using ep0 maxpacket: 8 [ 306.733073][ T6222] usb 3-1: no configurations [ 306.738660][ T6222] usb 3-1: can't read configurations, error -22 [ 306.812502][ T6222] usb usb3-port1: unable to enumerate USB device [ 308.050325][ T8393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 308.056981][ T8393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.086800][ T28] audit: type=1800 audit(1790437263.944:35): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.749" name="id" dev="configfs" ino=16148 res=0 errno=0 [ 308.135688][ T8393] vhci_hcd vhci_hcd.0: Device attached [ 308.178115][ T6222] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.324321][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.337200][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.401167][ T6222] usb 2-1: Using ep0 maxpacket: 8 [ 308.418367][ T56] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 308.436877][ T5818] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 308.451683][ T6222] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 308.474951][ T6222] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 308.508952][ T6222] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.538065][ T6222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.548923][ T6222] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.568005][ T6222] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.577709][ T6222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.599219][ T56] usb 4-1: no configurations [ 308.603879][ T56] usb 4-1: can't read configurations, error -22 [ 308.616860][ T6222] usbtmc 2-1:16.0: bulk endpoints not found [ 308.778084][ T56] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 308.989042][ T56] usb 4-1: no configurations [ 308.993896][ T56] usb 4-1: can't read configurations, error -22 [ 309.011691][ T56] usb usb4-port1: attempt power cycle [ 309.065796][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.075496][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.086505][ T8417] FAULT_INJECTION: forcing a failure. [ 309.086505][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 309.102593][ T8417] CPU: 1 PID: 8417 Comm: syz.0.757 Not tainted syzkaller #0 [ 309.110192][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.120441][ T8417] Call Trace: [ 309.123742][ T8417] [ 309.126698][ T8417] dump_stack_lvl+0x18c/0x250 [ 309.131488][ T8417] ? show_regs_print_info+0x20/0x20 [ 309.136794][ T8417] ? load_image+0x420/0x420 [ 309.141586][ T8417] ? __might_sleep+0xe0/0xe0 [ 309.146210][ T8417] ? __lock_acquire+0x7d80/0x7d80 [ 309.151343][ T8417] should_fail_ex+0x394/0x4c0 [ 309.156828][ T8417] should_failslab+0x9/0x20 [ 309.161441][ T8417] slab_pre_alloc_hook+0x59/0x300 [ 309.166518][ T8417] kmem_cache_alloc+0x5a/0x2c0 [ 309.171385][ T8417] ? __kernfs_new_node+0xe5/0x7f0 [ 309.176439][ T8417] __kernfs_new_node+0xe5/0x7f0 [ 309.181406][ T8417] ? kernfs_new_node+0x260/0x260 [ 309.186370][ T8417] ? up_write+0x1be/0x410 [ 309.190718][ T8417] kernfs_new_node+0x14c/0x260 [ 309.195514][ T8417] __kernfs_create_file+0x4b/0x2e0 [ 309.200726][ T8417] sysfs_add_file_mode_ns+0x237/0x2f0 [ 309.206201][ T8417] sysfs_create_file_ns+0x12c/0x1b0 [ 309.211615][ T8417] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 309.217723][ T8417] ? module_add_driver+0x316/0x320 [ 309.223049][ T8417] ? sysfs_create_groups+0xa0/0x120 [ 309.228373][ T8417] bus_add_driver+0x454/0x630 [ 309.233086][ T8417] driver_register+0x23a/0x310 [ 309.237957][ T8417] usb_gadget_register_driver_owner+0xf9/0x270 [ 309.244400][ T8417] raw_ioctl+0x1613/0x3d80 [ 309.248861][ T8417] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 309.254625][ T8417] ? tomoyo_path_number_perm+0x217/0x5e0 [ 309.260453][ T8417] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 309.265933][ T8417] ? make_qualifier+0x260/0x260 [ 309.270918][ T8417] ? __fget_files+0x28/0x460 [ 309.275667][ T8417] ? bpf_lsm_file_ioctl+0x9/0x10 [ 309.281717][ T8417] ? security_file_ioctl+0x80/0xa0 [ 309.286956][ T8417] ? make_qualifier+0x260/0x260 [ 309.291835][ T8417] __se_sys_ioctl+0xfd/0x170 [ 309.296494][ T8417] do_syscall_64+0x55/0xb0 [ 309.301028][ T8417] ? clear_bhb_loop+0x40/0x90 [ 309.305828][ T8417] ? clear_bhb_loop+0x40/0x90 [ 309.310543][ T8417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.316575][ T8417] RIP: 0033:0x7fe9a3b9ddeb [ 309.321124][ T8417] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 309.341043][ T8417] RSP: 002b:00007fe9a4b0ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.349751][ T8417] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe9a3b9ddeb [ 309.358772][ T8417] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 309.367205][ T8417] RBP: 00007fe9a4b10fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 309.375453][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.383635][ T8417] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000868 [ 309.391824][ T8417] [ 309.405932][ T8417] bus_add_driver: add_bind_files(raw-gadget.3) failed [ 309.414539][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.427426][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.590673][ T8420] overlayfs: failed to resolve './bus': -2 [ 309.656898][ T8422] fuse: Bad value for 'rootmode' [ 309.688002][ T56] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 309.757321][ T56] usb 4-1: no configurations [ 310.246461][ T56] usb 4-1: can't read configurations, error -22 [ 310.745573][ T28] audit: type=1800 audit(1790437266.604:36): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.761" name="id" dev="configfs" ino=16178 res=0 errno=0 [ 310.858091][ T56] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 310.915653][ T56] usb 4-1: no configurations [ 310.927272][ T6222] usb 2-1: USB disconnect, device number 27 [ 310.933814][ T56] usb 4-1: can't read configurations, error -22 [ 310.953116][ T56] usb usb4-port1: unable to enumerate USB device [ 311.137164][ T8395] vhci_hcd: connection reset by peer [ 311.186499][ T43] vhci_hcd: stop threads [ 311.196667][ T43] vhci_hcd: release socket [ 311.208051][ T43] vhci_hcd: disconnect device [ 311.247683][ T8443] overlayfs: failed to resolve './bus': -2 [ 311.400282][ T8451] fuse: Bad value for 'rootmode' [ 311.484956][ T28] audit: type=1800 audit(1790437267.344:37): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.770" name="id" dev="configfs" ino=16229 res=0 errno=0 [ 311.519074][ T6222] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 311.678200][ T56] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 311.753641][ T6222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.764683][ T6222] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 311.775452][ T6222] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.797604][ T6222] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 311.806760][ T6222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 311.815395][ T6222] usb 2-1: Product: syz [ 311.821006][ T6222] usb 2-1: Manufacturer: syz [ 311.829553][ T8440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.840219][ T6222] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 311.854345][ T6222] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 311.878201][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 311.894234][ T56] usb 4-1: no configurations [ 311.899844][ T56] usb 4-1: can't read configurations, error -22 [ 311.978000][ T6223] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 312.063022][ T9] usb 2-1: USB disconnect, device number 28 [ 312.069633][ T56] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 312.111896][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 312.131394][ T9] garmin_gps 2-1:1.0: device disconnected [ 312.197576][ T6223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.222347][ T6223] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 312.248004][ T6223] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.273856][ T6223] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 312.287955][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 312.295724][ T6223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 312.307620][ T56] usb 4-1: no configurations [ 312.313445][ T6223] usb 3-1: Product: syz [ 312.323900][ T56] usb 4-1: can't read configurations, error -22 [ 312.331086][ T6223] usb 3-1: Manufacturer: syz [ 312.352815][ T56] usb usb4-port1: attempt power cycle [ 312.361755][ T8459] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 312.377432][ T6223] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 312.399517][ T6223] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 312.625139][ T9] usb 3-1: USB disconnect, device number 32 [ 312.671198][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 312.699856][ T8471] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 312.706529][ T8471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.721820][ T9] garmin_gps 3-1:1.0: device disconnected [ 312.750361][ T8471] vhci_hcd vhci_hcd.0: Device attached [ 312.796333][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.808082][ T56] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 312.833380][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.849536][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 312.854863][ T8472] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 312.864020][ T56] usb 4-1: no configurations [ 312.871471][ T56] usb 4-1: can't read configurations, error -22 [ 312.882161][ T6835] vhci_hcd: stop threads [ 312.886752][ T6835] vhci_hcd: release socket [ 312.893187][ T6835] vhci_hcd: disconnect device [ 312.948464][ T6346] vhci_hcd: vhci_device speed not set [ 313.052691][ T56] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.092554][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 313.104174][ T56] usb 4-1: no configurations [ 313.110504][ T56] usb 4-1: can't read configurations, error -22 [ 313.117433][ T56] usb usb4-port1: unable to enumerate USB device [ 313.200842][ T28] audit: type=1800 audit(1790437269.064:38): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.779" name="id" dev="configfs" ino=16982 res=0 errno=0 [ 313.558566][ T5818] vhci_hcd: vhci_device speed not set [ 313.988258][ T56] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 314.173252][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.184239][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 314.194420][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.212379][ T56] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 314.221895][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.230836][ T56] usb 3-1: Product: syz [ 314.235352][ T56] usb 3-1: Manufacturer: syz [ 314.256053][ T8505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.271290][ T56] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 314.308955][ T56] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 314.499173][ T8] usb 3-1: USB disconnect, device number 33 [ 314.539569][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 314.569171][ T8] garmin_gps 3-1:1.0: device disconnected [ 314.793911][ T28] audit: type=1800 audit(1790437270.654:39): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.789" name="id" dev="configfs" ino=17038 res=0 errno=0 [ 314.976678][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 314.983453][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.019485][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.053437][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 315.061057][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.132925][ T8526] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 315.151179][ T34] vhci_hcd: stop threads [ 315.157630][ T34] vhci_hcd: release socket [ 315.169889][ T34] vhci_hcd: disconnect device [ 316.494092][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 316.688470][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 316.706256][ T8] usb 3-1: no configurations [ 316.711685][ T8] usb 3-1: can't read configurations, error -22 [ 316.748133][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 316.872971][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 316.911440][ T8573] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 316.918139][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.927587][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 316.941374][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.959543][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 316.973748][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.994164][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 317.008277][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 317.016903][ T9] usb 2-1: Product: syz [ 317.033105][ T9] usb 2-1: Manufacturer: syz [ 317.046411][ T8557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.056676][ T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 317.068740][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 317.086673][ T8] usb 3-1: no configurations [ 317.099054][ T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 317.117243][ T8] usb 3-1: can't read configurations, error -22 [ 317.133899][ T8] usb usb3-port1: attempt power cycle [ 317.188649][ T6197] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 317.228291][ T6346] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 317.432191][ T5818] usb 2-1: USB disconnect, device number 29 [ 317.568109][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 317.632742][ T5818] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 317.713110][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.719937][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.751844][ T5818] garmin_gps 2-1:1.0: device disconnected [ 318.068893][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 318.086686][ T8] usb 3-1: no configurations [ 318.097982][ T8] usb 3-1: can't read configurations, error -22 [ 318.186554][ T28] audit: type=1326 audit(1790437274.044:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.219281][ T28] audit: type=1326 audit(1790437274.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.244784][ T28] audit: type=1326 audit(1790437274.044:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.269246][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.286114][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 318.294304][ T28] audit: type=1326 audit(1790437274.044:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.318372][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.325078][ T28] audit: type=1326 audit(1790437274.044:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.360547][ T6346] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 318.363169][ T28] audit: type=1326 audit(1790437274.044:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.377955][ T6346] usb 4-1: can't read configurations, error -61 [ 318.405296][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 318.413341][ T8] usb 3-1: no configurations [ 318.437593][ T28] audit: type=1326 audit(1790437274.044:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x7ffc0000 [ 318.441837][ T8] usb 3-1: can't read configurations, error -22 [ 318.482908][ T8] usb usb3-port1: unable to enumerate USB device [ 318.638211][ T6346] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 318.843950][ T6346] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 318.874200][ T6346] usb 4-1: can't read configurations, error -61 [ 318.889580][ T6346] usb usb4-port1: attempt power cycle [ 319.267956][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 319.318092][ T6346] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 319.353485][ T6346] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 319.382393][ T6346] usb 4-1: can't read configurations, error -61 [ 319.492465][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.607420][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 319.631646][ T6346] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 319.755766][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.259670][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 320.365188][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 320.444979][ T8] usb 2-1: Product: syz [ 320.501415][ T8] usb 2-1: Manufacturer: syz [ 320.594152][ T6346] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 320.657717][ T6346] usb 4-1: can't read configurations, error -71 [ 320.673637][ T8574] vhci_hcd: connection reset by peer [ 320.823536][ T6346] usb usb4-port1: unable to enumerate USB device [ 320.924878][ T11] vhci_hcd: stop threads [ 320.967717][ T8606] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 320.992465][ T11] vhci_hcd: release socket [ 321.067350][ T11] vhci_hcd: disconnect device [ 321.141175][ T8] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 321.305754][ T8] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 322.002339][ T6346] usb 2-1: USB disconnect, device number 30 [ 322.048565][ T6346] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 322.074175][ T6346] garmin_gps 2-1:1.0: device disconnected [ 322.368249][ T6197] vhci_hcd: vhci_device speed not set [ 322.779549][ T8640] binder: 8633:8640 ioctl 540f 200000000100 returned -22 [ 324.208294][ T8670] tipc: Started in network mode [ 324.213325][ T8670] tipc: Node identity 2002a3a, cluster identity 4711 [ 324.234118][ T8670] tipc: Node number set to 33565242 [ 325.058008][ T56] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 325.261930][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.304150][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 325.338292][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.390774][ T56] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 325.429741][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 325.450350][ T56] usb 3-1: Product: syz [ 325.454768][ T56] usb 3-1: Manufacturer: syz [ 325.502086][ T8687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 325.521744][ T56] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 325.567764][ T56] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 327.813285][ T8] usb 3-1: USB disconnect, device number 38 [ 327.860924][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 327.925516][ T8] garmin_gps 3-1:1.0: device disconnected [ 328.133443][ T8744] syz.1.850: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 328.133789][ T8744] CPU: 0 PID: 8744 Comm: syz.1.850 Not tainted syzkaller #0 [ 328.133812][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.133826][ T8744] Call Trace: [ 328.133836][ T8744] [ 328.133847][ T8744] dump_stack_lvl+0x18c/0x250 [ 328.133909][ T8744] ? show_regs_print_info+0x20/0x20 [ 328.133940][ T8744] ? load_image+0x420/0x420 [ 328.133972][ T8744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.134002][ T8744] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 328.134041][ T8744] warn_alloc+0x246/0x340 [ 328.134065][ T8744] ? _end+0x67dda14a/0x0 [ 328.134092][ T8744] ? zone_watermark_ok_safe+0x230/0x230 [ 328.134135][ T8744] ? _end+0x67dda14a/0x0 [ 328.134158][ T8744] __vmalloc_node_range+0x129/0x1320 [ 328.134190][ T8744] ? __mutex_trylock_common+0x160/0x270 [ 328.134217][ T8744] ? trace_raw_output_contention_end+0xd0/0xd0 [ 328.134247][ T8744] ? rcu_is_watching+0x15/0xb0 [ 328.134277][ T8744] ? trace_contention_end+0x39/0xe0 [ 328.134300][ T8744] ? __mutex_lock+0x30d/0xc80 [ 328.134327][ T8744] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 328.134358][ T8744] ? free_vm_area+0x50/0x50 [ 328.134386][ T8744] ? dvb_demux_do_ioctl+0x317/0x530 [ 328.134415][ T8744] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 328.134446][ T8744] ? mutex_lock_nested+0x20/0x20 [ 328.134468][ T8744] ? _end+0x67dda14a/0x0 [ 328.134490][ T8744] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 328.134520][ T8744] vmalloc+0x79/0x90 [ 328.134548][ T8744] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 328.134577][ T8744] ? _end+0x67dda14a/0x0 [ 328.134598][ T8744] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 328.134636][ T8744] dvb_demux_do_ioctl+0x454/0x530 [ 328.134664][ T8744] ? _end+0x67dda14a/0x0 [ 328.134688][ T8744] ? _end+0x67dda14a/0x0 [ 328.134709][ T8744] dvb_usercopy+0x195/0x2b0 [ 328.134736][ T8744] ? _end+0x67dda14a/0x0 [ 328.134757][ T8744] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 328.134786][ T8744] ? dvb_generic_ioctl+0xb0/0xb0 [ 328.134835][ T8744] ? _end+0x67dda14a/0x0 [ 328.134857][ T8744] ? _end+0x67dda14a/0x0 [ 328.134878][ T8744] ? dvb_demux_poll+0x210/0x210 [ 328.134906][ T8744] ? _end+0x67dda14a/0x0 [ 328.134928][ T8744] dvb_demux_ioctl+0x29/0x30 [ 328.134958][ T8744] __se_sys_ioctl+0xfd/0x170 [ 328.134991][ T8744] do_syscall_64+0x55/0xb0 [ 328.135017][ T8744] ? clear_bhb_loop+0x40/0x90 [ 328.135053][ T8744] ? clear_bhb_loop+0x40/0x90 [ 328.135085][ T8744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.135113][ T8744] RIP: 0033:0x7fad9c39e159 [ 328.135135][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.135154][ T8744] RSP: 002b:00007fad9d197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.135179][ T8744] RAX: ffffffffffffffda RBX: 00007fad9c625fa0 RCX: 00007fad9c39e159 [ 328.135196][ T8744] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000007 [ 328.135211][ T8744] RBP: 00007fad9c43506b R08: 0000000000000000 R09: 0000000000000000 [ 328.135226][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.135239][ T8744] R13: 00007fad9c626038 R14: 00007fad9c625fa0 R15: 00007ffd3f67a6e8 [ 328.135267][ T8744] ? _end+0x67dda14a/0x0 [ 328.135296][ T8744] [ 328.135306][ T8744] Mem-Info: [ 328.135316][ T8744] active_anon:6061 inactive_anon:0 isolated_anon:0 [ 328.135316][ T8744] active_file:1289 inactive_file:38745 isolated_file:0 [ 328.135316][ T8744] unevictable:768 dirty:440 writeback:0 [ 328.135316][ T8744] slab_reclaimable:10044 slab_unreclaimable:91284 [ 328.135316][ T8744] mapped:24957 shmem:1395 pagetables:618 [ 328.135316][ T8744] sec_pagetables:0 bounce:0 [ 328.135316][ T8744] kernel_misc_reclaimable:0 [ 328.135316][ T8744] free:1361702 free_pcp:11095 free_cma:0 [ 328.135377][ T8744] Node 0 active_anon:24244kB inactive_anon:0kB active_file:5156kB inactive_file:154848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99828kB dirty:1760kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11676kB pagetables:2472kB sec_pagetables:0kB all_unreclaimable? no [ 328.135436][ T8744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 328.135492][ T8744] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.135555][ T8744] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 328.135611][ T8744] Node 0 DMA32 free:1543432kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24208kB inactive_anon:0kB active_file:5140kB inactive_file:154060kB unevictable:1536kB writepending:1756kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:22932kB local_pcp:8012kB free_cma:0kB [ 328.135677][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 328.135728][ T8744] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:16kB inactive_file:788kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 328.135791][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 328.135842][ T8744] Node 1 Normal free:3888040kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21424kB local_pcp:8420kB free_cma:0kB [ 328.135906][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 328.135957][ T8744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 328.136194][ T8744] Node 0 DMA32: 1470*4kB (UE) 204*8kB (UE) 323*16kB (U) 34*32kB (UME) 3*64kB (UM) 3*128kB (UE) 7*256kB (UM) 13*512kB (UME) 9*1024kB (UM) 4*2048kB (UME) 367*4096kB (UM) = 1543432kB [ 328.136417][ T8744] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 328.136559][ T8744] Node 1 Normal: 238*4kB (U) 46*8kB (UE) 28*16kB (UE) 46*32kB (UE) 22*64kB (UME) 5*128kB (UME) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 947*4096kB (M) = 3888040kB [ 328.136782][ T8744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.136801][ T8744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.136820][ T8744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.136839][ T8744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.136858][ T8744] 41429 total pagecache pages [ 328.136868][ T8744] 0 pages in swap cache [ 328.136877][ T8744] Free swap = 124728kB [ 328.136887][ T8744] Total swap = 124996kB [ 328.136897][ T8744] 2097051 pages RAM [ 328.136906][ T8744] 0 pages HighMem/MovableOnly [ 328.136915][ T8744] 416965 pages reserved [ 328.136924][ T8744] 0 pages cma reserved [ 328.883530][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.929785][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.133296][ T28] audit: type=1800 audit(1790437284.974:47): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="id" dev="configfs" ino=17562 res=0 errno=0 [ 329.938195][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 330.061506][ T8766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.141607][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.191365][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 330.216542][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.236924][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 330.250239][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 330.272363][ T8] usb 4-1: Product: syz [ 330.276673][ T8] usb 4-1: Manufacturer: syz [ 330.311720][ T8764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.358401][ T8] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 330.406538][ T8] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 330.637172][ T28] audit: type=1800 audit(1790437286.494:48): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.864" name="id" dev="configfs" ino=18462 res=0 errno=0 [ 330.657679][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.504367][ T8803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.733340][ T56] usb 4-1: USB disconnect, device number 24 [ 332.769346][ T56] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 332.811408][ T56] garmin_gps 4-1:1.0: device disconnected [ 332.933328][ T8816] syzkaller0: entered promiscuous mode [ 332.958093][ T8816] syzkaller0: entered allmulticast mode [ 332.964190][ T28] audit: type=1800 audit(1790437288.814:49): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.875" name="id" dev="configfs" ino=17658 res=0 errno=0 [ 334.009072][ T6346] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 334.232457][ T8860] Zero length message leads to an empty skb [ 334.241540][ T6346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.255379][ T6346] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 334.266163][ T6346] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.283994][ T6346] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 334.294582][ T6346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 334.306701][ T6346] usb 4-1: Product: syz [ 334.314282][ T6346] usb 4-1: Manufacturer: syz [ 334.379747][ T8841] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.417384][ T6346] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 334.483336][ T6346] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 337.117750][ T6346] usb 4-1: USB disconnect, device number 25 [ 337.178625][ T6346] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 337.289046][ T6346] garmin_gps 4-1:1.0: device disconnected [ 337.852091][ T6346] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 338.235883][ T6346] usb 4-1: Using ep0 maxpacket: 8 [ 338.451534][ T6346] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 338.568853][ T6346] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.664460][ T6346] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.692091][ T8895] net_ratelimit: 8 callbacks suppressed [ 338.692108][ T8895] Set syz1 is full, maxelem 2 reached [ 338.767690][ T6346] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 338.798398][ T6346] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 338.854590][ T8898] overlayfs: invalid origin (0000) [ 338.867447][ T28] audit: type=1326 audit(1790437294.724:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9a3b9e159 code=0x0 [ 338.869150][ T6346] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.892120][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.112329][ T6346] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.113370][ T6346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.367447][ T6346] usbtmc: probe of 4-1:16.0 failed with error -22 [ 340.426145][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.474050][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.893486][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 340.909395][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 341.067971][ T8913] ceph: No mds server is up or the cluster is laggy [ 342.107407][ T5818] usb 4-1: USB disconnect, device number 26 [ 342.517015][ T8933] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 342.578463][ T8933] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 343.119245][ T8939] fuse: Unknown parameter 'user_i00000000000000000000' [ 343.206765][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 343.213262][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 343.310965][ T8941] ceph: No mds server is up or the cluster is laggy [ 343.568077][ T8934] comedi comedi1: reset error (fatal) [ 343.818064][ T5818] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 343.889807][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.920'. [ 344.008571][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 344.016389][ T5818] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 344.026879][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.067900][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.098060][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.128623][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.158136][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.203649][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.337434][ T56] libceph: connect (1)[c::]:6789 error -101 [ 344.370066][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 344.425476][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.442315][ T5818] usb 3-1: usb_control_msg returned -32 [ 344.453870][ T8969] ceph: No mds server is up or the cluster is laggy [ 344.468459][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 344.502867][ T5818] usb 3-1: USB disconnect, device number 39 [ 344.525421][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.708663][ T8978] FAULT_INJECTION: forcing a failure. [ 344.708663][ T8978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 344.721824][ T8978] CPU: 1 PID: 8978 Comm: syz.3.928 Not tainted syzkaller #0 [ 344.729360][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.739535][ T8978] Call Trace: [ 344.742832][ T8978] [ 344.745775][ T8978] dump_stack_lvl+0x18c/0x250 [ 344.750489][ T8978] ? show_regs_print_info+0x20/0x20 [ 344.755721][ T8978] ? load_image+0x420/0x420 [ 344.760340][ T8978] should_fail_ex+0x394/0x4c0 [ 344.765126][ T8978] get_futex_key+0x136/0x1030 [ 344.769863][ T8978] ? futex_setup_timer+0xc0/0xc0 [ 344.774872][ T8978] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 344.780917][ T8978] ? __lock_acquire+0x7d80/0x7d80 [ 344.785974][ T8978] ? lock_chain_count+0x20/0x20 [ 344.790849][ T8978] ? llist_add_batch+0x10f/0x1f0 [ 344.795807][ T8978] futex_wait_setup+0xbc/0x270 [ 344.800782][ T8978] ? futex_wait_multiple+0x920/0x920 [ 344.806080][ T8978] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 344.812256][ T8978] ? _raw_spin_unlock+0x40/0x40 [ 344.817128][ T8978] futex_wait+0x1bc/0x5c0 [ 344.821574][ T8978] ? futex_wait_setup+0x270/0x270 [ 344.826629][ T8978] ? file_end_write+0x159/0x250 [ 344.831590][ T8978] ? vfs_write+0x5de/0x9a0 [ 344.836029][ T8978] do_futex+0x2ff/0x3e0 [ 344.840379][ T8978] ? __ia32_sys_get_robust_list+0x110/0x110 [ 344.846386][ T8978] __se_sys_futex+0x3a9/0x440 [ 344.851188][ T8978] ? __x64_sys_futex+0xf0/0xf0 [ 344.856018][ T8978] ? __x64_sys_futex+0x21/0xf0 [ 344.860805][ T8978] do_syscall_64+0x55/0xb0 [ 344.865250][ T8978] ? clear_bhb_loop+0x40/0x90 [ 344.869948][ T8978] ? clear_bhb_loop+0x40/0x90 [ 344.874818][ T8978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.880997][ T8978] RIP: 0033:0x7ff08659e159 [ 344.885441][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.905606][ T8978] RSP: 002b:00007ff08743f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.914048][ T8978] RAX: ffffffffffffffda RBX: 00007ff086825fa8 RCX: 00007ff08659e159 [ 344.922297][ T8978] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff086825fa8 [ 344.930388][ T8978] RBP: 00007ff086825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.938476][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.946899][ T8978] R13: 00007ff086826038 R14: 00007ffdd1bcd000 R15: 00007ffdd1bcd0e8 [ 344.955025][ T8978] [ 346.134246][ T8987] overlayfs: missing 'lowerdir' [ 347.209930][ T8962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.367175][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 347.378540][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 347.475180][ T8996] ceph: No mds server is up or the cluster is laggy [ 347.793967][ T9010] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 347.827091][ T9010] netlink: 'syz.0.939': attribute type 2 has an invalid length. [ 347.908357][ T6346] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 347.962873][ T9018] overlayfs: missing 'lowerdir' [ 348.109818][ T6346] usb 2-1: Using ep0 maxpacket: 8 [ 348.138703][ T6346] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 348.193647][ T6346] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.282515][ T6346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.372819][ T6346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.461983][ T6346] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.589541][ T6346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.692764][ T6346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.258068][ T6346] usb 2-1: usb_control_msg returned -32 [ 349.289030][ T6346] usbtmc 2-1:16.0: can't read capabilities [ 349.350027][ T6346] usb 2-1: USB disconnect, device number 31 [ 349.756139][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 349.772052][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 349.787971][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 349.865949][ T9045] ceph: No mds server is up or the cluster is laggy [ 350.020285][ T9053] bridge_slave_0: left allmulticast mode [ 350.026298][ T9053] bridge_slave_0: left promiscuous mode [ 350.033625][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.046019][ T9053] bridge_slave_1: left allmulticast mode [ 350.051990][ T9053] bridge_slave_1: left promiscuous mode [ 350.053106][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.079568][ T9053] bond0: (slave bond_slave_0): Releasing backup interface [ 350.105947][ T9053] bond0: (slave bond_slave_1): Releasing backup interface [ 350.136456][ T9053] team0: Port device team_slave_0 removed [ 350.152963][ T9053] team0: Port device team_slave_1 removed [ 350.166826][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.192616][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.576676][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.952'. [ 351.827701][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.844849][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.584119][ T9037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.596035][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 352.602394][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 352.609655][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 352.615892][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 352.752596][ T9078] ceph: No mds server is up or the cluster is laggy [ 352.890521][ T9084] overlayfs: missing 'lowerdir' [ 353.037477][ T9088] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 353.088916][ T9088] device-mapper: ioctl: error adding target to table [ 353.466298][ T9100] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 353.777221][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 353.890023][ T5818] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 353.972082][ T9105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 353.978777][ T9105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.993944][ T9105] vhci_hcd vhci_hcd.0: Device attached [ 354.118009][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 354.135444][ T5818] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 354.146405][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.158857][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.168881][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.168913][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.168992][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.169018][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.278256][ T56] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 354.286265][ T6223] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 354.426417][ T5818] usb 2-1: usb_control_msg returned -32 [ 354.437285][ T9118] overlayfs: missing 'lowerdir' [ 354.443476][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 354.469154][ T5818] usb 2-1: USB disconnect, device number 32 [ 354.490762][ T6223] usb 4-1: config 0 has no interfaces? [ 354.511446][ T6223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.536496][ T6223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.574477][ T6223] usb 4-1: config 0 descriptor?? [ 354.830541][ T5818] usb 4-1: USB disconnect, device number 27 [ 354.846860][ T9106] vhci_hcd: connection reset by peer [ 355.015287][ T11] vhci_hcd: stop threads [ 355.066844][ T11] vhci_hcd: release socket [ 355.121137][ T11] vhci_hcd: disconnect device [ 356.896785][ T9137] fuse: Unknown parameter 'user_id00000000000000000000' [ 359.986804][ T9147] overlayfs: missing 'lowerdir' [ 360.094713][ T56] vhci_hcd: vhci_device speed not set [ 360.179451][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 360.617975][ T6223] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 361.637936][ T6223] usb 3-1: Using ep0 maxpacket: 8 [ 361.651189][ T6223] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 361.667374][ T6223] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.693228][ T6223] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.693251][ T9165] futex_wake_op: syz.0.986 tries to shift op by 144; fix this program [ 361.714081][ T6223] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.757909][ T6223] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.312953][ T6223] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.650144][ T9163] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 363.748810][ T6223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.802595][ T6223] usb 3-1: can't set config #16, error -71 [ 363.825822][ T6223] usb 3-1: USB disconnect, device number 40 [ 363.851600][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 363.866166][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 363.922114][ T9177] fuse: Bad value for 'fd' [ 363.931133][ T9173] ceph: No mds server is up or the cluster is laggy [ 363.939091][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 363.945417][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 364.214436][ T9184] overlayfs: missing 'workdir' [ 364.279074][ T9182] syz.0.990: attempt to access beyond end of device [ 364.279074][ T9182] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 364.293073][ T9182] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 364.466587][ T9191] syzkaller0: entered promiscuous mode [ 364.490617][ T9191] syzkaller0: entered allmulticast mode [ 364.505189][ T9194] FAULT_INJECTION: forcing a failure. [ 364.505189][ T9194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.524243][ T9194] CPU: 1 PID: 9194 Comm: syz.2.994 Not tainted syzkaller #0 [ 364.531974][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.542407][ T9194] Call Trace: [ 364.542482][ T9194] [ 364.542527][ T9194] dump_stack_lvl+0x18c/0x250 [ 364.553662][ T9194] ? show_regs_print_info+0x20/0x20 [ 364.558948][ T9194] ? load_image+0x420/0x420 [ 364.563496][ T9194] ? __might_fault+0xaa/0x120 [ 364.563554][ T9194] ? __lock_acquire+0x7d80/0x7d80 [ 364.573513][ T9194] ? __local_bh_enable_ip+0x13a/0x1c0 [ 364.573550][ T9194] ? _local_bh_enable+0xa0/0xa0 [ 364.573577][ T9194] should_fail_ex+0x394/0x4c0 [ 364.588594][ T9194] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 364.594296][ T9194] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 364.594340][ T9194] ? fpregs_set+0x370/0x370 [ 364.604725][ T9194] ? fpu__alloc_mathframe+0xa7/0x120 [ 364.610154][ T9194] get_sigframe+0x5de/0x7d0 [ 364.614768][ T9194] ? load_gs_index+0x1a0/0x1a0 [ 364.619592][ T9194] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 364.625596][ T9194] ? get_signal+0x1197/0x1390 [ 364.630325][ T9194] x64_setup_rt_frame+0x164/0xc30 [ 364.635503][ T9194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.641814][ T9194] ? lockdep_hardirqs_on+0x98/0x150 [ 364.647099][ T9194] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 364.652709][ T9194] arch_do_signal_or_restart+0x411/0x7b0 [ 364.658412][ T9194] ? get_sigframe_size+0x20/0x20 [ 364.663436][ T9194] ? exit_to_user_mode_loop+0x3b/0x110 [ 364.668961][ T9194] exit_to_user_mode_loop+0x70/0x110 [ 364.674315][ T9194] exit_to_user_mode_prepare+0xee/0x180 [ 364.679931][ T9194] syscall_exit_to_user_mode+0x1a/0x50 [ 364.685527][ T9194] do_syscall_64+0x61/0xb0 [ 364.690005][ T9194] ? clear_bhb_loop+0x40/0x90 [ 364.694816][ T9194] ? clear_bhb_loop+0x40/0x90 [ 364.699640][ T9194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.705681][ T9194] RIP: 0033:0x7f2ad419e159 [ 364.710195][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.729857][ T9194] RSP: 002b:00007f2ad23f6028 EFLAGS: 00000246 [ 364.736217][ T9194] RAX: 0000000000000000 RBX: 00007f2ad4425fa0 RCX: 00007f2ad419e159 [ 364.736238][ T9194] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 364.752401][ T9194] RBP: 00007f2ad423506b R08: 0000000000000000 R09: 0000000000000000 [ 364.752418][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.752432][ T9194] R13: 00007f2ad4426038 R14: 00007f2ad4425fa0 R15: 00007ffd2d7d6148 [ 364.768760][ T9194] [ 365.566880][ T9205] fuse: Bad value for 'fd' [ 365.598088][ T9206] futex_wake_op: syz.2.998 tries to shift op by 144; fix this program [ 366.235408][ T6223] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 368.090930][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 368.110623][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 368.178643][ T9213] ceph: No mds server is up or the cluster is laggy [ 368.200859][ T9218] overlayfs: missing 'workdir' [ 368.258527][ T6223] usb 2-1: Using ep0 maxpacket: 8 [ 368.323870][ T6223] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 368.379298][ T6223] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.431688][ T6223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.460880][ T6223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.479619][ T6223] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.515867][ T6223] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.559590][ T6223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.602383][ T6223] usb 2-1: can't set config #16, error -71 [ 368.612032][ T9223] syzkaller0: entered promiscuous mode [ 368.617656][ T9223] syzkaller0: entered allmulticast mode [ 368.640244][ T6223] usb 2-1: USB disconnect, device number 33 [ 368.858066][ T6346] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 369.058529][ T6346] usb 3-1: Using ep0 maxpacket: 8 [ 369.081583][ T6346] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 369.110876][ T6346] usb 3-1: can't read configurations, error -61 [ 369.289009][ T6346] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 369.447745][ T9238] fuse: Bad value for 'fd' [ 369.503556][ T6346] usb 3-1: Using ep0 maxpacket: 8 [ 369.536667][ T6346] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 369.568720][ T6346] usb 3-1: can't read configurations, error -61 [ 369.585881][ T6346] usb usb3-port1: attempt power cycle [ 369.808962][ T8] libceph: connect (1)[c::]:6789 error -101 [ 369.815422][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 369.874183][ T8] libceph: connect (1)[c::]:6789 error -101 [ 369.880814][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 369.984767][ T9245] ceph: No mds server is up or the cluster is laggy [ 370.048171][ T6346] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 370.129184][ T6346] usb 3-1: Using ep0 maxpacket: 8 [ 370.161308][ T6346] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 370.175975][ T6346] usb 3-1: can't read configurations, error -61 [ 370.358310][ T6346] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 370.408901][ T6346] usb 3-1: Using ep0 maxpacket: 8 [ 370.422310][ T6346] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 370.442548][ T6346] usb 3-1: can't read configurations, error -61 [ 370.461993][ T6346] usb usb3-port1: unable to enumerate USB device [ 370.621368][ T9260] overlayfs: missing 'workdir' [ 371.666136][ T9272] fuse: Unknown parameter '0x0000000000000003' [ 371.772048][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 372.065046][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 372.191640][ T9291] overlayfs: missing 'lowerdir' [ 372.233300][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 372.242328][ T6346] libceph: connect (1)[c::]:6789 error -101 [ 372.248498][ T9283] ceph: No mds server is up or the cluster is laggy [ 372.255622][ T6346] libceph: mon0 (1)[c::]:6789 connect error [ 373.253404][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 373.643953][ T9317] fuse: Unknown parameter '0x0000000000000003' [ 373.804843][ T9321] overlayfs: missing 'lowerdir' [ 374.832498][ T28] audit: type=1800 audit(1790437330.674:51): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1034" name="id" dev="configfs" ino=19616 res=0 errno=0 [ 375.112069][ T9336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.272911][ T9359] overlayfs: missing 'lowerdir' [ 377.577225][ T28] audit: type=1800 audit(1790437333.434:52): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1045" name="id" dev="configfs" ino=19676 res=0 errno=0 [ 377.709701][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1047'. [ 378.192084][ T9389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 378.209425][ T9389] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 379.151671][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.158175][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.168435][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 381.226756][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 381.250756][ T9393] ceph: No mds server is up or the cluster is laggy [ 381.475574][ T28] audit: type=1800 audit(1790437337.304:53): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1056" name="id" dev="configfs" ino=20504 res=0 errno=0 [ 381.605521][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.633883][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.972950][ T9423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.008895][ T9423] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 382.428057][ T6346] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 382.563167][ T9436] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1066'. [ 382.641890][ T6346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.846221][ T6346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 385.844849][ T8] libceph: connect (1)[c::]:6789 error -101 [ 385.868391][ T6346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 385.938399][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 385.973519][ T6346] usb 4-1: SerialNumber: syz [ 386.029188][ T9440] ceph: No mds server is up or the cluster is laggy [ 386.069770][ T6346] usb 4-1: can't set config #1, error -71 [ 386.167984][ T6346] usb 4-1: USB disconnect, device number 28 [ 386.326152][ T8] libceph: connect (1)[c::]:6789 error -101 [ 386.395621][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 386.617367][ T28] audit: type=1800 audit(1790437342.474:54): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1068" name="id" dev="configfs" ino=20583 res=0 errno=0 [ 386.639162][ T9452] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 386.977259][ T9464] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 386.987742][ T9464] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.272518][ T9470] ubi0: attaching mtd0 [ 387.362998][ T9470] ubi0: scanning is finished [ 387.383951][ T9470] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 387.439632][ T9472] autofs4:pid:9472:autofs_fill_super: called with bogus options [ 387.463197][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 387.497606][ T9470] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 388.067638][ T9472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1076'. [ 388.231707][ T28] audit: type=1800 audit(1790437344.094:55): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1080" name="id" dev="configfs" ino=20632 res=0 errno=0 [ 388.687878][ T9498] serio: Serial port ptm0 [ 388.832284][ T9508] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 389.378134][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 389.410160][ T28] audit: type=1800 audit(1790437345.254:56): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1090" name="id" dev="configfs" ino=19997 res=0 errno=0 [ 389.430526][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.098416][ T9542] futex_wake_op: syz.0.1095 tries to shift op by 144; fix this program [ 391.420565][ T28] audit: type=1800 audit(1790437347.284:57): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1100" name="id" dev="configfs" ino=20800 res=0 errno=0 [ 392.151523][ T9577] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 392.407303][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 393.879496][ T9596] fuse: Unknown parameter 'fd0x0000000000000003' [ 394.098124][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 394.488174][ T8] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 394.553915][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.563941][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.575616][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.584417][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.594041][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.606972][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.618227][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.628682][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.643797][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.652655][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.662070][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.673447][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.681874][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.691226][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.703408][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.714216][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.723403][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.738049][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.747642][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.757680][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.769404][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.786543][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.808102][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.846941][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.873547][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 394.896913][ T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.926334][ T8] usb 4-1: Product: syz [ 394.968311][ T8] usb 4-1: Manufacturer: syz [ 395.011503][ T8] usb 4-1: SerialNumber: syz [ 395.063898][ T8] usb 4-1: config 0 descriptor?? [ 395.141039][ T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 395.439240][ T5818] usb 4-1: USB disconnect, device number 29 [ 395.481494][ T5818] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 395.498779][ T9619] Illegal XDP return value 4294967294 on prog (id 57) dev syz_tun, expect packet loss! [ 396.932372][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 397.144261][ T9593] Process accounting resumed [ 397.343716][ T28] audit: type=1800 audit(1790437353.204:58): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1122" name="id" dev="configfs" ino=20941 res=0 errno=0 [ 397.365387][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.725473][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 398.530615][ T6218] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 398.728698][ T6218] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 398.748432][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.757346][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.792748][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.808983][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.830200][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.842005][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.854298][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.864032][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.875439][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.883861][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.893424][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.904526][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.913791][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.923087][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.934657][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.943041][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.953539][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.971059][ T9666] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 398.982663][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.993413][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.011052][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.034721][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.051583][ T6218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.071660][ T6218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.095638][ T6218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.111408][ T6218] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 399.133849][ T6218] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 399.142505][ T6218] usb 4-1: Product: syz [ 399.146919][ T6218] usb 4-1: Manufacturer: syz [ 399.151854][ T6218] usb 4-1: SerialNumber: syz [ 399.162314][ T6218] usb 4-1: config 0 descriptor?? [ 399.177012][ T6218] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 399.397258][ T6218] usb 4-1: USB disconnect, device number 30 [ 399.416241][ T6218] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 400.169476][ T9662] Process accounting resumed [ 400.210635][ T28] audit: type=1800 audit(1790437356.074:59): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1132" name="id" dev="configfs" ino=20995 res=0 errno=0 [ 400.263780][ T6218] libceph: connect (1)[c::]:6789 error -101 [ 400.270196][ T6218] libceph: mon0 (1)[c::]:6789 connect error [ 400.364592][ T9673] ceph: No mds server is up or the cluster is laggy [ 400.559349][ T6218] [ 400.561743][ T6218] ============================================ [ 400.567927][ T6218] WARNING: possible recursive locking detected [ 400.574364][ T6218] syzkaller #0 Not tainted [ 400.578805][ T6218] -------------------------------------------- [ 400.585078][ T6218] kworker/1:13/6218 is trying to acquire lock: [ 400.585756][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 400.591236][ T6218] ffff88814c02f130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 400.610068][ T6218] [ 400.610068][ T6218] but task is already holding lock: [ 400.611822][ C0] virtqueue callback for ffff888141643800 (ffffffff85c745d0) [ 400.617525][ T6218] ffff88805bbbe130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 400.624969][ C0] No more buffers in queue [ 400.634871][ T6218] [ 400.634871][ T6218] other info that might help us debug this: [ 400.634880][ T6218] Possible unsafe locking scenario: [ 400.634880][ T6218] [ 400.634885][ T6218] CPU0 [ 400.634889][ T6218] ---- [ 400.634893][ T6218] lock(&grp->list_lock); [ 400.639329][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 400.647355][ T6218] lock(&grp->list_lock [ 400.654822][ C0] No more buffers in queue [ 400.658071][ T6218] ); [ 400.658079][ T6218] [ 400.658079][ T6218] *** DEADLOCK *** [ 400.658079][ T6218] [ 400.658083][ T6218] May be due to missing lock nesting notation [ 400.658083][ T6218] [ 400.658090][ T6218] 3 locks held by kworker/1:13/6218: [ 400.668060][ C0] No more buffers in queue [ 400.671657][ T6218] #0: [ 400.675910][ C0] eth0: xmit ffff88823bcfa000 42:01:0a:80:00:01 [ 400.680294][ T6218] ffff888017c70938 ((wq_completion)events){+.+.}-{0:0} [ 400.682830][ C0] Added buffer head 5 to ffff888141643a00 [ 400.690962][ T6218] , at: process_scheduled_works+0x975/0x1600 [ 400.690987][ C0] virtqueue callback for ffff888141643a00 (ffffffff85c746c0) [ 400.690992][ T6218] #1: ffffc9000b6e7d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0} [ 400.707814][ C0] Sent skb ffff88823bcfa000 [ 400.709280][ T6218] , at: process_scheduled_works+0x975/0x1600 [ 400.712078][ C0] No more buffers in queue [ 400.718283][ T6218] #2: ffff88805bbbe130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 400.782315][ T6218] [ 400.782315][ T6218] stack backtrace: [ 400.788217][ T6218] CPU: 1 PID: 6218 Comm: kworker/1:13 Not tainted syzkaller #0 [ 400.795860][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.806199][ T6218] Workqueue: events snd_rawmidi_input_event_work [ 400.812696][ T6218] Call Trace: [ 400.816003][ T6218] [ 400.818951][ T6218] dump_stack_lvl+0x18c/0x250 [ 400.823667][ T6218] ? show_regs_print_info+0x20/0x20 [ 400.829138][ T6218] ? print_deadlock_bug+0x435/0x5d0 [ 400.834353][ T6218] __lock_acquire+0x6809/0x7d80 [ 400.839394][ T6218] ? verify_lock_unused+0x140/0x140 [ 400.844605][ T6218] ? verify_lock_unused+0x140/0x140 [ 400.849814][ T6218] ? verify_lock_unused+0x140/0x140 [ 400.855024][ T6218] ? __rwlock_init+0x150/0x150 [ 400.859812][ T6218] lock_acquire+0x19e/0x420 [ 400.864515][ T6218] ? snd_seq_deliver_event+0x248/0x970 [ 400.870015][ T6218] ? __lock_acquire+0x7d80/0x7d80 [ 400.875619][ T6218] ? read_lock_is_recursive+0x20/0x20 [ 400.881492][ T6218] ? mark_lock+0x94/0x320 [ 400.886538][ T6218] ? do_raw_read_unlock+0x3d/0x80 [ 400.891697][ T6218] ? snd_seq_deliver_event+0x220/0x970 [ 400.897385][ T6218] _raw_read_lock+0x36/0x50 [ 400.902220][ T6218] ? snd_seq_deliver_event+0x248/0x970 [ 400.907823][ T6218] snd_seq_deliver_event+0x248/0x970 [ 400.913420][ T6218] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.919460][ T6218] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 400.925125][ T6218] ? client_use_ptr+0xa9/0xaa0 [ 400.929907][ T6218] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 400.936272][ T6218] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 400.942612][ T6218] snd_seq_control_queue+0x886/0x1060 [ 400.948104][ T6218] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 400.954184][ T6218] ? mark_lock+0x94/0x320 [ 400.958546][ T6218] ? snd_seq_port_use_ptr+0x101/0x130 [ 400.964016][ T6218] ? __lock_acquire+0x7d80/0x7d80 [ 400.969067][ T6218] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.974970][ T6218] ? _raw_spin_unlock+0x40/0x40 [ 400.979856][ T6218] ? verify_lock_unused+0x140/0x140 [ 400.985235][ T6218] ? do_raw_read_unlock+0x3d/0x80 [ 400.990795][ T6218] ? _raw_read_unlock+0x28/0x40 [ 400.995782][ T6218] ? snd_seq_port_use_ptr+0x101/0x130 [ 401.001555][ T6218] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 401.008012][ T6218] ? snd_seq_system_notify+0x170/0x170 [ 401.013610][ T6218] ? snd_sequencer_device_done+0x30/0x30 [ 401.019561][ T6218] ? mark_lock+0x94/0x320 [ 401.024378][ T6218] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.030407][ T6218] ? __lock_acquire+0x7d80/0x7d80 [ 401.035457][ T6218] snd_seq_deliver_event+0x270/0x970 [ 401.041229][ T6218] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 401.047232][ T6218] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 401.052968][ T6218] ? client_use_ptr+0xa9/0xaa0 [ 401.058102][ T6218] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 401.064649][ T6218] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 401.070921][ T6218] snd_seq_oss_timer_start+0x337/0x570 [ 401.076709][ T6218] ? snd_seq_oss_process_timer_event+0x3e0/0x3e0 [ 401.083308][ T6218] ? snd_seq_oss_readq_put_event+0x161/0x250 [ 401.089330][ T6218] ? snd_seq_oss_readq_put_timestamp+0x137/0x1a0 [ 401.095791][ T6218] ? snd_seq_oss_readq_poll+0xb0/0xb0 [ 401.101281][ T6218] snd_seq_oss_midi_input+0x34d/0x9b0 [ 401.106781][ T6218] ? snd_seq_port_use_ptr+0x101/0x130 [ 401.109058][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 401.112268][ T6218] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 401.119934][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 401.125786][ T6218] ? do_raw_read_unlock+0x3d/0x80 [ 401.132703][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 401.137718][ T6218] ? _raw_read_unlock+0x28/0x40 [ 401.149629][ T6218] ? snd_seq_port_use_ptr+0x101/0x130 [ 401.155011][ T6218] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 401.161102][ T6218] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 401.167616][ T6218] ? snd_sequencer_device_done+0x30/0x30 [ 401.173256][ T6218] ? mark_lock+0x94/0x320 [ 401.177869][ T6218] ? do_raw_read_unlock+0x3d/0x80 [ 401.182903][ T6218] snd_seq_deliver_event+0x502/0x970 [ 401.188293][ T6218] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 401.194032][ T6218] ? client_use_ptr+0xa9/0xaa0 [ 401.199070][ T6218] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 401.206219][ T6218] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 401.212397][ T6218] snd_midi_input_event+0x5d6/0x700 [ 401.217760][ T6218] ? event_process_midi+0x6b0/0x6b0 [ 401.222985][ T6218] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.228204][ T6218] ? process_scheduled_works+0x975/0x1600 [ 401.234210][ T6218] ? process_scheduled_works+0x975/0x1600 [ 401.240138][ T6218] process_scheduled_works+0xa60/0x1600 [ 401.245974][ T6218] ? worker_attach_to_pool+0x370/0x370 [ 401.251626][ T6218] ? assign_work+0x3cc/0x5d0 [ 401.256230][ T6218] worker_thread+0xa5e/0xfe0 [ 401.260928][ T6218] kthread+0x2fa/0x390 [ 401.265007][ T6218] ? pr_cont_work+0x550/0x550 [ 401.269703][ T6218] ? kthread_blkcg+0xd0/0xd0 [ 401.274299][ T6218] ret_from_fork+0x48/0x80 [ 401.278779][ T6218] ? kthread_blkcg+0xd0/0xd0 [ 401.283386][ T6218] ret_from_fork_asm+0x11/0x20 [ 401.288188][ T6218] [ 401.295113][ T8] Added buffer head 0 to ffff88801da67400 [ 401.295771][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 401.304941][ T9678] sock ffff888073a46c00 sk ffff8880307b8000 [ 401.315898][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 401.324402][ T9678] channel 2 len 36 [ 401.335195][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.343228][ T9685] kcov: kcov_start: t = ffff88802b4d5a00, size = 524288, area = ffffc9000fe69000 [ 401.343398][ C1] kcov: kcov_start: t = ffff88801e241e00, size = 262144, area = ffffc90002111000 [ 401.361189][ T9678] sock ffff888073a46c00 sk ffff8880307b8000 [ 401.361792][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.362099][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.369807][ T9678] got 9 bytes [ 401.376481][ C1] kcov: kcov_start: t = ffff88801c253c00, size = 262144, area = ffffc90002111000 [ 401.376510][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.376828][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.386320][ T9678] channel 2 len 15 [ 401.388871][ C1] kcov: kcov_start: t = ffff88801c253c00, size = 262144, area = ffffc90002111000 [ 401.388899][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.389362][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.444586][ C1] kcov: kcov_start: t = ffff88801bea1e00, size = 262144, area = ffffc90002111000 [ 401.454336][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.463408][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.463459][ T9684] kcov: kcov_task_exit: t = ffff88807ea69e00, kcov->t = ffff88807ea69e00 [ 401.471941][ C1] kcov: kcov_start: t = ffff88801c253c00, size = 262144, area = ffffc90002111000 [ 401.482425][ T9683] kcov: kcov_task_exit: t = ffff888022ba1e00, kcov->t = ffff888022ba1e00 [ 401.490119][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.501408][ T9686] kcov: kcov_start: t = ffff88801ee83c00, size = 524288, area = ffffc9000e578000 [ 401.507748][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.524939][ C1] kcov: kcov_start: t = ffff8880789eda00, size = 262144, area = ffffc90002111000 [ 401.534414][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.543095][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 401.545638][ T9685] kcov: kcov_task_exit: t = ffff88802b4d5a00, kcov->t = ffff88802b4d5a00 [ 401.551357][ C1] kcov: kcov_start: t = ffff88801c253c00, size = 262144, area = ffffc90002111000 [ 401.561075][ T9687] kcov: kcov_start: t = ffff8880283e3c00, size = 524288, area = ffffc9000eab1000 [ 401.568890][ C1] kcov: kcov_move_area: ffffc90015a7f000 1048576 <= ffffc90002111000 3 [ 401.589641][ T9678] 0 [ 401.589890][ T5781] send_to_group: group=ffff88802d007000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88802c23ee00 data_type=1 dir=0000000000000000 cookie=0 [ 401.592106][ T9678] hci0 orig refcnt 5 [ 401.611149][ T9678] hci0: sock ffff8880307b8000 [ 401.615990][ T9678] sock ffff8880307b8000 [ 401.617551][ T5781] inotify_handle_inode_event: group=ffff88802d007000 mark=ffff88802e85f708 mask=8 [ 401.620287][ T9678] channel 2 len 19 [ 401.620334][ T9678] hci0 orig refcnt 6 [ 401.634051][ T9688] kcov: kcov_start: t = ffff888076b09e00, size = 524288, area = ffffc9001026a000 [ 401.638978][ T5785] device: '0:53': device_unregister [ 401.654655][ T5781] fsnotify_insert_event: group=ffff88802d007000 event=ffff88805e528800 [ 401.654973][ T9677] sock ffff888073a46c00 sk ffff8880307b8000 [ 401.663320][ T5785] kernfs runtime_status: removing [ 401.669081][ T9677] channel 2 len 10 [ 401.680512][ T5141] get_one_event: group=ffff88802d007000 event=ffff88805e528800 [ 401.688228][ T5141] fsnotify_remove_first_event: group=ffff88802d007000 event=ffff88805e528800 [ 401.688258][ T5785] kernfs control: removing [ 401.697067][ T5141] inotify_read: group=ffff88802d007000 kevent=ffff88805e528800 [ 401.701700][ T5785] kernfs runtime_suspended_time: removing [ 401.711795][ T5141] copy_event_to_user: group=ffff88802d007000 event=ffff88805e528800 [ 401.715322][ T5785] kernfs runtime_active_time: removing [ 401.723586][ T5141] inotify_read: group=ffff88802d007000 kevent=0000000000000000 [ 401.728891][ T5785] kernfs autosuspend_delay_ms: removing [ 401.728931][ T5785] kernfs power: removing [ 401.747273][ T5785] kernfs subsystem: removing [ 401.752742][ T5785] kernfs 0:53: removing [ 401.756986][ T5785] kernfs uevent: removing [ 401.763061][ T5785] kernfs read_ahead_kb: removing [ 401.770633][ T5785] kernfs min_ratio: removing [ 401.775322][ T5785] kernfs min_ratio_fine: removing [ 401.780622][ T5785] kernfs max_ratio: removing [ 401.785313][ T5785] kernfs max_ratio_fine: removing [ 401.791724][ T5785] kernfs min_bytes: removing [ 401.796414][ T5785] kernfs max_bytes: removing [ 401.801514][ T5785] kernfs stable_pages_required: removing [ 401.807319][ T5785] kernfs strict_limit: removing [ 401.813219][ T5785] PM: Removing info for No Bus:0:53 [ 401.813935][ T5141] kobject: 'loop0' (ffff888148895428): kobject_uevent_env [ 401.818740][ T5785] kobject: '0:53' (ffff88807e9dd000): kobject_uevent_env [ 401.826339][ T5141] kobject: 'loop0' (ffff888148895428): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 401.833354][ T5785] kobject: '0:53' (ffff88807e9dd000): fill_kobj_path: path = '/devices/virtual/bdi/0:53' [ 401.846318][ T9446] inotify_handle_inode_event: group=ffff88802d007000 mark=ffff88802e85f708 mask=8000 [ 401.855716][ T5785] kernfs 0:53: removing [ 401.864096][ T9446] fsnotify_insert_event: group=ffff88802d007000 event=ffff888024aeb580 [ 401.876038][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 401.876075][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 401.876099][ T5785] kobject: '0:53' (ffff88807e9dd000): kobject_cleanup, parent 0000000000000000 [ 401.876120][ T5785] kobject: '0:53' (ffff88807e9dd000): calling ktype release [ 401.876134][ T5785] device: '0:53': device_create_release [ 401.876246][ T5785] kobject: '0:53': free name [ 401.902973][ T5141] get_one_event: group=ffff88802d007000 event=ffff888024aeb580 [ 401.935307][ T5141] fsnotify_remove_first_event: group=ffff88802d007000 event=ffff888024aeb580 [ 401.945717][ T5141] inotify_read: group=ffff88802d007000 kevent=ffff888024aeb580 [ 401.953593][ T5141] copy_event_to_user: group=ffff88802d007000 event=ffff888024aeb580 [ 401.962659][ T5141] inotify_read: group=ffff88802d007000 kevent=0000000000000000 [ 402.109087][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 402.116564][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 402.123542][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 402.131066][ T8] Added buffer head 0 to ffff88801da67400 [ 402.202241][ T9686] kcov: kcov_task_exit: t = ffff88801ee83c00, kcov->t = ffff88801ee83c00 [ 402.202262][ T9678] kcov: kcov_task_exit: t = ffff888027dfda00, kcov->t = ffff888027dfda00 [ 402.202491][ T9688] kcov: kcov_task_exit: t = ffff888076b09e00, kcov->t = ffff888076b09e00 [ 402.211268][ T9687] kcov: kcov_task_exit: t = ffff8880283e3c00, kcov->t = ffff8880283e3c00 [ 402.247435][ T5776] send_to_group: group=ffff88802d007000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807ccb9d00 data_type=1 dir=0000000000000000 cookie=0 [ 402.262764][ T5776] inotify_handle_inode_event: group=ffff88802d007000 mark=ffff88807f174708 mask=8 [ 402.272769][ T5776] fsnotify_insert_event: group=ffff88802d007000 event=ffff88805e528840 [ 402.282543][ T5141] get_one_event: group=ffff88802d007000 event=ffff88805e528840 [ 402.290243][ T5141] fsnotify_remove_first_event: group=ffff88802d007000 event=ffff88805e528840 [ 402.299676][ T5141] inotify_read: group=ffff88802d007000 kevent=ffff88805e528840 [ 402.307503][ T5141] copy_event_to_user: group=ffff88802d007000 event=ffff88805e528840 [ 402.315585][ T5141] inotify_read: group=ffff88802d007000 kevent=0000000000000000 [ 402.326643][ T5141] kobject: 'loop2' (ffff888148896ba8): kobject_uevent_env [ 402.333955][ T5141] kobject: 'loop2' (ffff888148896ba8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 402.345805][ T9446] inotify_handle_inode_event: group=ffff88802d007000 mark=ffff88807f174708 mask=8000 [ 402.357049][ T9446] fsnotify_insert_event: group=ffff88802d007000 event=ffff88805e528880 [ 402.366292][ T5141] get_one_event: group=ffff88802d007000 event=ffff88805e528880 [ 402.374292][ T5141] fsnotify_remove_first_event: group=ffff88802d007000 event=ffff88805e528880 [ 402.383960][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 402.383988][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 402.408369][ T5141] inotify_read: group=ffff88802d007000 kevent=ffff88805e528880 [ 402.415922][ T5141] copy_event_to_user: group=ffff88802d007000 event=ffff88805e528880 [ 402.424352][ T5141] inotify_read: group=ffff88802d007000 kevent=0000000000000000 [ 402.887875][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 402.902877][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 403.109082][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 403.116829][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 403.124283][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 403.131572][ T8] Added buffer head 0 to ffff88801da67400 [ 403.366308][ C0] virtqueue callback for ffff888141643800 (ffffffff85c745d0) [ 403.373801][ C0] No more buffers in queue [ 403.378360][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 403.384185][ C0] No more buffers in queue [ 403.388797][ C0] No more buffers in queue [ 403.393238][ C0] eth0: xmit ffff88805d779c80 42:01:0a:80:00:01 [ 403.399792][ C0] Added buffer head 5 to ffff888141643a00 [ 403.405698][ C0] virtqueue callback for ffff888141643a00 (ffffffff85c746c0) [ 403.413712][ C0] Sent skb ffff88805d779c80 [ 403.418301][ C0] No more buffers in queue [ 403.427934][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 403.442846][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 403.968002][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 403.983645][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 404.109059][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 404.116556][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 404.124150][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 404.131858][ T8] Added buffer head 0 to ffff88801da67400 [ 404.497957][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 404.513100][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 405.037896][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 405.053557][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 405.109051][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 405.116658][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 405.123681][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 405.130955][ T8] Added buffer head 0 to ffff88801da67400 [ 405.577924][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 405.592954][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 406.109075][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 406.116540][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 406.117833][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 406.123637][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 406.123811][ T8] Added buffer head 0 to ffff88801da67400 [ 406.138454][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 406.657895][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 406.673023][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 407.109062][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 407.118076][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 407.125097][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 407.132263][ T8] Added buffer head 0 to ffff88801da67400 [ 407.187862][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 407.202854][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 407.717864][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 407.732932][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 408.109057][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 408.116759][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 408.124073][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 408.131344][ T8] Added buffer head 0 to ffff88801da67400 [ 408.247941][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 408.262908][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 408.777868][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 408.792903][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 409.109073][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 409.116514][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 409.124668][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 409.131815][ T8] Added buffer head 0 to ffff88801da67400 [ 409.307935][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 409.322888][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 409.365361][ C0] virtqueue callback for ffff888141643800 (ffffffff85c745d0) [ 409.373742][ C0] No more buffers in queue [ 409.378449][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 409.384728][ C0] No more buffers in queue [ 409.389623][ C0] No more buffers in queue [ 409.394233][ C0] eth0: xmit ffff88807afb7500 42:01:0a:80:00:01 [ 409.400923][ C0] Added buffer head 5 to ffff888141643a00 [ 409.406947][ C0] virtqueue callback for ffff888141643a00 (ffffffff85c746c0) [ 409.414918][ C0] Sent skb ffff88807afb7500 [ 409.419517][ C0] No more buffers in queue [ 409.837867][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 409.853629][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 410.109056][ C0] virtqueue callback for ffff88801da67400 (ffffffff84a02460) [ 410.116499][ C0] virtqueue interrupt with no work for ffff88801da67200 [ 410.123461][ C0] virtqueue interrupt with no work for ffff88801da67000 [ 410.130886][ T8] Added buffer head 0 to ffff88801da67400 [ 410.367859][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802ee38fd8 is addr:c00:0:5b48:0:900:0:800:0 for cmd:0 at entry:ffff88802ffcdc00 [ 410.383450][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later