last executing test programs: 21.412743417s ago: executing program 0 (id=340): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f4005500"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 21.139574314s ago: executing program 0 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000000000000000700000000ffffffff000000000000000000000000000307954e230020020000003c020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, {0xfffffffffffffffc, 0x6}, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d5, 0x2b}, 0x2, @in=@remote, 0x0, 0x0, 0x3, 0x3, 0x2bee3cc6, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7000000}, 0x1c) 21.13878834s ago: executing program 0 (id=346): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x24, 0x5d, {0x5d, 0x2, "b29c08e57e55c15d3515e8f9a632261a62e237a9cd9a420651418b2d2739869932e2b369e122c2462ddaa9648d2964153fb738db11e3e83abf516a71d35c7dffe970e31539d8065d8f82e879c78b6c520fe3c6c1b0b774b5a02fab"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0xc, 0x14, "0a07041b8875dfe9adbfd4dd6c94ee48732bde0a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xa3}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18.314191774s ago: executing program 0 (id=363): mkdir(&(0x7f0000000000)='./sys\x00', 0x3d2) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x21f5, &(0x7f0000000040)={0x0, 0x4a09, 0x20, 0x3, 0x190}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x4cfa, 0x0, 0x0, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, {0x0, 0x0, 0x7}}) r5 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0xffff, 0xdff2f6991cc06f9f, 0x0, 0x64c, 0xa}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x604}}}, 0x0) r6 = syz_ublk_setup_io_uring(0x4302, &(0x7f0000000500)={0x0, 0xb0b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_ublk_add_dev(r0, r2, r8, 0x0, &(0x7f0000000280)={0x2e, 0x78, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x4, 0x3b0, 0x0, 0x0, 0x1000, 0x3, r10, 0x0, 0x6}}}, &(0x7f0000000340)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) write(r11, &(0x7f0000000a00)='e', 0x1) 18.195992189s ago: executing program 0 (id=365): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x469}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x49) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4b6, 0xfffffffffffffffe, 0x58}}, 0x30) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x62001, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa7) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000001100)={0x0, @bt={0x500, 0x2d0, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x37, 0x4, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) syz_clone3(&(0x7f00000007c0)={0xa0000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18.148618525s ago: executing program 0 (id=366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000100000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844) 3.753464079s ago: executing program 1 (id=435): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="0bffeb36a5589800d082488a3574213ca10df06c0190bd39c9b1deec10a83bbf50c82aaac0533629c96719d6", 0x2c}], 0x1}}], 0x1, 0x4) 3.725778821s ago: executing program 1 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000020000000900010073797a30000000004c000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000031800048009000100736e6d70000000000500030011"], 0x94}}, 0x0) 3.613629308s ago: executing program 1 (id=438): mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x890d, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x0, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x0, 0x1010, r3, 0x0) syz_clone(0x836a691, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000)) 3.611759078s ago: executing program 2 (id=439): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) inotify_init1(0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000300000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.439643956s ago: executing program 1 (id=440): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000001000008"], 0x40}, 0xee00) 3.428287006s ago: executing program 1 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x6f}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x24000840) r1 = syz_usb_connect$hid(0x5, 0x67, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37]}}]}) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000000)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') syz_usb_connect(0x4, 0xeb1, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x4e, 0xb5, 0x24, 0xff, 0x846, 0x9055, 0xaabc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9f, 0x4, 0x4, 0x5, 0x40, 0x0, "", [{{0x9, 0x4, 0xd6, 0x3, 0x1, 0xff, 0xff, 0xff, 0x40, [@generic={0x41, 0x23, "00e69a62d5a83404c09bd9c277112245816899ea22768ff1042e4765cd2b771e6d16e073ae043d39eb4f3eb5b7b1ea62924ea7f522857786c54e45762b2d63"}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x3c, "e9f2febe"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x8, 0xd, "f010"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0xa0d3, 0x9}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7ff, 0x80, 0x0, "ea474b6dc1df3139"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0xc, 0x8, [@generic={0xf, 0x2, "926fd2e32c20416d370be2a420"}]}}]}}, {{0x9, 0x4, 0x55, 0x7, 0x9, 0xbb, 0xf7, 0xdb, 0x0, [@generic={0x98, 0xb, "b36213c296c2964e5aa99a39a8c6a867a96408d61393d0cc6f181f61ba349862f00a39616e18794d3736930b6d9f35999bf8cc2f375c87e113dd13b2f9005bdb5000cd775fe6cda280dba101e3f80e900f43f0d1ac5053a56660f8d0018bc914aadcbf05a6da5e41baf0bf2f6f8161c239a11020e0ce34c5aa75668c898bcd8abbb217036d7ec87266addd35ab714c5e73fa8e9c8d31"}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "1f065937"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x7ff, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x4, 0x0, 0x0, 0x7, 0x5}, @acm={0x4, 0x24, 0x2, 0xa}, @ncm={0x6, 0x24, 0x1a, 0x1000, 0x14}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4b, 0x5}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x52, 0x9, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xba, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xcfb1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6d, 0x7}, @generic={0xf4, 0x4, "b3a4ef789b0a3c938471f823d7393499420d3fa429ff8598f517a9b0689af51cee550f8bc928e88ca362d6c827df200a647e4811e75cc8938d3bc2b9b54de1fb7dbec06732eaf4f5d2d94ca94ce81bd13f85aa3e988ee213e7b5e68a74be4c7323562a0df2b35f2f54ddb149fdc70d919d04ffd3e542d821f7a6674f76a73a908b0bff7dc19b2fff1d24305ff3caefaf5e5723427cf7b7ef30494d0ee387883f472c9acc694305c10f1cb2648396fe03565b86a904fda2e3cc9e9a5635fc3ee797685c3ee3f0d62763636fb1e2f40c82b4ad6e973d6f80aa8a85f4798c4ffd99c610593d2a9ade06d1f2afcbe1153b0afb4e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x73, 0x8, 0xa, [@generic={0x39, 0x3, "be130844b708695eec83a630b38a5323b1cac1b3d518be8f5402ecc0759935ea165c6565b511b1e6a9b36718409453c19f615cb2efaf21"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x3, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x101}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0xc0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x45, 0x101}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x40, 0xd9, 0x9, [@generic={0x29, 0xa, "d687cf856175433f8f63561f44d00d475522b2af084e1e3ce70a1937a459a7b5da1c2e1fef7ef7"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x2, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x52, 0x8182}]}}]}}, {{0x9, 0x4, 0x26, 0x3, 0xe, 0x94, 0x55, 0xb1, 0x77, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "76910d5010"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0xf, 0x3}, {0x6, 0x24, 0x1a, 0xf6c4, 0x1b}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8, 0x5}, @mdlm_detail={0xfb, 0x24, 0x13, 0x1, "b20ce9b58a6c2930c0624a921c6307863546065274976db31d35463c73537572641c2d658eb815564c5cc3f7c7e4abbe2d9c72858477b3ecde0610c885fb8d7da77ba6ef62153fc58ebf63e17b1eb1edfd9752fb2934a87e90a374fc822860811208c2fe0179be835c78f8fc587fbce68b8e2a6d4fd15bc995f4e45ed2fd2599b2fc79e69036b7d4faa140a02ef18b6da7e91445bd6bd197e07d0535a7666e523a6cac3d4d14acc9cba290916937a463a87c7a9bfbb3cc10e7c66d6ea2e88d5a2464b69c7e3315c7fb5fdec55ebf615cf712ba714507feb72a8b82ae1ff10d06869adea7e73a92614b27fd76e4ad39e18fc7048386c2ca"}, @dmm={0x7, 0x24, 0x14, 0x5, 0xc944}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x2b}, [@extension_unit={0x8, 0x24, 0x8, 0x6, 0x4, 0x3, "a3"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0xf, "575842ba3310"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x2, 0x4, 0x7}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x5}]}], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x9, 0x4e, 0x9, [@generic={0xb, 0x1, "b3f165452bddcac839"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x5d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x18e}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0xee, 0x5, [@generic={0x8, 0x30, "c6e7b73b8c29"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x9, 0x9, 0xfa}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x0, 0xb0, [@generic={0x1b, 0x11, "60aed7e34004c2a37e20c7d24952a8f72dc154f1e80e3f2406"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xc, 0x83, 0xfe}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0xf, 0x7, 0x80}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x0, 0x2, [@generic={0xd7, 0x22, "bdde36aa4d0515a9a5cc08cf44892837877ff7a6bee9981010775a5e6dc4ff3d118708832a60ef38305e01324e4f4e5d4e12b997ed1a38cc5d4f4b4127a494f6cc5a0c6e3f38dc0263151c617c84356ea1f18cc92341b44969676e3c42a9d9d5112bcdbca27cc4c8767c917ccd7a2914c53799030d301fd09e7fa186584562e22c2d525953bc6830328206e6cfebf964e66feb5bbb28f2512eb8e3687c1ad1da28f3c6c8b43f1dd7b257ca79e817b1a2ed6d3306c56c60d84b5e0f13f4e1b1c2dbf6063eb0843d23b7256326a502234b1a9b153805"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x40, 0xfe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}, @generic={0xe, 0x11, "38e999a8fdebc1f60f1068c3"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x6, 0x5, [@generic={0x5e, 0xf, "d48b10c6abfc33451597268954bb0505aa9882c3b4b0ecb90f5836e1bef87d55e16ba66fd53342c7bffcdebfed7d13eac9fd174ff704743ed08f3c1ea47d161c7302ba9522d2a3ea0b73642caa1f9b46ab08d5ff1c936d9224282e48"}, @generic={0xaa, 0x22, "68b24530fdc859401cfc4a2d447d5a14956d8ca893e294479cbac24a88f0c87ded42e8d2fdea0ab2d1ef1443c01805cf0c0ec486a8b877c61207ae6ce0d87b4aec1c46d4db25a0b9f9afd4211fb92d2c3e7a4f752f8a635c30f3848cc65ee8a8807fdd675a639bdb77abe25d4600cb34afdcbb850b47874ecff899c690fd70aba2630fff823e81c2f70864576121fcfe9586b9b7e02628c1d287b79881668919927767117d3c6ece"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x0, 0x2, 0xff}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0xca, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}, @generic={0xf1, 0x1, "544fb492130515433f556f6ff6394490c472d3791913821ad8a9678e9964369582c6d5203e6f4a17b71231541e1074101516e4d70fbf89cb8b1e61b8717d8b910b1751f76fed6a5f22c977f5b82abf5e95fd0013524fc4d705150e9803930908361380af4a1280f6e17e9727278754dc4547a426793391ef6eeddfb5b2b872aecf585da4383d0609e5331adf3d30aaaef4d11ce5e12c13a9b0737d91211c705e4dc67f2657cc0b8465fd771f14955a7e1b38fd2c15147de2397c84b9f1bc1423212fffafe44459ce619ac0dd887bead33347f5f3d574c2b7c6b9b6b15755ec726ee89d6387403a313f594ab571f533"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x4}]}}]}}, {{0x9, 0x4, 0x5b, 0xab, 0xf, 0xff, 0xff, 0xff, 0x5, [@generic={0xe4, 0x23, "9e1e56bf421c2b5002e45a2e188e2b3257daca54ac9e2e086d2bd5a936b1a65dfdff44ec87f2905b9b1de773adfc9f752209a3042c894b450c615cd425048141c52ca42615636d262a0abbcef09707912d1642b17e3156c0dda0bd6a449ee49b1dbd3e0d1218aab9c297b5f6bdb5a23dfcbd5c76ffc5f74858b7c1d5690d22e79ee085f849feb572a7a977f28a719fc4c38afebdfd6116e3df1d8d978bcf048c46afaf7908ab1d1fcb240fcab9cccd0d86f1451f641bd5b839f0d818e37bd340fe84833ed0b8f8112bdb9ab706d16a2e0257f55ab6bfb615930565b7e8db35439e7e"}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x36}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x5, 'm\\)3@'}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x404, 0x6, 0x7, 0x1, 0x3, 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x6, 0x7, "2cdc62ff"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x5, 0x9, "56ecdaa1"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x5b7, 0x86, 0x2, 0x10, [@generic={0xbd, 0x3, "b1607bdac896dd9a2efe5437d116c63ef71cee2bea41cc9697903c67e32da8c484b5b85e3cc5fc5cfccebdbe8be8b2eeb204efd0d89867d955613665aafaf998ca8f08a4cd2f1825c03518d23ece964417d4d89332436f07501989d917dbe427e3d8e52759c1e5362ce4c9201ad4dbe48cabb08993396c18c3489ba229e70d7de551794b0961d0e03e912c68e7568152ec126d3f3cb1d9cfa87ccadf9814fb9f1829fe6a8e6dc8a5bfaefedc58dac46306cbde7d57eae2c77ef064"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x3, 0xff, [@generic={0xc3, 0xd, "a8c0e6cf8dbe53fdd5d876df47eec0e756fcefeb3f6343dd80a89a2082ab1e6c5302d4da4b7f4b660391c8d108f6879411f28b7361c9e5704b2904b5c720f11e9b2bca44879199d91ec3d907593fd6c29db3c0897202922143d4d139aa16228d94e7a558dda32194d75ce09045798d0946f69e95ed275acc2aab10cc5f4c735df0dc2c16756ae69101232132441b8cab7af697fdd21658d84847c82df55145de346064a514dcb379b6dee8ff723c1ec29bab81dcc367f2ad5cc9a6613818583ef1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xd, 0x6, 0x36, [@generic={0x2a, 0x21, "b0508719375509f5ca258301e765552bf0f0d8248bf3bf89011fd19925e044be0e4bf22d83afa13a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x2d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x58, 0x7, 0x5, 0x80, [@generic={0xad, 0x10, "297da0160dd1197be865c626c9be2741d6116f02b12109c8ee625d414de192c8d6cc695a70ac20dafb71655895f8bd3a7c80f90496519b0542c057734ba764cb9cb19e4b7e580d53399ba4311c878d545b95b9ee71eebea6725cf646ce077275cde91826367b53066905c1b1df45e5489eb8b04eefda4ef1a7a51daeb479235f59c12ab931bccf557c76d58707f183d2130d65420cc72ffd24cac70691e545a1047022ef147c2e69c0150c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa5, 0x4, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x3}]}}, {{0x9, 0x5, 0x1, 0x19, 0x8, 0x2, 0xfd, 0x3}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xa, 0x7, 0x1, [@generic={0x19, 0xf, "df00a11b3bd85f8b9d457e5a841194f3ec7d9d161720a2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xacbb}]}}, {{0x9, 0x5, 0xb, 0x6, 0x3ff, 0x3, 0x1, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xc4, 0x2, 0x9, [@generic={0x3f, 0x23, "8252a34cd4cc3b6aa1339f08eb29f68b039159d17ff1687de108ea16a8f4b273ca2541648d84936f1615ee350f2180af23ed0faebcd3afb699dff445ad"}, @generic={0x23, 0x31, "8454e2a64449f8129451180f051344117ba3352375c392277b0cf9b6c26b7b52c2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2a, 0x40, 0x6, [@generic={0xa9, 0x8, "f95eff5248cf3684538d753cb13eb29e90583ff26214df98a479260c5680027ca0d3050fbb570f88af2c97b1c00c3230224e9ccb32c6ec9c050e7fc837720bf1460ea2861ad02845bf149ac152fef10628e1148713552b1ab284095ae3eef8c678e733a8af0885f914c7d7a233a44864c408ef41fbc86c7f086682247b3041d6507ed4edb51640a21851bb0a02e4592af8949a63f9a196bd82d2d3d77f226884608d68ecbbdf29"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6b7f}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x0, 0x6, 0xe, [@generic={0xb1, 0x7, "289e8adb1ca221c8a26edebe0b0268672f6e8bf47feacd71625e6379559d350d61db6b3c50125ee859955e6dcc4ab603f26083e9a16709802e8b67ae36266fc94d9b3cdcf71cebdd508655015c35bb9146aee45cf5aecc1fc15d1c1250cdaae55bbd2b825c99fc0122da34e8e550a9d945448262a10237f9316fbd91ede42f5d7e03436e6f4aaaddcfd1b33b6ac43de185c60df3c689c64b176c9052e6f414ea97560bba43c7f4968411104026a23a"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x6, 0x4, 0xa, [@generic={0xc, 0xd, "5f10631fc1bd3ad0920a"}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x40, 0x81}, 0x23, &(0x7f0000001480)={0x5, 0xf, 0x23, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x4, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xc, 0x3cc1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0xf, 0x3ff}]}, 0x3, [{0x8f, &(0x7f00000014c0)=@string={0x8f, 0x3, "bdb5e1fec88a9c3fe4b14bdfe4eb493805c88a949a8fd6066f7b1802128bc6aaa3883cdc9263c0c94afdac463522021b78c96ffeb7a902bd306f3822f408b2dc92b694e216e802fa92dbe91f56317ee861d831c447430bcec94334e559e1fa81596c3b8028d9c56084635a5e381aeed2c5978877d99bb3c3715122d089463040ca773c3c838de61b8a86217e60"}}, {0x101, &(0x7f0000001580)=@string={0x101, 0x3, "367fba9c9ee2bc110dd0a70b340bf22f0cc13ff332ddad1cd9dac9f56877408a87113e79647c69569fb0f4ebf4589fe26f3bd7ac2ec252720ad72e3882c8c842a0a8cd06fa2fb7cde16826918bc5bbc376a6961460ac0fcc8bf206559efdab72277a70ea44cfd93c7f3fe823cdc096f71356657f3016a8afdc685344a7074b99acfee9a5db2394e50d819b7532f81d62be3860b950332281cce5acf7e783d625e4d6d993859afd33e2fcf00e68479eda6a7235b0da727ac15d1c525186b5200026df8cf3b8d4aecd46ae5d38b744f6559fba8a925b785e1c2928fa4379508d13b00274bf5ed671c58afd991c20ac507d408ff27cfbfab6d43190c214daf5cd"}}, {0xdf, &(0x7f00000016c0)=@string={0xdf, 0x3, "ca97eaf7594aa26669eeddcde946e2d95e5b1d8da31828f5c058e1ae4ff645a4af2ab903ee71a4218abd2966e54ed74cd476fc208f2ad631d2116ae2d162bef9951e274e012d0d2198a37ae86fd55af5e2e1af122e228e04bc4d5bc2c4ef4725f03e5d3653db39dc914d6d1991557b286e129afed2785bdd49eb179d9bc7591c5968e0f02fffc27e820e8c5246e955aa7eeaf9faa437ddf3a501eed92a6136ae66a36978521422cf371d5a3f37e5c0130e544cf36502d7502176b88d356973c0f1db18bca6d876bd5f436b02feee6928339c85faad2a99a770bd0c80ea"}}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)="a29c4cc9", 0x4}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0008290000006211826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5544bb0e1b72a95c1747c51785cb7a3e84578c952f72558cfc038acfeeb44a0aa6264dad487f9473c3b2d195c2261605c4cc48a63d8fd78f846f0af62c60ac577913f3a79a292a80f148fe338d6d70914cdeb7e685de65ec4dd2234901bc7ed5000cd33004f2d53a6cf55799c158ae51ce0d8ae12f4259ad036d429de8e9d2bb548d79f1457d5169250eeee0f40cdba70acf40da0a01c8262f88dc69"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x6f}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x24000840) (async) syz_usb_connect$hid(0x5, 0x67, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37]}}]}) (async) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000000)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') (async) syz_usb_connect(0x4, 0xeb1, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x4e, 0xb5, 0x24, 0xff, 0x846, 0x9055, 0xaabc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9f, 0x4, 0x4, 0x5, 0x40, 0x0, "", [{{0x9, 0x4, 0xd6, 0x3, 0x1, 0xff, 0xff, 0xff, 0x40, [@generic={0x41, 0x23, "00e69a62d5a83404c09bd9c277112245816899ea22768ff1042e4765cd2b771e6d16e073ae043d39eb4f3eb5b7b1ea62924ea7f522857786c54e45762b2d63"}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x3c, "e9f2febe"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x8, 0xd, "f010"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0xa0d3, 0x9}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7ff, 0x80, 0x0, "ea474b6dc1df3139"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0xc, 0x8, [@generic={0xf, 0x2, "926fd2e32c20416d370be2a420"}]}}]}}, {{0x9, 0x4, 0x55, 0x7, 0x9, 0xbb, 0xf7, 0xdb, 0x0, [@generic={0x98, 0xb, "b36213c296c2964e5aa99a39a8c6a867a96408d61393d0cc6f181f61ba349862f00a39616e18794d3736930b6d9f35999bf8cc2f375c87e113dd13b2f9005bdb5000cd775fe6cda280dba101e3f80e900f43f0d1ac5053a56660f8d0018bc914aadcbf05a6da5e41baf0bf2f6f8161c239a11020e0ce34c5aa75668c898bcd8abbb217036d7ec87266addd35ab714c5e73fa8e9c8d31"}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "1f065937"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x7ff, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x4, 0x0, 0x0, 0x7, 0x5}, @acm={0x4, 0x24, 0x2, 0xa}, @ncm={0x6, 0x24, 0x1a, 0x1000, 0x14}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4b, 0x5}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x52, 0x9, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xba, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xcfb1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6d, 0x7}, @generic={0xf4, 0x4, "b3a4ef789b0a3c938471f823d7393499420d3fa429ff8598f517a9b0689af51cee550f8bc928e88ca362d6c827df200a647e4811e75cc8938d3bc2b9b54de1fb7dbec06732eaf4f5d2d94ca94ce81bd13f85aa3e988ee213e7b5e68a74be4c7323562a0df2b35f2f54ddb149fdc70d919d04ffd3e542d821f7a6674f76a73a908b0bff7dc19b2fff1d24305ff3caefaf5e5723427cf7b7ef30494d0ee387883f472c9acc694305c10f1cb2648396fe03565b86a904fda2e3cc9e9a5635fc3ee797685c3ee3f0d62763636fb1e2f40c82b4ad6e973d6f80aa8a85f4798c4ffd99c610593d2a9ade06d1f2afcbe1153b0afb4e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x73, 0x8, 0xa, [@generic={0x39, 0x3, "be130844b708695eec83a630b38a5323b1cac1b3d518be8f5402ecc0759935ea165c6565b511b1e6a9b36718409453c19f615cb2efaf21"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x3, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x101}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0xc0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x45, 0x101}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x40, 0xd9, 0x9, [@generic={0x29, 0xa, "d687cf856175433f8f63561f44d00d475522b2af084e1e3ce70a1937a459a7b5da1c2e1fef7ef7"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x2, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x52, 0x8182}]}}]}}, {{0x9, 0x4, 0x26, 0x3, 0xe, 0x94, 0x55, 0xb1, 0x77, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "76910d5010"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0xf, 0x3}, {0x6, 0x24, 0x1a, 0xf6c4, 0x1b}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8, 0x5}, @mdlm_detail={0xfb, 0x24, 0x13, 0x1, "b20ce9b58a6c2930c0624a921c6307863546065274976db31d35463c73537572641c2d658eb815564c5cc3f7c7e4abbe2d9c72858477b3ecde0610c885fb8d7da77ba6ef62153fc58ebf63e17b1eb1edfd9752fb2934a87e90a374fc822860811208c2fe0179be835c78f8fc587fbce68b8e2a6d4fd15bc995f4e45ed2fd2599b2fc79e69036b7d4faa140a02ef18b6da7e91445bd6bd197e07d0535a7666e523a6cac3d4d14acc9cba290916937a463a87c7a9bfbb3cc10e7c66d6ea2e88d5a2464b69c7e3315c7fb5fdec55ebf615cf712ba714507feb72a8b82ae1ff10d06869adea7e73a92614b27fd76e4ad39e18fc7048386c2ca"}, @dmm={0x7, 0x24, 0x14, 0x5, 0xc944}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x2b}, [@extension_unit={0x8, 0x24, 0x8, 0x6, 0x4, 0x3, "a3"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0xf, "575842ba3310"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x2, 0x4, 0x7}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x5}]}], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x9, 0x4e, 0x9, [@generic={0xb, 0x1, "b3f165452bddcac839"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x5d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x18e}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0xee, 0x5, [@generic={0x8, 0x30, "c6e7b73b8c29"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x9, 0x9, 0xfa}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x0, 0xb0, [@generic={0x1b, 0x11, "60aed7e34004c2a37e20c7d24952a8f72dc154f1e80e3f2406"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xc, 0x83, 0xfe}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0xf, 0x7, 0x80}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x0, 0x2, [@generic={0xd7, 0x22, "bdde36aa4d0515a9a5cc08cf44892837877ff7a6bee9981010775a5e6dc4ff3d118708832a60ef38305e01324e4f4e5d4e12b997ed1a38cc5d4f4b4127a494f6cc5a0c6e3f38dc0263151c617c84356ea1f18cc92341b44969676e3c42a9d9d5112bcdbca27cc4c8767c917ccd7a2914c53799030d301fd09e7fa186584562e22c2d525953bc6830328206e6cfebf964e66feb5bbb28f2512eb8e3687c1ad1da28f3c6c8b43f1dd7b257ca79e817b1a2ed6d3306c56c60d84b5e0f13f4e1b1c2dbf6063eb0843d23b7256326a502234b1a9b153805"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x40, 0xfe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}, @generic={0xe, 0x11, "38e999a8fdebc1f60f1068c3"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x6, 0x5, [@generic={0x5e, 0xf, "d48b10c6abfc33451597268954bb0505aa9882c3b4b0ecb90f5836e1bef87d55e16ba66fd53342c7bffcdebfed7d13eac9fd174ff704743ed08f3c1ea47d161c7302ba9522d2a3ea0b73642caa1f9b46ab08d5ff1c936d9224282e48"}, @generic={0xaa, 0x22, "68b24530fdc859401cfc4a2d447d5a14956d8ca893e294479cbac24a88f0c87ded42e8d2fdea0ab2d1ef1443c01805cf0c0ec486a8b877c61207ae6ce0d87b4aec1c46d4db25a0b9f9afd4211fb92d2c3e7a4f752f8a635c30f3848cc65ee8a8807fdd675a639bdb77abe25d4600cb34afdcbb850b47874ecff899c690fd70aba2630fff823e81c2f70864576121fcfe9586b9b7e02628c1d287b79881668919927767117d3c6ece"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x0, 0x2, 0xff}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0xca, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}, @generic={0xf1, 0x1, "544fb492130515433f556f6ff6394490c472d3791913821ad8a9678e9964369582c6d5203e6f4a17b71231541e1074101516e4d70fbf89cb8b1e61b8717d8b910b1751f76fed6a5f22c977f5b82abf5e95fd0013524fc4d705150e9803930908361380af4a1280f6e17e9727278754dc4547a426793391ef6eeddfb5b2b872aecf585da4383d0609e5331adf3d30aaaef4d11ce5e12c13a9b0737d91211c705e4dc67f2657cc0b8465fd771f14955a7e1b38fd2c15147de2397c84b9f1bc1423212fffafe44459ce619ac0dd887bead33347f5f3d574c2b7c6b9b6b15755ec726ee89d6387403a313f594ab571f533"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x4}]}}]}}, {{0x9, 0x4, 0x5b, 0xab, 0xf, 0xff, 0xff, 0xff, 0x5, [@generic={0xe4, 0x23, "9e1e56bf421c2b5002e45a2e188e2b3257daca54ac9e2e086d2bd5a936b1a65dfdff44ec87f2905b9b1de773adfc9f752209a3042c894b450c615cd425048141c52ca42615636d262a0abbcef09707912d1642b17e3156c0dda0bd6a449ee49b1dbd3e0d1218aab9c297b5f6bdb5a23dfcbd5c76ffc5f74858b7c1d5690d22e79ee085f849feb572a7a977f28a719fc4c38afebdfd6116e3df1d8d978bcf048c46afaf7908ab1d1fcb240fcab9cccd0d86f1451f641bd5b839f0d818e37bd340fe84833ed0b8f8112bdb9ab706d16a2e0257f55ab6bfb615930565b7e8db35439e7e"}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x36}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x5, 'm\\)3@'}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x404, 0x6, 0x7, 0x1, 0x3, 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x6, 0x7, "2cdc62ff"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x5, 0x9, "56ecdaa1"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x5b7, 0x86, 0x2, 0x10, [@generic={0xbd, 0x3, "b1607bdac896dd9a2efe5437d116c63ef71cee2bea41cc9697903c67e32da8c484b5b85e3cc5fc5cfccebdbe8be8b2eeb204efd0d89867d955613665aafaf998ca8f08a4cd2f1825c03518d23ece964417d4d89332436f07501989d917dbe427e3d8e52759c1e5362ce4c9201ad4dbe48cabb08993396c18c3489ba229e70d7de551794b0961d0e03e912c68e7568152ec126d3f3cb1d9cfa87ccadf9814fb9f1829fe6a8e6dc8a5bfaefedc58dac46306cbde7d57eae2c77ef064"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x3, 0xff, [@generic={0xc3, 0xd, "a8c0e6cf8dbe53fdd5d876df47eec0e756fcefeb3f6343dd80a89a2082ab1e6c5302d4da4b7f4b660391c8d108f6879411f28b7361c9e5704b2904b5c720f11e9b2bca44879199d91ec3d907593fd6c29db3c0897202922143d4d139aa16228d94e7a558dda32194d75ce09045798d0946f69e95ed275acc2aab10cc5f4c735df0dc2c16756ae69101232132441b8cab7af697fdd21658d84847c82df55145de346064a514dcb379b6dee8ff723c1ec29bab81dcc367f2ad5cc9a6613818583ef1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xd, 0x6, 0x36, [@generic={0x2a, 0x21, "b0508719375509f5ca258301e765552bf0f0d8248bf3bf89011fd19925e044be0e4bf22d83afa13a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x2d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x58, 0x7, 0x5, 0x80, [@generic={0xad, 0x10, "297da0160dd1197be865c626c9be2741d6116f02b12109c8ee625d414de192c8d6cc695a70ac20dafb71655895f8bd3a7c80f90496519b0542c057734ba764cb9cb19e4b7e580d53399ba4311c878d545b95b9ee71eebea6725cf646ce077275cde91826367b53066905c1b1df45e5489eb8b04eefda4ef1a7a51daeb479235f59c12ab931bccf557c76d58707f183d2130d65420cc72ffd24cac70691e545a1047022ef147c2e69c0150c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa5, 0x4, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x3}]}}, {{0x9, 0x5, 0x1, 0x19, 0x8, 0x2, 0xfd, 0x3}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xa, 0x7, 0x1, [@generic={0x19, 0xf, "df00a11b3bd85f8b9d457e5a841194f3ec7d9d161720a2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xacbb}]}}, {{0x9, 0x5, 0xb, 0x6, 0x3ff, 0x3, 0x1, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xc4, 0x2, 0x9, [@generic={0x3f, 0x23, "8252a34cd4cc3b6aa1339f08eb29f68b039159d17ff1687de108ea16a8f4b273ca2541648d84936f1615ee350f2180af23ed0faebcd3afb699dff445ad"}, @generic={0x23, 0x31, "8454e2a64449f8129451180f051344117ba3352375c392277b0cf9b6c26b7b52c2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2a, 0x40, 0x6, [@generic={0xa9, 0x8, "f95eff5248cf3684538d753cb13eb29e90583ff26214df98a479260c5680027ca0d3050fbb570f88af2c97b1c00c3230224e9ccb32c6ec9c050e7fc837720bf1460ea2861ad02845bf149ac152fef10628e1148713552b1ab284095ae3eef8c678e733a8af0885f914c7d7a233a44864c408ef41fbc86c7f086682247b3041d6507ed4edb51640a21851bb0a02e4592af8949a63f9a196bd82d2d3d77f226884608d68ecbbdf29"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6b7f}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x0, 0x6, 0xe, [@generic={0xb1, 0x7, "289e8adb1ca221c8a26edebe0b0268672f6e8bf47feacd71625e6379559d350d61db6b3c50125ee859955e6dcc4ab603f26083e9a16709802e8b67ae36266fc94d9b3cdcf71cebdd508655015c35bb9146aee45cf5aecc1fc15d1c1250cdaae55bbd2b825c99fc0122da34e8e550a9d945448262a10237f9316fbd91ede42f5d7e03436e6f4aaaddcfd1b33b6ac43de185c60df3c689c64b176c9052e6f414ea97560bba43c7f4968411104026a23a"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x6, 0x4, 0xa, [@generic={0xc, 0xd, "5f10631fc1bd3ad0920a"}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x40, 0x81}, 0x23, &(0x7f0000001480)={0x5, 0xf, 0x23, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x4, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xc, 0x3cc1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0xf, 0x3ff}]}, 0x3, [{0x8f, &(0x7f00000014c0)=@string={0x8f, 0x3, "bdb5e1fec88a9c3fe4b14bdfe4eb493805c88a949a8fd6066f7b1802128bc6aaa3883cdc9263c0c94afdac463522021b78c96ffeb7a902bd306f3822f408b2dc92b694e216e802fa92dbe91f56317ee861d831c447430bcec94334e559e1fa81596c3b8028d9c56084635a5e381aeed2c5978877d99bb3c3715122d089463040ca773c3c838de61b8a86217e60"}}, {0x101, &(0x7f0000001580)=@string={0x101, 0x3, "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"}}, {0xdf, &(0x7f00000016c0)=@string={0xdf, 0x3, "ca97eaf7594aa26669eeddcde946e2d95e5b1d8da31828f5c058e1ae4ff645a4af2ab903ee71a4218abd2966e54ed74cd476fc208f2ad631d2116ae2d162bef9951e274e012d0d2198a37ae86fd55af5e2e1af122e228e04bc4d5bc2c4ef4725f03e5d3653db39dc914d6d1991557b286e129afed2785bdd49eb179d9bc7591c5968e0f02fffc27e820e8c5246e955aa7eeaf9faa437ddf3a501eed92a6136ae66a36978521422cf371d5a3f37e5c0130e544cf36502d7502176b88d356973c0f1db18bca6d876bd5f436b02feee6928339c85faad2a99a770bd0c80ea"}}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)="a29c4cc9", 0x4}], 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0008290000006211826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5544bb0e1b72a95c1747c51785cb7a3e84578c952f72558cfc038acfeeb44a0aa6264dad487f9473c3b2d195c2261605c4cc48a63d8fd78f846f0af62c60ac577913f3a79a292a80f148fe338d6d70914cdeb7e685de65ec4dd2234901bc7ed5000cd33004f2d53a6cf55799c158ae51ce0d8ae12f4259ad036d429de8e9d2bb548d79f1457d5169250eeee0f40cdba70acf40da0a01c8262f88dc69"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 3.406740272s ago: executing program 2 (id=442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x200000000000000, 0x885}, 0x48080) 3.251713129s ago: executing program 2 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x9}}, 0xb) 3.221096151s ago: executing program 2 (id=444): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000002181a1180002000600142603600e1208000fe52f01100100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 3.088759802s ago: executing program 32 (id=366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000100000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844) 3.078495156s ago: executing program 2 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x27}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x54}}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xb0, 0x47, 0x107, 0x1, 0xffffffff, {0x8, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xa6, 0x0, 0x1, [@nested={0x4, 0xa3}, @nested={0x4, 0x7c}, @typed={0x6, 0x86, 0x0, 0x0, @str=':\x00'}]}, @generic="5158bb8043e2b000bf6bf4e4cc5f1cedb20f5420ac375958a2b09dc4e794d709ef3e3020b64f7b2838f03b774e2271e2c573e2cd4266d032475edeec404ea4990784e2aed614c2f42d27bf2a170b37881ad2ae49f1f0550c9e4d16ac3cf9f7fcd575c287b59f258a25cb4a624683a7b3b3e90cec5a"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d5}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x147) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0}, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8e) fcntl$notify(r5, 0x402, 0x80000002) 2.22574089s ago: executing program 2 (id=447): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xfffb, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e22, 0x7, @private1, 0x7f}}, 0x1, 0x7}, &(0x7f00000003c0)=0x90) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x9, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7fffffff, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2004402, &(0x7f00000000c0)=ANY=[@ANYBLOB=',access=user,msize=0']) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xfffb, 0x9}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e22, 0x7, @private1, 0x7f}}, 0x1, 0x7}, &(0x7f00000003c0)=0x90) (async) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x9, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7fffffff, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2004402, &(0x7f00000000c0)=ANY=[@ANYBLOB=',access=user,msize=0']) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1.65299042s ago: executing program 3 (id=448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048894}, 0xc000) 1.527569635s ago: executing program 3 (id=449): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000002000000000000000000200"}, 0xd8) 1.381899174s ago: executing program 3 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') ioctl$sock_SIOCOUTQ(r0, 0x40086203, 0x0) 1.297787667s ago: executing program 3 (id=451): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x7f, 0xffffffffffffff14, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xaf, 0xc, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 300.329594ms ago: executing program 3 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x9}}, 0xb) 223.494945ms ago: executing program 1 (id=453): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') lseek(r0, 0xfffffffffffffff7, 0x1) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000180)=""/82) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000240)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb4}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES16=0x0]) chdir(&(0x7f0000000140)='./file0\x00') copy_file_range(r2, 0x0, r2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', '127.0.0.1:/test'}, 0x13) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 3 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x27}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x54}}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xb0, 0x47, 0x107, 0x1, 0xffffffff, {0x8, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xf2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x14, 0xa6, 0x0, 0x1, [@nested={0x4, 0xa3}, @nested={0x4, 0x7c}, @typed={0x6, 0x86, 0x0, 0x0, @str=':\x00'}]}, @generic="5158bb8043e2b000bf6bf4e4cc5f1cedb20f5420ac375958a2b09dc4e794d709ef3e3020b64f7b2838f03b774e2271e2c573e2cd4266d032475edeec404ea4990784e2aed614c2f42d27bf2a170b37881ad2ae49f1f0550c9e4d16ac3cf9f7fcd575c287b59f258a25cb4a624683a7b3b3e90cec5a"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d5}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x147) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0}, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8e) fcntl$notify(r5, 0x402, 0x80000002) kernel console output (not intermixed with test programs): 116.703323][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 116.853798][ T6262] netlink: 'syz.0.175': attribute type 8 has an invalid length. [ 116.883273][ T12] IPVS: starting estimator thread 0... [ 116.954744][ T6267] netlink: 25 bytes leftover after parsing attributes in process `syz.0.178'. [ 116.967664][ T6263] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.983720][ T6267] gretap0: entered promiscuous mode [ 117.076534][ T6269] sg_write: data in/out 399324/22 bytes for SCSI command 0x0-- guessing data in; [ 117.076534][ T6269] program syz.2.177 not setting count and/or reply_len properly [ 117.124528][ T6272] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 117.124570][ T6272] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 117.124614][ T6272] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 117.176447][ T6272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.198683][ T6272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.346610][ T5713] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 117.368452][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 117.402153][ T6283] jffs2: notice: (6283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.432435][ T6283] FAULT_INJECTION: forcing a failure. [ 117.432435][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 117.432471][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 117.432497][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.432511][ T6283] Call Trace: [ 117.432520][ T6283] [ 117.432554][ T6283] dump_stack_lvl+0xe8/0x150 [ 117.432592][ T6283] should_fail_ex+0x3eb/0x540 [ 117.432621][ T6283] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 117.432645][ T6283] should_failslab+0xa8/0x100 [ 117.432679][ T6283] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 117.432701][ T6283] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 117.432739][ T6283] ? jffs2_alloc_inode+0x28/0x40 [ 117.432760][ T6283] ? jffs2_alloc_inode+0x28/0x40 [ 117.432789][ T6283] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 117.432812][ T6283] jffs2_alloc_inode+0x28/0x40 [ 117.432835][ T6283] alloc_inode+0x6a/0x1b0 [ 117.432860][ T6283] new_inode+0x1f/0x170 [ 117.432888][ T6283] jffs2_new_inode+0xdd/0xd20 [ 117.432917][ T6283] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 117.432948][ T6283] ? jffs2_mkdir+0x83/0xec0 [ 117.432976][ T6283] ? __pfx_jffs2_new_inode+0x10/0x10 [ 117.432996][ T6283] ? jffs2_mkdir+0x83/0xec0 [ 117.433019][ T6283] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 117.433051][ T6283] ? jffs2_mkdir+0x83/0xec0 [ 117.433083][ T6283] jffs2_mkdir+0x189/0xec0 [ 117.433122][ T6283] ? generic_permission+0x2ba/0x660 [ 117.433148][ T6283] ? __pfx_jffs2_mkdir+0x10/0x10 [ 117.433177][ T6283] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 117.433201][ T6283] ? security_inode_mkdir+0xc3/0x340 [ 117.433233][ T6283] vfs_mkdir+0x40e/0x630 [ 117.433272][ T6283] filename_mkdirat+0x285/0x510 [ 117.433303][ T6283] ? __might_fault+0xaf/0x130 [ 117.433340][ T6283] ? __pfx_filename_mkdirat+0x10/0x10 [ 117.433373][ T6283] ? do_getname+0x151/0x250 [ 117.433411][ T6283] __se_sys_mkdirat+0x35/0x150 [ 117.433443][ T6283] do_syscall_64+0x166/0x520 [ 117.433469][ T6283] ? trace_irq_disable+0x3b/0x140 [ 117.433495][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.433531][ T6283] ? clear_bhb_loop+0x70/0xc0 [ 117.433560][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.433582][ T6283] RIP: 0033:0x7fe69d79e159 [ 117.433615][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.433634][ T6283] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 117.433660][ T6283] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 117.433677][ T6283] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 117.433694][ T6283] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 117.433709][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.433723][ T6283] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 117.433760][ T6283] [ 117.509910][ T5713] usb 2-1: Using ep0 maxpacket: 8 [ 117.521643][ T5713] usb 2-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 117.621433][ T5713] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 117.621465][ T5713] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 117.621485][ T5713] usb 2-1: config 3 has no interface number 0 [ 117.621537][ T5713] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.621566][ T5713] usb 2-1: config 3 interface 45 has no altsetting 0 [ 117.737485][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.737512][ T5713] usb 2-1: Product: syz [ 117.737527][ T5713] usb 2-1: Manufacturer: syz [ 117.737552][ T5713] usb 2-1: SerialNumber: syz [ 117.738022][ T5755] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.914751][ T5755] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 117.936949][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.936979][ T5755] usb 4-1: Product: syz [ 117.936996][ T5755] usb 4-1: Manufacturer: syz [ 117.937011][ T5755] usb 4-1: SerialNumber: syz [ 117.937975][ T6288] netlink: 14 bytes leftover after parsing attributes in process `syz.0.185'. [ 118.362941][ T5713] usb 2-1: USB disconnect, device number 17 [ 118.397137][ T6283] CIFS: Attempting to mount //127.0.0.1/share [ 118.403160][ T6283] CIFS: VFS: Error connecting to socket. Aborting operation. [ 118.403210][ T6283] CIFS: VFS: cifs_mount failed w/return code = -111 [ 118.435363][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.534196][ T5755] rtl8150 4-1:1.0: couldn't reset the device [ 118.534532][ T5755] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 118.566487][ T5755] usb 4-1: USB disconnect, device number 9 [ 119.294354][ T6337] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.201'. [ 119.345458][ T6329] kvm: pic: non byte write [ 119.345560][ T6329] kvm: pic: non byte write [ 119.345879][ T6329] kvm: pic: non byte write [ 119.345960][ T6329] kvm: pic: non byte write [ 119.351608][ T6329] kvm: pic: non byte write [ 119.351807][ T6329] kvm: pic: non byte write [ 119.352396][ T6329] kvm: pic: non byte write [ 119.354451][ T6329] kvm: pic: non byte write [ 119.355056][ T6329] kvm: pic: non byte write [ 119.355198][ T6329] kvm: pic: non byte write [ 119.475668][ T4928] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 119.556052][ T6347] Zero length message leads to an empty skb [ 119.643418][ T6350] jffs2: notice: (6350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.688692][ T6350] FAULT_INJECTION: forcing a failure. [ 119.688692][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 119.688728][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT(full) [ 119.688755][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.688771][ T6350] Call Trace: [ 119.688780][ T6350] [ 119.688790][ T6350] dump_stack_lvl+0xe8/0x150 [ 119.688827][ T6350] should_fail_ex+0x3eb/0x540 [ 119.688859][ T6350] should_failslab+0xa8/0x100 [ 119.688904][ T6350] ? jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 119.688938][ T6350] kmem_cache_alloc_noprof+0x9c/0x600 [ 119.688965][ T6350] ? jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 119.689051][ T6350] jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 119.689089][ T6350] jffs2_reserve_space+0xb12/0xd10 [ 119.689159][ T6350] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 119.689203][ T6350] ? jffs2_mkdir+0x83/0xec0 [ 119.689253][ T6350] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 119.689290][ T6350] ? jffs2_mkdir+0x83/0xec0 [ 119.689316][ T6350] ? kmem_cache_alloc_noprof+0x151/0x600 [ 119.689339][ T6350] ? jffs2_mkdir+0x83/0xec0 [ 119.689372][ T6350] jffs2_mkdir+0x12e/0xec0 [ 119.689400][ T6350] ? make_vfsuid+0x49/0xa0 [ 119.689436][ T6350] ? generic_permission+0x2ba/0x660 [ 119.689474][ T6350] ? __pfx_jffs2_mkdir+0x10/0x10 [ 119.689504][ T6350] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 119.689540][ T6350] ? security_inode_mkdir+0xc3/0x340 [ 119.689573][ T6350] vfs_mkdir+0x40e/0x630 [ 119.689613][ T6350] filename_mkdirat+0x285/0x510 [ 119.689655][ T6350] ? __might_fault+0xaf/0x130 [ 119.689696][ T6350] ? __pfx_filename_mkdirat+0x10/0x10 [ 119.689733][ T6350] ? do_getname+0x151/0x250 [ 119.689788][ T6350] __se_sys_mkdirat+0x35/0x150 [ 119.689829][ T6350] do_syscall_64+0x166/0x520 [ 119.689856][ T6350] ? trace_irq_disable+0x3b/0x140 [ 119.689919][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.689944][ T6350] ? clear_bhb_loop+0x70/0xc0 [ 119.689974][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.689998][ T6350] RIP: 0033:0x7fdc37d9e159 [ 119.690034][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.690054][ T6350] RSP: 002b:00007fdc38c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 119.690079][ T6350] RAX: ffffffffffffffda RBX: 00007fdc38025fa0 RCX: 00007fdc37d9e159 [ 119.690097][ T6350] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 119.690145][ T6350] RBP: 00007fdc37e3506b R08: 0000000000000000 R09: 0000000000000000 [ 119.690175][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.690188][ T6350] R13: 00007fdc38026038 R14: 00007fdc38025fa0 R15: 00007ffffc4a4da8 [ 119.690226][ T6350] [ 120.067920][ T990] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.222494][ T990] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 120.230399][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.230474][ T990] usb 3-1: Product: syz [ 120.230556][ T990] usb 3-1: Manufacturer: syz [ 120.230606][ T990] usb 3-1: SerialNumber: syz [ 120.273725][ T6360] tipc: Started in network mode [ 120.273800][ T6360] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 120.275980][ T6360] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 120.301790][ T6360] tipc: Enabled bearer , priority 10 [ 120.316303][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 120.395805][ T6362] netlink: 13112 bytes leftover after parsing attributes in process `syz.3.209'. [ 120.466246][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 120.467138][ T10] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.468488][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.473854][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.473886][ T10] usb 2-1: Product: syz [ 120.473903][ T10] usb 2-1: Manufacturer: syz [ 120.473919][ T10] usb 2-1: SerialNumber: syz [ 120.527617][ T10] usb 2-1: config 0 descriptor?? [ 120.528432][ T6355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 120.671829][ T6350] CIFS: Attempting to mount //127.0.0.1/share [ 120.680076][ T5727] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.700248][ T6350] CIFS: VFS: Error connecting to socket. Aborting operation. [ 120.700303][ T6350] CIFS: VFS: cifs_mount failed w/return code = -111 [ 120.783683][ T990] rtl8150 3-1:1.0: couldn't reset the device [ 120.784022][ T990] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 120.819089][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.825965][ T990] usb 3-1: USB disconnect, device number 9 [ 120.849505][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.862045][ T5727] usb 4-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 120.886636][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 120.889377][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.889407][ T5727] usb 4-1: Product: syz [ 120.889424][ T5727] usb 4-1: Manufacturer: syz [ 121.070592][ T6368] syzkaller1: entered promiscuous mode [ 121.070621][ T6368] syzkaller1: entered allmulticast mode [ 121.318650][ T990] tipc: Node number set to 1 [ 121.359062][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.365103][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.385347][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 121.900631][ T5727] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 121.979713][ T5727] usb 4-1: USB disconnect, device number 10 [ 121.986323][ T990] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 122.136450][ T990] usb 3-1: device descriptor read/64, error -71 [ 122.340354][ T6387] netlink: 2 bytes leftover after parsing attributes in process `syz.0.218'. [ 122.387442][ T990] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 122.462946][ T6389] capability: warning: `syz.0.219' uses deprecated v2 capabilities in a way that may be insecure [ 122.480859][ T6389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.517573][ T990] usb 3-1: device descriptor read/64, error -71 [ 122.590228][ T6391] netlink: Failed to add helper -22 [ 122.590459][ T6391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.632395][ T990] usb usb3-port1: attempt power cycle [ 122.669977][ T6394] jffs2: notice: (6394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.706114][ T6394] FAULT_INJECTION: forcing a failure. [ 122.706114][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 122.706179][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 122.706206][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.706219][ T6394] Call Trace: [ 122.706227][ T6394] [ 122.706237][ T6394] dump_stack_lvl+0xe8/0x150 [ 122.706272][ T6394] should_fail_ex+0x3eb/0x540 [ 122.706303][ T6394] should_failslab+0xa8/0x100 [ 122.706335][ T6394] ? security_inode_alloc+0x39/0x310 [ 122.706361][ T6394] kmem_cache_alloc_noprof+0x9c/0x600 [ 122.706387][ T6394] ? __pfx_make_kgid+0x10/0x10 [ 122.706412][ T6394] ? security_inode_alloc+0x39/0x310 [ 122.706446][ T6394] security_inode_alloc+0x39/0x310 [ 122.706474][ T6394] inode_init_always_gfp+0x97e/0xd30 [ 122.706504][ T6394] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 122.706526][ T6394] alloc_inode+0x82/0x1b0 [ 122.706548][ T6394] new_inode+0x1f/0x170 [ 122.706577][ T6394] jffs2_new_inode+0xdd/0xd20 [ 122.706622][ T6394] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 122.706654][ T6394] ? jffs2_mkdir+0x83/0xec0 [ 122.706682][ T6394] ? __pfx_jffs2_new_inode+0x10/0x10 [ 122.706702][ T6394] ? jffs2_mkdir+0x83/0xec0 [ 122.706726][ T6394] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 122.706758][ T6394] ? jffs2_mkdir+0x83/0xec0 [ 122.706788][ T6394] jffs2_mkdir+0x189/0xec0 [ 122.706825][ T6394] ? generic_permission+0x2ba/0x660 [ 122.706860][ T6394] ? __pfx_jffs2_mkdir+0x10/0x10 [ 122.706891][ T6394] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 122.706915][ T6394] ? security_inode_mkdir+0xc3/0x340 [ 122.706946][ T6394] vfs_mkdir+0x40e/0x630 [ 122.706986][ T6394] filename_mkdirat+0x285/0x510 [ 122.707014][ T6394] ? __might_fault+0xaf/0x130 [ 122.707056][ T6394] ? __pfx_filename_mkdirat+0x10/0x10 [ 122.707098][ T6394] ? do_getname+0x151/0x250 [ 122.707138][ T6394] __se_sys_mkdirat+0x35/0x150 [ 122.707173][ T6394] do_syscall_64+0x166/0x520 [ 122.707204][ T6394] ? trace_irq_disable+0x3b/0x140 [ 122.707232][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.707255][ T6394] ? clear_bhb_loop+0x70/0xc0 [ 122.707287][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.707306][ T6394] RIP: 0033:0x7fa48079e159 [ 122.707338][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.707359][ T6394] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 122.707383][ T6394] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 122.707400][ T6394] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 122.707417][ T6394] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 122.707431][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.707445][ T6394] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 122.707482][ T6394] [ 122.980758][ T5727] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.990481][ T990] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 123.018141][ T990] usb 3-1: device descriptor read/8, error -71 [ 123.090702][ T5713] usb 2-1: USB disconnect, device number 18 [ 123.138063][ T5727] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 123.146908][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.146984][ T5727] usb 1-1: Product: syz [ 123.147028][ T5727] usb 1-1: Manufacturer: syz [ 123.147070][ T5727] usb 1-1: SerialNumber: syz [ 123.257263][ T990] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 123.277280][ T990] usb 3-1: device descriptor read/8, error -71 [ 123.387681][ T990] usb usb3-port1: unable to enumerate USB device [ 123.622665][ T6394] CIFS: Attempting to mount //127.0.0.1/share [ 123.635310][ T6394] CIFS: VFS: Error connecting to socket. Aborting operation. [ 123.635365][ T6394] CIFS: VFS: cifs_mount failed w/return code = -111 [ 123.738031][ T5727] rtl8150 1-1:1.0: couldn't reset the device [ 123.738838][ T5727] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 123.764339][ T5727] usb 1-1: USB disconnect, device number 11 [ 124.361814][ T6423] netlink: 'syz.3.232': attribute type 21 has an invalid length. [ 124.361843][ T6423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.232'. [ 124.361932][ T6423] netlink: 'syz.3.232': attribute type 4 has an invalid length. [ 124.361943][ T6423] netlink: 'syz.3.232': attribute type 3 has an invalid length. [ 124.361952][ T6423] netlink: 3 bytes leftover after parsing attributes in process `syz.3.232'. [ 124.526282][ T5727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 124.683853][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.683914][ T5727] usb 2-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 124.685038][ T5727] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.694355][ T5727] usb 2-1: string descriptor 0 read error: -22 [ 124.694714][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.139787][ T6442] FAULT_INJECTION: forcing a failure. [ 125.139787][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.139839][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 125.139864][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.139878][ T6442] Call Trace: [ 125.139887][ T6442] [ 125.139897][ T6442] dump_stack_lvl+0xe8/0x150 [ 125.139935][ T6442] should_fail_ex+0x3eb/0x540 [ 125.139974][ T6442] _copy_from_user+0x2d/0xb0 [ 125.140001][ T6442] ucma_get_event+0xd9/0x660 [ 125.140043][ T6442] ? __pfx_ucma_get_event+0x10/0x10 [ 125.140086][ T6442] ? __might_fault+0xaf/0x130 [ 125.140128][ T6442] ucma_write+0x249/0x2f0 [ 125.140164][ T6442] ? __pfx_ucma_write+0x10/0x10 [ 125.140195][ T6442] ? security_file_permission+0x75/0x260 [ 125.140228][ T6442] ? rw_verify_area+0x203/0x4c0 [ 125.140256][ T6442] ? __pfx_ucma_write+0x10/0x10 [ 125.140287][ T6442] vfs_write+0x296/0xba0 [ 125.140322][ T6442] ? __pfx_vfs_write+0x10/0x10 [ 125.140350][ T6442] ? __fget_files+0x2a/0x420 [ 125.140377][ T6442] ? __fget_files+0x3a2/0x420 [ 125.140400][ T6442] ? __fget_files+0x2a/0x420 [ 125.140428][ T6442] ? fdget+0x1ac/0x250 [ 125.140459][ T6442] ksys_write+0x150/0x270 [ 125.140489][ T6442] ? __pfx_ksys_write+0x10/0x10 [ 125.140527][ T6442] do_syscall_64+0x166/0x520 [ 125.140553][ T6442] ? trace_irq_disable+0x3b/0x140 [ 125.140580][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.140604][ T6442] ? clear_bhb_loop+0x70/0xc0 [ 125.140631][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.140653][ T6442] RIP: 0033:0x7fdc37d9e159 [ 125.140674][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.140691][ T6442] RSP: 002b:00007fdc38c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.140717][ T6442] RAX: ffffffffffffffda RBX: 00007fdc38025fa0 RCX: 00007fdc37d9e159 [ 125.140734][ T6442] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 125.140748][ T6442] RBP: 00007fdc38c14090 R08: 0000000000000000 R09: 0000000000000000 [ 125.140762][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.140775][ T6442] R13: 00007fdc38026038 R14: 00007fdc38025fa0 R15: 00007ffffc4a4da8 [ 125.140809][ T6442] [ 125.442496][ T5727] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 125.443028][ T6448] jffs2: notice: (6448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.472507][ T6448] FAULT_INJECTION: forcing a failure. [ 125.472507][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 125.472536][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) [ 125.472557][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.472568][ T6448] Call Trace: [ 125.472576][ T6448] [ 125.472585][ T6448] dump_stack_lvl+0xe8/0x150 [ 125.472620][ T6448] should_fail_ex+0x3eb/0x540 [ 125.472646][ T6448] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 125.472668][ T6448] should_failslab+0xa8/0x100 [ 125.472700][ T6448] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 125.472719][ T6448] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 125.472743][ T6448] ? jffs2_alloc_inode+0x28/0x40 [ 125.472763][ T6448] ? jffs2_alloc_inode+0x28/0x40 [ 125.472791][ T6448] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 125.472815][ T6448] jffs2_alloc_inode+0x28/0x40 [ 125.472837][ T6448] alloc_inode+0x6a/0x1b0 [ 125.472862][ T6448] new_inode+0x1f/0x170 [ 125.472890][ T6448] jffs2_new_inode+0xdd/0xd20 [ 125.472918][ T6448] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 125.472949][ T6448] ? jffs2_mkdir+0x83/0xec0 [ 125.472976][ T6448] ? __pfx_jffs2_new_inode+0x10/0x10 [ 125.472997][ T6448] ? jffs2_mkdir+0x83/0xec0 [ 125.473019][ T6448] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 125.473050][ T6448] ? jffs2_mkdir+0x83/0xec0 [ 125.473083][ T6448] jffs2_mkdir+0x189/0xec0 [ 125.473111][ T6448] ? generic_permission+0x2ba/0x660 [ 125.473135][ T6448] ? __pfx_jffs2_mkdir+0x10/0x10 [ 125.473163][ T6448] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 125.473188][ T6448] ? security_inode_mkdir+0xc3/0x340 [ 125.473219][ T6448] vfs_mkdir+0x40e/0x630 [ 125.473258][ T6448] filename_mkdirat+0x285/0x510 [ 125.473287][ T6448] ? __might_fault+0xaf/0x130 [ 125.473326][ T6448] ? __pfx_filename_mkdirat+0x10/0x10 [ 125.473362][ T6448] ? do_getname+0x151/0x250 [ 125.473398][ T6448] __se_sys_mkdirat+0x35/0x150 [ 125.473445][ T6448] do_syscall_64+0x166/0x520 [ 125.473474][ T6448] ? trace_irq_disable+0x3b/0x140 [ 125.473499][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.473522][ T6448] ? clear_bhb_loop+0x70/0xc0 [ 125.473550][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.473572][ T6448] RIP: 0033:0x7fa48079e159 [ 125.473593][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.473612][ T6448] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 125.473640][ T6448] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 125.473657][ T6448] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 125.473673][ T6448] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 125.473688][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.473702][ T6448] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 125.473738][ T6448] [ 125.989275][ T5727] usb 2-1: USB disconnect, device number 19 [ 126.019142][ T5713] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.187796][ T5713] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 126.191289][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.191319][ T5713] usb 1-1: Product: syz [ 126.191334][ T5713] usb 1-1: Manufacturer: syz [ 126.191354][ T5713] usb 1-1: SerialNumber: syz [ 126.356506][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.527315][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.527418][ T10] usb 3-1: New USB device found: idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 126.528804][ T10] usb 3-1: config 3 has an invalid interface number: 249 but max is 0 [ 126.528831][ T10] usb 3-1: config 3 has no interface number 0 [ 126.528863][ T10] usb 3-1: config 3 interface 249 has no altsetting 0 [ 126.533362][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.533418][ T10] usb 3-1: Product: syz [ 126.533435][ T10] usb 3-1: Manufacturer: syz [ 126.533452][ T10] usb 3-1: SerialNumber: syz [ 126.610868][ T6448] CIFS: Attempting to mount //127.0.0.1/share [ 126.622971][ T6448] CIFS: VFS: Error connecting to socket. Aborting operation. [ 126.623058][ T6448] CIFS: VFS: cifs_mount failed w/return code = -111 [ 126.691849][ T5713] rtl8150 1-1:1.0: couldn't reset the device [ 126.692280][ T5713] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 126.717321][ T5713] usb 1-1: USB disconnect, device number 12 [ 126.820954][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 126.821707][ T10] gspca_sn9c2028: read1 error -71 [ 126.822208][ T10] gspca_sn9c2028: read1 error -71 [ 126.822589][ T10] gspca_sn9c2028: read1 error -71 [ 126.822665][ T10] sn9c2028 3-1:3.249: probe with driver sn9c2028 failed with error -71 [ 126.825954][ T10] usb 3-1: USB disconnect, device number 14 [ 127.105328][ T6481] mmap: syz.3.253 (6481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.254029][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 127.254068][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 127.356243][ T5727] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 127.390533][ T6489] netlink: 108 bytes leftover after parsing attributes in process `syz.0.256'. [ 127.512002][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.512076][ T5727] usb 2-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 127.513405][ T5727] usb 2-1: config 4 has an invalid interface number: 118 but max is 1 [ 127.513429][ T5727] usb 2-1: config 4 has an invalid interface number: 104 but max is 1 [ 127.513448][ T5727] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 127.513466][ T5727] usb 2-1: config 4 has no interface number 0 [ 127.513482][ T5727] usb 2-1: config 4 has no interface number 1 [ 127.513518][ T5727] usb 2-1: too many endpoints for config 4 interface 104 altsetting 0: 32, using maximum allowed: 30 [ 127.513553][ T5727] usb 2-1: config 4 interface 104 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 127.513575][ T5727] usb 2-1: config 4 interface 118 has no altsetting 0 [ 127.539233][ T5727] usb 2-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 127.539321][ T5727] usb 2-1: Manufacturer: syz [ 127.539364][ T5727] usb 2-1: SerialNumber: syz [ 127.622619][ T5713] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 127.786286][ T5713] usb 4-1: Invalid ep0 maxpacket: 32 [ 127.804003][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.805953][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.855262][ T5727] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 127.926791][ T5713] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 127.959687][ T5727] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 127.959781][ T5727] dib0700: firmware download failed at 7 with -22 [ 127.987632][ T6505] jffs2: notice: (6505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.990932][ T5727] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 127.993290][ T5727] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 127.993339][ T5727] dib0700: firmware download failed at 7 with -22 [ 127.995361][ T6505] FAULT_INJECTION: forcing a failure. [ 127.995361][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 127.995392][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 127.995417][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.995431][ T6505] Call Trace: [ 127.995440][ T6505] [ 127.995450][ T6505] dump_stack_lvl+0xe8/0x150 [ 127.995485][ T6505] should_fail_ex+0x3eb/0x540 [ 127.995513][ T6505] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 127.995536][ T6505] should_failslab+0xa8/0x100 [ 127.995569][ T6505] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 127.995588][ T6505] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 127.995612][ T6505] ? jffs2_alloc_inode+0x28/0x40 [ 127.995632][ T6505] ? jffs2_alloc_inode+0x28/0x40 [ 127.995656][ T6505] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 127.995678][ T6505] jffs2_alloc_inode+0x28/0x40 [ 127.995699][ T6505] alloc_inode+0x6a/0x1b0 [ 127.995723][ T6505] new_inode+0x1f/0x170 [ 127.995752][ T6505] jffs2_new_inode+0xdd/0xd20 [ 127.995781][ T6505] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 127.995813][ T6505] ? jffs2_mkdir+0x83/0xec0 [ 127.995840][ T6505] ? __pfx_jffs2_new_inode+0x10/0x10 [ 127.995859][ T6505] ? jffs2_mkdir+0x83/0xec0 [ 127.995881][ T6505] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 127.995912][ T6505] ? jffs2_mkdir+0x83/0xec0 [ 127.995944][ T6505] jffs2_mkdir+0x189/0xec0 [ 127.995973][ T6505] ? generic_permission+0x2ba/0x660 [ 127.995999][ T6505] ? __pfx_jffs2_mkdir+0x10/0x10 [ 127.996029][ T6505] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 127.996053][ T6505] ? security_inode_mkdir+0xc3/0x340 [ 127.996082][ T6505] vfs_mkdir+0x40e/0x630 [ 127.996124][ T6505] filename_mkdirat+0x285/0x510 [ 127.996154][ T6505] ? __might_fault+0xaf/0x130 [ 127.996194][ T6505] ? __pfx_filename_mkdirat+0x10/0x10 [ 127.996237][ T6505] ? do_getname+0x151/0x250 [ 127.996274][ T6505] __se_sys_mkdirat+0x35/0x150 [ 127.996307][ T6505] do_syscall_64+0x166/0x520 [ 127.996334][ T6505] ? trace_irq_disable+0x3b/0x140 [ 127.996362][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.996385][ T6505] ? clear_bhb_loop+0x70/0xc0 [ 127.996414][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.996437][ T6505] RIP: 0033:0x7fa48079e159 [ 127.996458][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.996478][ T6505] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.996503][ T6505] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 127.996519][ T6505] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 127.996535][ T6505] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 127.996550][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.996563][ T6505] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 127.996600][ T6505] [ 128.164204][ T5727] usb 2-1: USB disconnect, device number 20 [ 128.187954][ T5713] usb 4-1: Invalid ep0 maxpacket: 32 [ 128.188305][ T5713] usb usb4-port1: attempt power cycle [ 128.302223][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.541486][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 128.560242][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.576242][ T5713] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 128.607051][ T5713] usb 4-1: Invalid ep0 maxpacket: 32 [ 128.613505][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.613551][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.613812][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.651397][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.736399][ T5713] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 128.737119][ T10] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 128.740706][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.740745][ T10] usb 1-1: Product: syz [ 128.740762][ T10] usb 1-1: Manufacturer: syz [ 128.740778][ T10] usb 1-1: SerialNumber: syz [ 128.792139][ T5713] usb 4-1: Invalid ep0 maxpacket: 32 [ 128.792412][ T5713] usb usb4-port1: unable to enumerate USB device [ 129.159569][ T6505] CIFS: Attempting to mount //127.0.0.1/share [ 129.161676][ T6505] CIFS: VFS: Error connecting to socket. Aborting operation. [ 129.161740][ T6505] CIFS: VFS: cifs_mount failed w/return code = -111 [ 129.251110][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 129.251440][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 129.277240][ T10] usb 1-1: USB disconnect, device number 13 [ 129.715547][ T6547] netlink: 830 bytes leftover after parsing attributes in process `syz.2.279'. [ 129.996286][ T990] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 130.086248][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 130.134785][ T6561] netlink: 168 bytes leftover after parsing attributes in process `syz.0.284'. [ 130.166346][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 130.167103][ T990] usb 2-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 130.168507][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.171545][ T990] usb 2-1: config 0 descriptor?? [ 130.175561][ T990] gspca_main: sunplus-2.14.0 probing 041e:400b [ 130.238092][ T9] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 130.239385][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.241398][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.241427][ T9] usb 3-1: Product: syz [ 130.241443][ T9] usb 3-1: Manufacturer: syz [ 130.301041][ T9] usb 3-1: selecting invalid altsetting 1 [ 130.301202][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 130.301215][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 130.461838][ T9] DVB: Unable to find symbol cx22700_attach() [ 130.542430][ T9] DVB: Unable to find symbol tda10046_attach() [ 130.542458][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 130.787643][ T6576] netlink: 'syz.0.288': attribute type 15 has an invalid length. [ 130.977006][ T6582] jffs2: notice: (6582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.001520][ T6582] FAULT_INJECTION: forcing a failure. [ 131.001520][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 131.001615][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 131.001682][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.001729][ T6582] Call Trace: [ 131.001759][ T6582] [ 131.001790][ T6582] dump_stack_lvl+0xe8/0x150 [ 131.001886][ T6582] should_fail_ex+0x3eb/0x540 [ 131.001958][ T6582] should_failslab+0xa8/0x100 [ 131.002044][ T6582] ? jffs2_mkdir+0x83/0xec0 [ 131.002104][ T6582] kmem_cache_alloc_noprof+0x9c/0x600 [ 131.002170][ T6582] ? jffs2_mkdir+0x83/0xec0 [ 131.002255][ T6582] jffs2_mkdir+0x83/0xec0 [ 131.002321][ T6582] ? make_vfsuid+0x49/0xa0 [ 131.002418][ T6582] ? generic_permission+0x2ba/0x660 [ 131.002486][ T6582] ? __pfx_jffs2_mkdir+0x10/0x10 [ 131.002569][ T6582] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 131.002625][ T6582] ? security_inode_mkdir+0xc3/0x340 [ 131.002673][ T6582] vfs_mkdir+0x40e/0x630 [ 131.002711][ T6582] filename_mkdirat+0x285/0x510 [ 131.002740][ T6582] ? __might_fault+0xaf/0x130 [ 131.002778][ T6582] ? __pfx_filename_mkdirat+0x10/0x10 [ 131.002811][ T6582] ? do_getname+0x151/0x250 [ 131.002848][ T6582] __se_sys_mkdirat+0x35/0x150 [ 131.002884][ T6582] do_syscall_64+0x166/0x520 [ 131.002913][ T6582] ? trace_irq_disable+0x3b/0x140 [ 131.002942][ T6582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.002966][ T6582] ? clear_bhb_loop+0x70/0xc0 [ 131.002996][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.003020][ T6582] RIP: 0033:0x7fa48079e159 [ 131.003040][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.003055][ T6582] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 131.003078][ T6582] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 131.003095][ T6582] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 131.003112][ T6582] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 131.003126][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.003138][ T6582] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 131.003171][ T6582] [ 131.296370][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.460676][ T9] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 131.465624][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.465654][ T9] usb 1-1: Product: syz [ 131.465671][ T9] usb 1-1: Manufacturer: syz [ 131.465688][ T9] usb 1-1: SerialNumber: syz [ 131.967972][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 131.968400][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 131.979540][ T9] usb 1-1: USB disconnect, device number 14 [ 132.123413][ T990] gspca_sunplus: reg_w_riv err -71 [ 132.123534][ T990] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 132.125880][ T990] usb 2-1: USB disconnect, device number 21 [ 132.726684][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.831939][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832025][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849563][ T10] usb 3-1: USB disconnect, device number 16 [ 132.887180][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 132.895357][ T9] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 132.907709][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.907748][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.907769][ T9] usb 1-1: config 0 has no interface number 0 [ 132.907815][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 132.907838][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 132.918688][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.918776][ T9] usb 1-1: Product: syz [ 132.918820][ T9] usb 1-1: Manufacturer: syz [ 132.918873][ T9] usb 1-1: SerialNumber: syz [ 132.936713][ T5713] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 132.999707][ T9] usb 1-1: config 0 descriptor?? [ 133.089278][ T5713] usb 2-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 133.112468][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.112501][ T5713] usb 2-1: Product: syz [ 133.112518][ T5713] usb 2-1: Manufacturer: syz [ 133.112534][ T5713] usb 2-1: SerialNumber: syz [ 133.148128][ T5713] usb 2-1: NFC: intf ffff88801c334000 id ffffffff8fc79b40 [ 133.254030][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 133.254067][ T9] cx231xx 1-1:0.1: Not found matching IAD interface [ 133.274071][ T9] usb 1-1: USB disconnect, device number 15 [ 133.321979][ T4928] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 133.348273][ T5713] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 133.446303][ T5682] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.596774][ T5682] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.597730][ T5682] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.597754][ T5682] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 26232, setting to 64 [ 133.597775][ T5682] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.599804][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.599823][ T5682] usb 4-1: Product: syz [ 133.599834][ T5682] usb 4-1: Manufacturer: syz [ 133.599845][ T5682] usb 4-1: SerialNumber: syz [ 133.604978][ T5682] usb 4-1: config 0 descriptor?? [ 133.645685][ T5682] usb 4-1: selecting invalid altsetting 0 [ 133.708042][ T6622] __nla_validate_parse: 1 callbacks suppressed [ 133.708059][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 133.712265][ T33] kauditd_printk_skb: 37 callbacks suppressed [ 133.712285][ T33] audit: type=1326 audit(1790946953.364:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.300" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb85b9e159 code=0x0 [ 133.811446][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.817257][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.834814][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.848757][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.857648][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.874936][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.875759][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.876081][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.904497][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.919145][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.153256][ T6630] jffs2: notice: (6630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.173616][ T6630] FAULT_INJECTION: forcing a failure. [ 134.173616][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 134.173650][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 134.173685][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.173699][ T6630] Call Trace: [ 134.173708][ T6630] [ 134.173718][ T6630] dump_stack_lvl+0xe8/0x150 [ 134.173754][ T6630] should_fail_ex+0x3eb/0x540 [ 134.173783][ T6630] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 134.173807][ T6630] should_failslab+0xa8/0x100 [ 134.173842][ T6630] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 134.173863][ T6630] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 134.173891][ T6630] ? jffs2_alloc_inode+0x28/0x40 [ 134.173913][ T6630] ? jffs2_alloc_inode+0x28/0x40 [ 134.173942][ T6630] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 134.173965][ T6630] jffs2_alloc_inode+0x28/0x40 [ 134.173988][ T6630] alloc_inode+0x6a/0x1b0 [ 134.174014][ T6630] new_inode+0x1f/0x170 [ 134.174042][ T6630] jffs2_new_inode+0xdd/0xd20 [ 134.174071][ T6630] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 134.174106][ T6630] ? jffs2_mkdir+0x83/0xec0 [ 134.174133][ T6630] ? __pfx_jffs2_new_inode+0x10/0x10 [ 134.174153][ T6630] ? jffs2_mkdir+0x83/0xec0 [ 134.174184][ T6630] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 134.174218][ T6630] ? jffs2_mkdir+0x83/0xec0 [ 134.174252][ T6630] jffs2_mkdir+0x189/0xec0 [ 134.174283][ T6630] ? generic_permission+0x2ba/0x660 [ 134.174309][ T6630] ? __pfx_jffs2_mkdir+0x10/0x10 [ 134.174339][ T6630] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 134.174365][ T6630] ? security_inode_mkdir+0xc3/0x340 [ 134.174396][ T6630] vfs_mkdir+0x40e/0x630 [ 134.174436][ T6630] filename_mkdirat+0x285/0x510 [ 134.174466][ T6630] ? __might_fault+0xaf/0x130 [ 134.174528][ T6630] ? __pfx_filename_mkdirat+0x10/0x10 [ 134.174647][ T6630] ? do_getname+0x151/0x250 [ 134.174739][ T6630] __se_sys_mkdirat+0x35/0x150 [ 134.174820][ T6630] do_syscall_64+0x166/0x520 [ 134.174894][ T6630] ? trace_irq_disable+0x3b/0x140 [ 134.174961][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.175024][ T6630] ? clear_bhb_loop+0x70/0xc0 [ 134.175098][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.175162][ T6630] RIP: 0033:0x7fa48079e159 [ 134.175236][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.175283][ T6630] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 134.175348][ T6630] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 134.175392][ T6630] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 134.175443][ T6630] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 134.175477][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.175510][ T6630] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 134.175598][ T6630] [ 134.469147][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.616862][ T9] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 134.620299][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.620320][ T9] usb 1-1: Product: syz [ 134.620332][ T9] usb 1-1: Manufacturer: syz [ 134.620343][ T9] usb 1-1: SerialNumber: syz [ 134.809173][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 134.886043][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 134.893750][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 134.916544][ T9] usb 1-1: USB disconnect, device number 16 [ 135.116319][ T5727] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 135.266257][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 135.267172][ T5727] usb 3-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 135.268454][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.270673][ T5727] usb 3-1: config 0 descriptor?? [ 135.275807][ T5727] gspca_main: sunplus-2.14.0 probing 041e:400b [ 135.704343][ T9] usb 2-1: USB disconnect, device number 22 [ 135.713383][ T9] usb 2-1: NFC: intf ffff88801c334000 [ 135.898717][ T4928] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 135.967627][ T6652] FAULT_INJECTION: forcing a failure. [ 135.967627][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.967662][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.1.315 Not tainted syzkaller #0 PREEMPT(full) [ 135.967694][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.967708][ T6652] Call Trace: [ 135.967717][ T6652] [ 135.967727][ T6652] dump_stack_lvl+0xe8/0x150 [ 135.967764][ T6652] should_fail_ex+0x3eb/0x540 [ 135.967793][ T6652] __kvm_read_guest_page+0x18d/0x240 [ 135.967835][ T6652] kvm_fetch_guest_virt+0x10c/0x160 [ 135.967859][ T6652] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 135.967894][ T6652] __do_insn_fetch_bytes+0x53a/0x6c0 [ 135.967930][ T6652] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 135.967973][ T6652] x86_decode_insn+0x374/0x5af0 [ 135.968030][ T6652] ? is_bpf_text_address+0x292/0x2b0 [ 135.968065][ T6652] ? __pfx_x86_decode_insn+0x10/0x10 [ 135.968093][ T6652] ? kernel_text_address+0xa5/0xe0 [ 135.968120][ T6652] ? __kernel_text_address+0xd/0x30 [ 135.968151][ T6652] ? unwind_get_return_address+0x4d/0x90 [ 135.968185][ T6652] ? __asan_memset+0x22/0x50 [ 135.968209][ T6652] ? init_decode_cache+0xf3/0x160 [ 135.968238][ T6652] ? init_emulate_ctxt+0x4c4/0x640 [ 135.968264][ T6652] ? asm_fred_entry_from_kvm+0x50/0x60 [ 135.968295][ T6652] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 135.968324][ T6652] ? asm_fred_entry_from_kvm+0x58/0x60 [ 135.968360][ T6652] x86_emulate_instruction+0x323/0x1e70 [ 135.968400][ T6652] ? vt_handle_exit_irqoff+0x100/0xc60 [ 135.968426][ T6652] ? trace_rcu_utilization+0x4a/0x1f0 [ 135.968459][ T6652] ? __pfx_vt_handle_exit_irqoff+0x10/0x10 [ 135.968484][ T6652] ? rcu_note_context_switch+0x12a/0xe70 [ 135.968508][ T6652] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 135.968541][ T6652] ? __lock_acquire+0x747/0x2de0 [ 135.968581][ T6652] handle_ud+0x19e/0x590 [ 135.968606][ T6652] ? vmx_set_host_fs_gs+0x12e/0x3a0 [ 135.968639][ T6652] ? __pfx_handle_ud+0x10/0x10 [ 135.968665][ T6652] ? vmx_handle_exit+0xf26/0x1600 [ 135.968703][ T6652] ? handle_exception_nmi+0x303/0x1520 [ 135.968734][ T6652] vt_handle_exit+0x28/0x160 [ 135.968760][ T6652] vcpu_run+0x4e8f/0x7a70 [ 135.968827][ T6652] ? vcpu_run+0x35f8/0x7a70 [ 135.968898][ T6652] ? __pfx_vcpu_run+0x10/0x10 [ 135.968927][ T6652] ? complete_emulated_mmio+0x1f2/0x910 [ 135.968959][ T6652] ? __asan_memcpy+0x40/0x70 [ 135.968984][ T6652] ? complete_emulated_mmio+0x535/0x910 [ 135.969025][ T6652] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 135.969063][ T6652] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 135.969099][ T6652] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 135.969140][ T6652] kvm_vcpu_ioctl+0xa61/0xfd0 [ 135.969184][ T6652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.969239][ T6652] ? __fget_files+0x2a/0x420 [ 135.969267][ T6652] ? __fget_files+0x2a/0x420 [ 135.969292][ T6652] ? __fget_files+0x2a/0x420 [ 135.969321][ T6652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.969351][ T6652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.969386][ T6652] __se_sys_ioctl+0xfc/0x170 [ 135.969419][ T6652] do_syscall_64+0x166/0x520 [ 135.969445][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.969469][ T6652] ? clear_bhb_loop+0x70/0xc0 [ 135.969497][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.969520][ T6652] RIP: 0033:0x7ffb85b9e159 [ 135.969542][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.969561][ T6652] RSP: 002b:00007ffb86a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.969587][ T6652] RAX: ffffffffffffffda RBX: 00007ffb85e26090 RCX: 00007ffb85b9e159 [ 135.969604][ T6652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 135.969618][ T6652] RBP: 00007ffb86a38090 R08: 0000000000000000 R09: 0000000000000000 [ 135.969632][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.969647][ T6652] R13: 00007ffb85e26128 R14: 00007ffb85e26090 R15: 00007fff0d65fd88 [ 135.969683][ T6652] [ 136.382594][ T6611] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 136.396827][ T9] usb 4-1: USB disconnect, device number 15 [ 136.508270][ T6657] netlink: 64 bytes leftover after parsing attributes in process `syz.0.317'. [ 136.584605][ T6664] jffs2: notice: (6664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.614644][ T6664] FAULT_INJECTION: forcing a failure. [ 136.614644][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 136.614692][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(full) [ 136.614731][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.614750][ T6664] Call Trace: [ 136.614763][ T6664] [ 136.614778][ T6664] dump_stack_lvl+0xe8/0x150 [ 136.614824][ T6664] should_fail_ex+0x3eb/0x540 [ 136.614867][ T6664] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 136.614902][ T6664] should_failslab+0xa8/0x100 [ 136.614946][ T6664] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 136.614979][ T6664] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 136.615026][ T6664] ? jffs2_alloc_inode+0x28/0x40 [ 136.615056][ T6664] ? jffs2_alloc_inode+0x28/0x40 [ 136.615099][ T6664] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 136.615131][ T6664] jffs2_alloc_inode+0x28/0x40 [ 136.615164][ T6664] alloc_inode+0x6a/0x1b0 [ 136.615198][ T6664] new_inode+0x1f/0x170 [ 136.615238][ T6664] jffs2_new_inode+0xdd/0xd20 [ 136.615278][ T6664] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 136.615321][ T6664] ? jffs2_mkdir+0x83/0xec0 [ 136.615360][ T6664] ? __pfx_jffs2_new_inode+0x10/0x10 [ 136.615391][ T6664] ? jffs2_mkdir+0x83/0xec0 [ 136.615423][ T6664] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 136.615466][ T6664] ? jffs2_mkdir+0x83/0xec0 [ 136.615511][ T6664] jffs2_mkdir+0x189/0xec0 [ 136.615552][ T6664] ? generic_permission+0x2ba/0x660 [ 136.615589][ T6664] ? __pfx_jffs2_mkdir+0x10/0x10 [ 136.615629][ T6664] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 136.615663][ T6664] ? security_inode_mkdir+0xc3/0x340 [ 136.615705][ T6664] vfs_mkdir+0x40e/0x630 [ 136.615757][ T6664] filename_mkdirat+0x285/0x510 [ 136.615799][ T6664] ? __might_fault+0xaf/0x130 [ 136.615850][ T6664] ? __pfx_filename_mkdirat+0x10/0x10 [ 136.615899][ T6664] ? do_getname+0x151/0x250 [ 136.615950][ T6664] __se_sys_mkdirat+0x35/0x150 [ 136.616007][ T6664] do_syscall_64+0x166/0x520 [ 136.616045][ T6664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.616078][ T6664] ? clear_bhb_loop+0x70/0xc0 [ 136.616115][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.616139][ T6664] RIP: 0033:0x7fe69d79e159 [ 136.616168][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.616194][ T6664] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 136.616229][ T6664] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 136.616253][ T6664] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 136.616274][ T6664] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 136.616296][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.616316][ T6664] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 136.616362][ T6664] [ 136.922702][ T5727] gspca_sunplus: reg_w_riv err -71 [ 136.922796][ T5727] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 136.940785][ T5727] usb 3-1: USB disconnect, device number 17 [ 137.046298][ T5703] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.197056][ T5703] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 137.202409][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.202446][ T5703] usb 4-1: Product: syz [ 137.202477][ T5703] usb 4-1: Manufacturer: syz [ 137.202500][ T5703] usb 4-1: SerialNumber: syz [ 137.466325][ T5703] rtl8150 4-1:1.0: couldn't reset the device [ 137.466641][ T5703] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 137.503084][ T5703] usb 4-1: USB disconnect, device number 16 [ 137.767933][ T4928] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 137.927075][ T5713] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 137.999186][ T6687] netlink: '&e': attribute type 2 has an invalid length. [ 138.025134][ T6687] : entered promiscuous mode [ 138.077105][ T5713] usb 3-1: device descriptor read/64, error -71 [ 138.077205][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 138.226323][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 138.227213][ T9] usb 2-1: New USB device found: idVendor=056a, idProduct=0034, bcdDevice=0.00 [ 138.228339][ T9] usb 2-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.228388][ T9] usb 2-1: config 0 interface 0 altsetting 37 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.228406][ T9] usb 2-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.228425][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.228450][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.231474][ T9] usb 2-1: config 0 descriptor?? [ 138.306693][ T990] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 138.315659][ T9] usbhid 2-1:0.0: can't add hid device: -22 [ 138.315742][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 138.366250][ T5713] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 138.456259][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 138.457998][ T990] usb 4-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 138.459011][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.461418][ T990] usb 4-1: config 0 descriptor?? [ 138.465792][ T990] gspca_main: sunplus-2.14.0 probing 041e:400b [ 138.501463][ T5713] usb 3-1: device descriptor read/64, error -71 [ 138.606564][ T5713] usb usb3-port1: attempt power cycle [ 138.946236][ T5713] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 138.966935][ T5713] usb 3-1: device descriptor read/8, error -71 [ 139.206446][ T5713] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 139.230641][ T5713] usb 3-1: device descriptor read/8, error -71 [ 139.337416][ T5713] usb usb3-port1: unable to enumerate USB device [ 139.682022][ T6707] jffs2: notice: (6707) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.704715][ T6707] FAULT_INJECTION: forcing a failure. [ 139.704715][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 139.704783][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) [ 139.704811][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.704825][ T6707] Call Trace: [ 139.704834][ T6707] [ 139.704844][ T6707] dump_stack_lvl+0xe8/0x150 [ 139.704882][ T6707] should_fail_ex+0x3eb/0x540 [ 139.704909][ T6707] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 139.704955][ T6707] should_failslab+0xa8/0x100 [ 139.704988][ T6707] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 139.705009][ T6707] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 139.705040][ T6707] ? jffs2_alloc_inode+0x28/0x40 [ 139.705055][ T6707] ? jffs2_alloc_inode+0x28/0x40 [ 139.705075][ T6707] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 139.705106][ T6707] jffs2_alloc_inode+0x28/0x40 [ 139.705131][ T6707] alloc_inode+0x6a/0x1b0 [ 139.705154][ T6707] new_inode+0x1f/0x170 [ 139.705181][ T6707] jffs2_new_inode+0xdd/0xd20 [ 139.705210][ T6707] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 139.705232][ T6707] ? jffs2_mkdir+0x83/0xec0 [ 139.705269][ T6707] ? __pfx_jffs2_new_inode+0x10/0x10 [ 139.705290][ T6707] ? jffs2_mkdir+0x83/0xec0 [ 139.705311][ T6707] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 139.705356][ T6707] ? jffs2_mkdir+0x83/0xec0 [ 139.705379][ T6707] jffs2_mkdir+0x189/0xec0 [ 139.705400][ T6707] ? generic_permission+0x2ba/0x660 [ 139.705440][ T6707] ? __pfx_jffs2_mkdir+0x10/0x10 [ 139.705469][ T6707] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 139.705492][ T6707] ? security_inode_mkdir+0xc3/0x340 [ 139.705524][ T6707] vfs_mkdir+0x40e/0x630 [ 139.705553][ T6707] filename_mkdirat+0x285/0x510 [ 139.705595][ T6707] ? __might_fault+0xaf/0x130 [ 139.705634][ T6707] ? __pfx_filename_mkdirat+0x10/0x10 [ 139.705674][ T6707] ? do_getname+0x151/0x250 [ 139.705702][ T6707] __se_sys_mkdirat+0x35/0x150 [ 139.705743][ T6707] do_syscall_64+0x166/0x520 [ 139.705771][ T6707] ? trace_irq_disable+0x3b/0x140 [ 139.705797][ T6707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705827][ T6707] ? clear_bhb_loop+0x70/0xc0 [ 139.705850][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705867][ T6707] RIP: 0033:0x7fa48079e159 [ 139.705898][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.705917][ T6707] RSP: 002b:00007fa481683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 139.705943][ T6707] RAX: ffffffffffffffda RBX: 00007fa480a25fa0 RCX: 00007fa48079e159 [ 139.705960][ T6707] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 139.705977][ T6707] RBP: 00007fa48083506b R08: 0000000000000000 R09: 0000000000000000 [ 139.705991][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.706005][ T6707] R13: 00007fa480a26038 R14: 00007fa480a25fa0 R15: 00007ffff80db378 [ 139.706046][ T6707] [ 140.007939][ T5703] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.078725][ T990] gspca_sunplus: reg_w_riv err -71 [ 140.078816][ T990] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 140.082386][ T990] usb 4-1: USB disconnect, device number 17 [ 140.157088][ T5703] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 140.160127][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.160158][ T5703] usb 1-1: Product: syz [ 140.160174][ T5703] usb 1-1: Manufacturer: syz [ 140.160191][ T5703] usb 1-1: SerialNumber: syz [ 140.409236][ T5703] rtl8150 1-1:1.0: couldn't reset the device [ 140.409463][ T5703] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 140.414060][ T5703] usb 1-1: USB disconnect, device number 17 [ 140.637748][ T6710] FAULT_INJECTION: forcing a failure. [ 140.637748][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 140.637781][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT(full) [ 140.637822][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.637833][ T6710] Call Trace: [ 140.637839][ T6710] [ 140.637846][ T6710] dump_stack_lvl+0xe8/0x150 [ 140.637876][ T6710] should_fail_ex+0x3eb/0x540 [ 140.637896][ T6710] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 140.637921][ T6710] should_failslab+0xa8/0x100 [ 140.637945][ T6710] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 140.637967][ T6710] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 140.637991][ T6710] ? shmem_alloc_inode+0x28/0x40 [ 140.638013][ T6710] ? shmem_alloc_inode+0x28/0x40 [ 140.638039][ T6710] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 140.638061][ T6710] shmem_alloc_inode+0x28/0x40 [ 140.638084][ T6710] alloc_inode+0x6a/0x1b0 [ 140.638100][ T6710] new_inode+0x1f/0x170 [ 140.638116][ T6710] ? shmem_get_inode+0x29a/0x1030 [ 140.638140][ T6710] shmem_get_inode+0x3a4/0x1030 [ 140.638169][ T6710] ? __pfx_shmem_get_inode+0x10/0x10 [ 140.638195][ T6710] ? mas_preallocate+0x55e/0x840 [ 140.638215][ T6710] __shmem_file_setup+0x20b/0x370 [ 140.638236][ T6710] ? __pfx___shmem_file_setup+0x10/0x10 [ 140.638259][ T6710] ? vma_set_pgoff+0x163/0x290 [ 140.638283][ T6710] shmem_zero_setup+0x90/0x130 [ 140.638307][ T6710] mmap_region+0x1f86/0x2c60 [ 140.638339][ T6710] ? __lock_acquire+0x747/0x2de0 [ 140.638360][ T6710] ? __lock_acquire+0x747/0x2de0 [ 140.638378][ T6710] ? __pfx_mmap_region+0x10/0x10 [ 140.638404][ T6710] ? pick_task_fair+0x1112/0x15a0 [ 140.638432][ T6710] ? lock_acquire+0x115/0x350 [ 140.638501][ T6710] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 140.638552][ T6710] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 140.638574][ T6710] ? cap_mmap_addr+0xb1/0xf0 [ 140.638598][ T6710] ? bpf_lsm_mmap_addr+0x9/0x50 [ 140.638619][ T6710] ? security_mmap_addr+0x71/0x240 [ 140.638648][ T6710] do_mmap+0xe0a/0x1300 [ 140.638679][ T6710] ? __pfx_do_mmap+0x10/0x10 [ 140.638711][ T6710] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 140.638728][ T6710] ? down_write_killable+0x179/0x230 [ 140.638753][ T6710] ? __pfx_down_write_killable+0x10/0x10 [ 140.638776][ T6710] ? apparmor_mmap_file+0x1cc/0x390 [ 140.638798][ T6710] ? security_mmap_file+0x4df/0xa20 [ 140.638831][ T6710] vm_mmap_pgoff+0x272/0x4e0 [ 140.638854][ T6710] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.638871][ T6710] ? ksys_write+0xf8/0x270 [ 140.638890][ T6710] ? __pfx___se_sys_futex+0x10/0x10 [ 140.638916][ T6710] ? __pfx_ksys_write+0x10/0x10 [ 140.638938][ T6710] ? ksys_mmap_pgoff+0xf3/0x760 [ 140.638962][ T6710] ? __x64_sys_mmap+0x7f/0x140 [ 140.638989][ T6710] do_syscall_64+0x166/0x520 [ 140.639007][ T6710] ? trace_irq_disable+0x3b/0x140 [ 140.639026][ T6710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.639043][ T6710] ? clear_bhb_loop+0x70/0xc0 [ 140.639063][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.639079][ T6710] RIP: 0033:0x7fe69d79e159 [ 140.639095][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.639109][ T6710] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.639127][ T6710] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 140.639140][ T6710] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 140.639150][ T6710] RBP: 00007fe69d83506b R08: ffffffffffffffff R09: 0000000000002000 [ 140.639162][ T6710] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 140.639172][ T6710] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 140.639226][ T6710] [ 141.077994][ T6712] netlink: 64 bytes leftover after parsing attributes in process `syz.3.338'. [ 141.102543][ T5727] usb 2-1: USB disconnect, device number 23 [ 141.185584][ T4928] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 141.586299][ T5727] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 141.626284][ T5755] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 141.696360][ T5703] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 141.738010][ T5727] usb 2-1: New USB device found: idVendor=05ac, idProduct=027d, bcdDevice=0.00 [ 141.739338][ T5727] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 141.739385][ T5727] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 141.739431][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.744324][ T5727] usb 2-1: config 0 descriptor?? [ 141.797804][ T5755] usb 1-1: Using ep0 maxpacket: 32 [ 141.801377][ T5755] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 141.802737][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.840178][ T6738] jffs2: notice: (6738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.842633][ T5755] usb 1-1: config 0 descriptor?? [ 141.856813][ T5703] usb 3-1: device descriptor read/64, error -71 [ 141.877140][ T6738] FAULT_INJECTION: forcing a failure. [ 141.877140][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 141.877172][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 141.877199][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.877215][ T6738] Call Trace: [ 141.877224][ T6738] [ 141.877235][ T6738] dump_stack_lvl+0xe8/0x150 [ 141.877271][ T6738] should_fail_ex+0x3eb/0x540 [ 141.877301][ T6738] should_failslab+0xa8/0x100 [ 141.877334][ T6738] ? jffs2_mkdir+0x83/0xec0 [ 141.877360][ T6738] kmem_cache_alloc_noprof+0x9c/0x600 [ 141.877387][ T6738] ? jffs2_mkdir+0x83/0xec0 [ 141.877418][ T6738] jffs2_mkdir+0x83/0xec0 [ 141.877446][ T6738] ? make_vfsuid+0x49/0xa0 [ 141.877479][ T6738] ? generic_permission+0x2ba/0x660 [ 141.877505][ T6738] ? __pfx_jffs2_mkdir+0x10/0x10 [ 141.877535][ T6738] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 141.877561][ T6738] ? security_inode_mkdir+0xc3/0x340 [ 141.877594][ T6738] vfs_mkdir+0x40e/0x630 [ 141.877631][ T6738] filename_mkdirat+0x285/0x510 [ 141.877662][ T6738] ? __might_fault+0xaf/0x130 [ 141.877702][ T6738] ? __pfx_filename_mkdirat+0x10/0x10 [ 141.877737][ T6738] ? do_getname+0x151/0x250 [ 141.877776][ T6738] __se_sys_mkdirat+0x35/0x150 [ 141.877812][ T6738] do_syscall_64+0x166/0x520 [ 141.877840][ T6738] ? trace_irq_disable+0x3b/0x140 [ 141.877873][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.877897][ T6738] ? clear_bhb_loop+0x70/0xc0 [ 141.877931][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.877955][ T6738] RIP: 0033:0x7fe69d79e159 [ 141.877978][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.877998][ T6738] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 141.878025][ T6738] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 141.878043][ T6738] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 141.878059][ T6738] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 141.878084][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.878098][ T6738] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 141.878136][ T6738] [ 141.884228][ T5755] gspca_main: sunplus-2.14.0 probing 041e:400b [ 142.108777][ T5703] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 142.207377][ T5727] hid_parser_main: 5 callbacks suppressed [ 142.207397][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207439][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207459][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207478][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207496][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207515][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207540][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207576][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207596][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.207615][ T5727] apple 0003:05AC:027D.0006: unknown main item tag 0x0 [ 142.211922][ T5727] apple 0003:05AC:027D.0006: hidraw0: USB HID v0.05 Device [HID 05ac:027d] on usb-dummy_hcd.1-1/input0 [ 142.236958][ T5703] usb 3-1: device descriptor read/64, error -71 [ 142.349677][ T5703] usb usb3-port1: attempt power cycle [ 142.414536][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.415095][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.468054][ T6728] comedi comedi1: board detection failed [ 142.472187][ T5727] usb 2-1: USB disconnect, device number 24 [ 142.696335][ T5703] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 142.717747][ T5703] usb 3-1: device descriptor read/8, error -71 [ 142.956315][ T5703] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 142.978165][ T5703] usb 3-1: device descriptor read/8, error -71 [ 143.045652][ T6757] syz.3.357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 143.058510][ T6757] FAULT_INJECTION: forcing a failure. [ 143.058510][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 143.058547][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.3.357 Not tainted syzkaller #0 PREEMPT(full) [ 143.058574][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.058589][ T6757] Call Trace: [ 143.058599][ T6757] [ 143.058609][ T6757] dump_stack_lvl+0xe8/0x150 [ 143.058645][ T6757] should_fail_ex+0x3eb/0x540 [ 143.058677][ T6757] should_failslab+0xa8/0x100 [ 143.058746][ T6757] __kvmalloc_node_noprof+0x171/0x820 [ 143.058778][ T6757] ? rcu_is_watching+0x16/0xb0 [ 143.058811][ T6757] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 143.058840][ T6757] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 143.058877][ T6757] pipapo_realloc_scratch+0xf5/0x2a0 [ 143.058912][ T6757] pipapo_maybe_clone+0x345/0xd80 [ 143.058952][ T6757] ? nft_trans_alloc+0x22/0x2a0 [ 143.058987][ T6757] ? nf_tables_newsetelem+0x298a/0x4200 [ 143.059023][ T6757] ? netlink_unicast+0x7bd/0x940 [ 143.059052][ T6757] ? ___sys_sendmsg+0x2a5/0x360 [ 143.059078][ T6757] ? do_syscall_64+0x166/0x520 [ 143.059105][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.059139][ T6757] nft_pipapo_insert+0x166/0x18a0 [ 143.059190][ T6757] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 143.059219][ T6757] ? rcu_is_watching+0x16/0xb0 [ 143.059251][ T6757] ? trace_kmalloc+0x2a/0xf0 [ 143.059279][ T6757] ? __kmalloc_noprof+0x387/0x710 [ 143.059304][ T6757] ? __kmalloc_noprof+0x1a6/0x710 [ 143.059331][ T6757] ? nft_trans_alloc+0x22/0x2a0 [ 143.059356][ T6757] ? nft_trans_alloc+0x22/0x2a0 [ 143.059385][ T6757] ? nft_setelem_insert+0x42/0x570 [ 143.059423][ T6757] ? nft_trans_alloc+0x40/0x2a0 [ 143.059454][ T6757] nf_tables_newsetelem+0x2aa4/0x4200 [ 143.059525][ T6757] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 143.059554][ T6757] ? lock_acquire+0x115/0x350 [ 143.059590][ T6757] ? nla_validate_array+0xfc/0x260 [ 143.059653][ T6757] ? __pfx___nla_validate_parse+0x10/0x10 [ 143.059690][ T6757] ? __pfx_nf_tables_newset+0x10/0x10 [ 143.059715][ T6757] ? nft_pernet+0x23/0x240 [ 143.059782][ T6757] ? lock_acquire+0x115/0x350 [ 143.059819][ T6757] ? nfnl_pernet+0x23/0x240 [ 143.059857][ T6757] ? __nla_parse+0x40/0x60 [ 143.059890][ T6757] nfnetlink_rcv+0x1288/0x28c0 [ 143.059956][ T6757] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.060037][ T6757] ? skb_clone+0x246/0x3a0 [ 143.060080][ T6757] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.060112][ T6757] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.060149][ T6757] netlink_unicast+0x7bd/0x940 [ 143.060189][ T6757] netlink_sendmsg+0x7c3/0xae0 [ 143.060228][ T6757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.060267][ T6757] ? apparmor_socket_sendmsg+0x98/0x360 [ 143.060303][ T6757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.060333][ T6757] sock_sendmsg_nosec+0x13a/0x180 [ 143.060369][ T6757] ____sys_sendmsg+0x54e/0x850 [ 143.060401][ T6757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.060438][ T6757] ? import_iovec+0x73/0xa0 [ 143.060476][ T6757] ___sys_sendmsg+0x2a5/0x360 [ 143.060501][ T6757] ? __lock_acquire+0x747/0x2de0 [ 143.060539][ T6757] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.060571][ T6757] ? futex_wait+0x2a2/0x390 [ 143.060628][ T6757] ? __fget_files+0x3a2/0x420 [ 143.060653][ T6757] ? __fget_files+0x2a/0x420 [ 143.060689][ T6757] __x64_sys_sendmsg+0x1b1/0x290 [ 143.060719][ T6757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.060775][ T6757] do_syscall_64+0x166/0x520 [ 143.060808][ T6757] ? trace_irq_disable+0x3b/0x140 [ 143.060836][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.060860][ T6757] ? clear_bhb_loop+0x70/0xc0 [ 143.060889][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.060912][ T6757] RIP: 0033:0x7fe69d79e159 [ 143.060937][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.060958][ T6757] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.060984][ T6757] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 143.061009][ T6757] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 143.061025][ T6757] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 143.061040][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.061054][ T6757] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 143.061090][ T6757] [ 143.089656][ T5703] usb usb3-port1: unable to enumerate USB device [ 143.436337][ T6759] jffs2: notice: (6759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.495345][ T6759] FAULT_INJECTION: forcing a failure. [ 143.495345][ T6759] name fail_futex, interval 1, probability 0, space 0, times 1 [ 143.495494][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.1.358 Not tainted syzkaller #0 PREEMPT(full) [ 143.495561][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.495613][ T6759] Call Trace: [ 143.495642][ T6759] [ 143.495665][ T6759] dump_stack_lvl+0xe8/0x150 [ 143.495762][ T6759] should_fail_ex+0x3eb/0x540 [ 143.495838][ T6759] get_futex_key+0x1b4/0x1580 [ 143.495913][ T6759] ? arch_stack_walk+0xfb/0x150 [ 143.496006][ T6759] ? __pfx_get_futex_key+0x10/0x10 [ 143.496073][ T6759] ? stack_trace_save+0xa9/0x100 [ 143.496133][ T6759] ? __pfx_stack_trace_save+0x10/0x10 [ 143.496220][ T6759] futex_wake+0x119/0x5f0 [ 143.496283][ T6759] ? kasan_save_track+0x4f/0x80 [ 143.496349][ T6759] ? kasan_save_track+0x3e/0x80 [ 143.496431][ T6759] ? kmem_cache_free+0x182/0x650 [ 143.496503][ T6759] ? __se_sys_mkdirat+0xc9/0x150 [ 143.496604][ T6759] ? __pfx_futex_wake+0x10/0x10 [ 143.496710][ T6759] do_futex+0x458/0x4e0 [ 143.496799][ T6759] ? __pfx_do_futex+0x10/0x10 [ 143.496908][ T6759] __se_sys_futex+0x3a8/0x450 [ 143.497013][ T6759] ? __pfx___se_sys_futex+0x10/0x10 [ 143.497104][ T6759] ? __se_sys_mkdirat+0xc9/0x150 [ 143.497179][ T6759] ? kmem_cache_free+0x182/0x650 [ 143.497263][ T6759] ? __x64_sys_futex+0x21/0xf0 [ 143.497358][ T6759] do_syscall_64+0x166/0x520 [ 143.497424][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.497487][ T6759] ? clear_bhb_loop+0x70/0xc0 [ 143.497561][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.497634][ T6759] RIP: 0033:0x7ffb85b9e159 [ 143.497690][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.497736][ T6759] RSP: 002b:00007ffb86a590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.497795][ T6759] RAX: ffffffffffffffda RBX: 00007ffb85e25fa8 RCX: 00007ffb85b9e159 [ 143.497847][ T6759] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb85e25fac [ 143.497888][ T6759] RBP: 00007ffb85e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 143.497939][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.497973][ T6759] R13: 00007ffb85e26038 R14: 00007fff0d65fca0 R15: 00007fff0d65fd88 [ 143.498067][ T6759] [ 143.590993][ T5755] gspca_sunplus: reg_w_riv err -71 [ 143.591223][ T5755] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 143.633556][ T5755] usb 1-1: USB disconnect, device number 18 [ 143.942847][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.950801][ T6771] netlink: 128 bytes leftover after parsing attributes in process `syz.3.362'. [ 143.958879][ T6771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.973284][ T6771] netlink: 'syz.3.362': attribute type 21 has an invalid length. [ 143.973350][ T6771] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.979047][ T6770] netlink: 'syz.3.362': attribute type 21 has an invalid length. [ 143.979311][ T6770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.979341][ T6770] IPv6: NLM_F_CREATE should be set when creating new route [ 143.979594][ T6770] IPv6: NLM_F_CREATE should be set when creating new route [ 143.979660][ T6770] IPv6: NLM_F_CREATE should be set when creating new route [ 143.983943][ T6771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.993093][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.607288][ T5713] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 144.757993][ T5713] usb 2-1: New USB device found: idVendor=056a, idProduct=0039, bcdDevice=0.00 [ 144.759446][ T5713] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.759482][ T5713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.759517][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.764511][ T5713] usb 2-1: config 0 descriptor?? [ 145.106764][ T5727] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 145.166596][ T5755] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.256266][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 145.257290][ T5727] usb 3-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 145.259053][ T5727] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 145.259083][ T5727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.259149][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.265811][ T5727] usb 3-1: config 0 descriptor?? [ 145.316962][ T5755] usb 4-1: Using ep0 maxpacket: 32 [ 145.321580][ T5755] usb 4-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 145.323854][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.338346][ T5727] pxrc 3-1:0.0: Could not find endpoint [ 145.358622][ T5755] usb 4-1: config 0 descriptor?? [ 145.379137][ T5755] gspca_main: sunplus-2.14.0 probing 041e:400b [ 145.479563][ T9] usb 3-1: USB disconnect, device number 26 [ 146.110728][ T6801] jffs2: notice: (6801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.136517][ T6801] FAULT_INJECTION: forcing a failure. [ 146.136517][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 146.136556][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.2.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.136588][ T6801] Tainted: [L]=SOFTLOCKUP [ 146.136596][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.136611][ T6801] Call Trace: [ 146.136621][ T6801] [ 146.136631][ T6801] dump_stack_lvl+0xe8/0x150 [ 146.136668][ T6801] should_fail_ex+0x3eb/0x540 [ 146.136697][ T6801] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 146.136722][ T6801] should_failslab+0xa8/0x100 [ 146.136758][ T6801] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 146.136780][ T6801] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 146.136809][ T6801] ? jffs2_alloc_inode+0x28/0x40 [ 146.136832][ T6801] ? jffs2_alloc_inode+0x28/0x40 [ 146.136871][ T6801] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 146.136895][ T6801] jffs2_alloc_inode+0x28/0x40 [ 146.136919][ T6801] alloc_inode+0x6a/0x1b0 [ 146.136945][ T6801] new_inode+0x1f/0x170 [ 146.136973][ T6801] jffs2_new_inode+0xdd/0xd20 [ 146.137002][ T6801] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 146.137035][ T6801] ? jffs2_mkdir+0x83/0xec0 [ 146.137063][ T6801] ? __pfx_jffs2_new_inode+0x10/0x10 [ 146.137083][ T6801] ? jffs2_mkdir+0x83/0xec0 [ 146.137107][ T6801] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 146.137139][ T6801] ? jffs2_mkdir+0x83/0xec0 [ 146.137170][ T6801] jffs2_mkdir+0x189/0xec0 [ 146.137201][ T6801] ? generic_permission+0x2ba/0x660 [ 146.137228][ T6801] ? __pfx_jffs2_mkdir+0x10/0x10 [ 146.137258][ T6801] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 146.137284][ T6801] ? security_inode_mkdir+0xc3/0x340 [ 146.137316][ T6801] vfs_mkdir+0x40e/0x630 [ 146.137354][ T6801] filename_mkdirat+0x285/0x510 [ 146.137386][ T6801] ? __might_fault+0xaf/0x130 [ 146.137426][ T6801] ? __pfx_filename_mkdirat+0x10/0x10 [ 146.137463][ T6801] ? do_getname+0x151/0x250 [ 146.137502][ T6801] __se_sys_mkdirat+0x35/0x150 [ 146.137538][ T6801] do_syscall_64+0x166/0x520 [ 146.137566][ T6801] ? trace_irq_disable+0x3b/0x140 [ 146.137593][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.137617][ T6801] ? clear_bhb_loop+0x70/0xc0 [ 146.137646][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.137671][ T6801] RIP: 0033:0x7fdc37d9e159 [ 146.137699][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.137721][ T6801] RSP: 002b:00007fdc38c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 146.137747][ T6801] RAX: ffffffffffffffda RBX: 00007fdc38025fa0 RCX: 00007fdc37d9e159 [ 146.137765][ T6801] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 146.137782][ T6801] RBP: 00007fdc37e3506b R08: 0000000000000000 R09: 0000000000000000 [ 146.137799][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.137814][ T6801] R13: 00007fdc38026038 R14: 00007fdc38025fa0 R15: 00007ffffc4a4da8 [ 146.137860][ T6801] [ 147.004985][ T5755] gspca_sunplus: reg_w_riv err -71 [ 147.005076][ T5755] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 147.016462][ T5755] usb 4-1: USB disconnect, device number 18 [ 147.116410][ T32] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 147.276278][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.276338][ T32] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 147.279490][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.279520][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.283464][ T32] usb 3-1: string descriptor 0 read error: -22 [ 147.283607][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.333883][ T32] usb 3-1: selecting invalid altsetting 1 [ 147.349381][ T32] usb 3-1: unit 3 not found! [ 147.406062][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 147.406759][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.426063][ T5713] usb 2-1: USB disconnect, device number 25 [ 147.511212][ T32] usb 3-1: unit 0 not found! [ 147.575476][ T6808] 9pnet_fd: p9_fd_create_unix (6808): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 147.737725][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.894587][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.932236][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.013903][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.042499][ T32] usb 3-1: USB disconnect, device number 27 [ 148.099959][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.136452][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.155358][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.189115][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.234556][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.260792][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.308344][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.353532][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.758735][ T6827] xt_nfacct: accounting object `' does not exist [ 148.797765][ T6828] jffs2: notice: (6828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.830003][ T6828] FAULT_INJECTION: forcing a failure. [ 148.830003][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 148.830042][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.3.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.830076][ T6828] Tainted: [L]=SOFTLOCKUP [ 148.830085][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.830099][ T6828] Call Trace: [ 148.830109][ T6828] [ 148.830124][ T6828] dump_stack_lvl+0xe8/0x150 [ 148.830161][ T6828] should_fail_ex+0x3eb/0x540 [ 148.830192][ T6828] should_failslab+0xa8/0x100 [ 148.830224][ T6828] ? jffs2_mkdir+0x83/0xec0 [ 148.830251][ T6828] kmem_cache_alloc_noprof+0x9c/0x600 [ 148.830278][ T6828] ? jffs2_mkdir+0x83/0xec0 [ 148.830316][ T6828] jffs2_mkdir+0x83/0xec0 [ 148.830354][ T6828] ? make_vfsuid+0x49/0xa0 [ 148.830396][ T6828] ? generic_permission+0x2ba/0x660 [ 148.830422][ T6828] ? __pfx_jffs2_mkdir+0x10/0x10 [ 148.830452][ T6828] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 148.830476][ T6828] ? security_inode_mkdir+0xc3/0x340 [ 148.830516][ T6828] vfs_mkdir+0x40e/0x630 [ 148.830556][ T6828] filename_mkdirat+0x285/0x510 [ 148.830587][ T6828] ? __might_fault+0xaf/0x130 [ 148.830626][ T6828] ? __pfx_filename_mkdirat+0x10/0x10 [ 148.830663][ T6828] ? do_getname+0x151/0x250 [ 148.830701][ T6828] __se_sys_mkdirat+0x35/0x150 [ 148.830736][ T6828] do_syscall_64+0x166/0x520 [ 148.830763][ T6828] ? trace_irq_disable+0x3b/0x140 [ 148.830790][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.830815][ T6828] ? clear_bhb_loop+0x70/0xc0 [ 148.830844][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.830868][ T6828] RIP: 0033:0x7fe69d79e159 [ 148.830890][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.830910][ T6828] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 148.830937][ T6828] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 148.830954][ T6828] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 148.830971][ T6828] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 148.830987][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.831001][ T6828] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 148.831039][ T6828] [ 149.058346][ T32] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 149.209221][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 149.211437][ T32] usb 3-1: New USB device found: idVendor=1e7d, idProduct=3264, bcdDevice=0.00 [ 149.213611][ T32] usb 3-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 149.213664][ T32] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.213695][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.213732][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.234039][ T32] usb 3-1: config 0 descriptor?? [ 149.281944][ T32] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 149.607736][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 149.726383][ T5713] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 149.756303][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 149.757202][ T32] usb 2-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 149.758783][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.762831][ T32] usb 2-1: config 0 descriptor?? [ 149.797843][ T32] gspca_main: sunplus-2.14.0 probing 041e:400b [ 149.877907][ T5713] usb 4-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 149.884864][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.884895][ T5713] usb 4-1: Product: syz [ 149.884910][ T5713] usb 4-1: Manufacturer: syz [ 149.884926][ T5713] usb 4-1: SerialNumber: syz [ 149.920081][ T5713] usb 4-1: config 0 descriptor?? [ 150.127963][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.128719][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.153767][ T5713] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 150.174229][ T5713] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 150.185966][ T5713] usb 4-1: USB disconnect, device number 19 [ 150.204191][ T5610] udevd[5610]: setting mode of /dev/bus/usb/004/019 to 020664 failed: No such file or directory [ 150.204391][ T5610] udevd[5610]: setting owner of /dev/bus/usb/004/019 to uid=0, gid=0 failed: No such file or directory [ 151.114401][ T6853] netlink: 88 bytes leftover after parsing attributes in process `syz.3.393'. [ 151.392145][ T32] gspca_sunplus: reg_w_riv err -71 [ 151.392234][ T32] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 151.411672][ T32] usb 2-1: USB disconnect, device number 26 [ 151.428449][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.697444][ T6858] jffs2: notice: (6858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.703264][ T6858] FAULT_INJECTION: forcing a failure. [ 151.703264][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 151.703300][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.3.395 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.703332][ T6858] Tainted: [L]=SOFTLOCKUP [ 151.703341][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.703355][ T6858] Call Trace: [ 151.703364][ T6858] [ 151.703374][ T6858] dump_stack_lvl+0xe8/0x150 [ 151.703413][ T6858] should_fail_ex+0x3eb/0x540 [ 151.703444][ T6858] should_failslab+0xa8/0x100 [ 151.703476][ T6858] ? jffs2_mkdir+0x83/0xec0 [ 151.703501][ T6858] kmem_cache_alloc_noprof+0x9c/0x600 [ 151.703529][ T6858] ? jffs2_mkdir+0x83/0xec0 [ 151.703563][ T6858] jffs2_mkdir+0x83/0xec0 [ 151.703589][ T6858] ? make_vfsuid+0x49/0xa0 [ 151.703626][ T6858] ? generic_permission+0x2ba/0x660 [ 151.703652][ T6858] ? __pfx_jffs2_mkdir+0x10/0x10 [ 151.703682][ T6858] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 151.703718][ T6858] ? security_inode_mkdir+0xc3/0x340 [ 151.703750][ T6858] vfs_mkdir+0x40e/0x630 [ 151.703788][ T6858] filename_mkdirat+0x285/0x510 [ 151.703819][ T6858] ? __might_fault+0xaf/0x130 [ 151.703860][ T6858] ? __pfx_filename_mkdirat+0x10/0x10 [ 151.703897][ T6858] ? do_getname+0x151/0x250 [ 151.703936][ T6858] __se_sys_mkdirat+0x35/0x150 [ 151.703972][ T6858] do_syscall_64+0x166/0x520 [ 151.703999][ T6858] ? trace_irq_disable+0x3b/0x140 [ 151.704027][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.704052][ T6858] ? clear_bhb_loop+0x70/0xc0 [ 151.704081][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.704107][ T6858] RIP: 0033:0x7fe69d79e159 [ 151.704129][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.704150][ T6858] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 151.704176][ T6858] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 151.704193][ T6858] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 151.704210][ T6858] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 151.704225][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.704239][ T6858] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 151.704276][ T6858] [ 151.990717][ T32] usb 3-1: USB disconnect, device number 28 [ 152.297353][ T5755] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 152.451050][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 152.453017][ T5755] usb 2-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 152.472381][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.472412][ T5755] usb 2-1: Product: syz [ 152.472428][ T5755] usb 2-1: Manufacturer: syz [ 152.472445][ T5755] usb 2-1: SerialNumber: syz [ 152.487376][ T5755] usb 2-1: config 0 descriptor?? [ 152.508761][ T6876] netlink: 'syz.2.403': attribute type 21 has an invalid length. [ 152.574194][ T6877] FAULT_INJECTION: forcing a failure. [ 152.574194][ T6877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.574233][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.2.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.574274][ T6877] Tainted: [L]=SOFTLOCKUP [ 152.574283][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.574297][ T6877] Call Trace: [ 152.574306][ T6877] [ 152.574315][ T6877] dump_stack_lvl+0xe8/0x150 [ 152.574351][ T6877] should_fail_ex+0x3eb/0x540 [ 152.574380][ T6877] get_futex_key+0x8e2/0x1580 [ 152.574422][ T6877] ? __pfx_get_futex_key+0x10/0x10 [ 152.574466][ T6877] futex_wake+0x119/0x5f0 [ 152.574496][ T6877] ? __pfx_futex_wake+0x10/0x10 [ 152.574529][ T6877] ? mm_exit_exec_release+0x20/0x290 [ 152.574561][ T6877] do_futex+0x458/0x4e0 [ 152.574609][ T6877] ? __pfx_do_futex+0x10/0x10 [ 152.574660][ T6877] ? __might_fault+0xaf/0x130 [ 152.574697][ T6877] mm_exit_exec_release+0x10d/0x290 [ 152.574728][ T6877] exit_mm+0x50/0x240 [ 152.574763][ T6877] do_exit+0x6a8/0x2380 [ 152.574806][ T6877] ? __pfx_do_exit+0x10/0x10 [ 152.574844][ T6877] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.574888][ T6877] do_group_exit+0x22d/0x2f0 [ 152.574921][ T6877] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.574950][ T6877] get_signal+0x1216/0x12c0 [ 152.574999][ T6877] arch_do_signal_or_restart+0xbb/0x860 [ 152.575035][ T6877] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 152.575084][ T6877] exit_to_user_mode_loop+0x10e/0x770 [ 152.575111][ T6877] ? rcu_is_watching+0x16/0xb0 [ 152.575145][ T6877] do_syscall_64+0x328/0x520 [ 152.575173][ T6877] ? trace_irq_disable+0x3b/0x140 [ 152.575199][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.575224][ T6877] ? clear_bhb_loop+0x70/0xc0 [ 152.575251][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.575274][ T6877] RIP: 0033:0x7fdc37d9e159 [ 152.575296][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.575315][ T6877] RSP: 002b:00007fdc38bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.575348][ T6877] RAX: fffffffffffffe00 RBX: 00007fdc38026188 RCX: 00007fdc37d9e159 [ 152.575365][ T6877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc38026188 [ 152.575380][ T6877] RBP: 00007fdc38026180 R08: 0000000000000000 R09: 0000000000000000 [ 152.575395][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.575409][ T6877] R13: 00007fdc38026218 R14: 00007ffffc4a4cc0 R15: 00007ffffc4a4da8 [ 152.575444][ T6877] [ 152.871650][ T6881] loop0: detected capacity change from 0 to 3904 [ 153.077491][ T5755] airspy 2-1:0.0: Board ID: 00 [ 153.077519][ T5755] airspy 2-1:0.0: Firmware version: [ 153.279690][ T5755] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 153.325852][ T5755] airspy 2-1:0.0: Registered as swradio24 [ 153.325878][ T5755] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 153.358458][ T5755] usb 2-1: USB disconnect, device number 27 [ 153.527707][ T5727] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 153.676812][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 153.679369][ T5727] usb 4-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 153.680923][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.694760][ T5727] usb 4-1: config 0 descriptor?? [ 153.724991][ T5727] gspca_main: sunplus-2.14.0 probing 041e:400b [ 154.029149][ T6898] jffs2: notice: (6898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.033702][ T6898] FAULT_INJECTION: forcing a failure. [ 154.033702][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 154.033738][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.033771][ T6898] Tainted: [L]=SOFTLOCKUP [ 154.033780][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.033794][ T6898] Call Trace: [ 154.033808][ T6898] [ 154.033818][ T6898] dump_stack_lvl+0xe8/0x150 [ 154.033856][ T6898] should_fail_ex+0x3eb/0x540 [ 154.033885][ T6898] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 154.033910][ T6898] should_failslab+0xa8/0x100 [ 154.033944][ T6898] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 154.033966][ T6898] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 154.033994][ T6898] ? jffs2_alloc_inode+0x28/0x40 [ 154.034026][ T6898] ? jffs2_alloc_inode+0x28/0x40 [ 154.034055][ T6898] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 154.034079][ T6898] jffs2_alloc_inode+0x28/0x40 [ 154.034102][ T6898] alloc_inode+0x6a/0x1b0 [ 154.034128][ T6898] new_inode+0x1f/0x170 [ 154.034156][ T6898] jffs2_new_inode+0xdd/0xd20 [ 154.034186][ T6898] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 154.034217][ T6898] ? jffs2_mkdir+0x83/0xec0 [ 154.034245][ T6898] ? __pfx_jffs2_new_inode+0x10/0x10 [ 154.034265][ T6898] ? jffs2_mkdir+0x83/0xec0 [ 154.034287][ T6898] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 154.034320][ T6898] ? jffs2_mkdir+0x83/0xec0 [ 154.034353][ T6898] jffs2_mkdir+0x189/0xec0 [ 154.034385][ T6898] ? generic_permission+0x2ba/0x660 [ 154.034411][ T6898] ? __pfx_jffs2_mkdir+0x10/0x10 [ 154.034441][ T6898] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 154.034467][ T6898] ? security_inode_mkdir+0xc3/0x340 [ 154.034498][ T6898] vfs_mkdir+0x40e/0x630 [ 154.034540][ T6898] filename_mkdirat+0x285/0x510 [ 154.034570][ T6898] ? __might_fault+0xaf/0x130 [ 154.034611][ T6898] ? __pfx_filename_mkdirat+0x10/0x10 [ 154.034647][ T6898] ? do_getname+0x151/0x250 [ 154.034687][ T6898] __se_sys_mkdirat+0x35/0x150 [ 154.034723][ T6898] do_syscall_64+0x166/0x520 [ 154.034749][ T6898] ? trace_irq_disable+0x3b/0x140 [ 154.034777][ T6898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.034803][ T6898] ? clear_bhb_loop+0x70/0xc0 [ 154.034833][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.034856][ T6898] RIP: 0033:0x7ffb85b9e159 [ 154.034878][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.034898][ T6898] RSP: 002b:00007ffb86a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 154.034925][ T6898] RAX: ffffffffffffffda RBX: 00007ffb85e25fa0 RCX: 00007ffb85b9e159 [ 154.034945][ T6898] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.034962][ T6898] RBP: 00007ffb85c3506b R08: 0000000000000000 R09: 0000000000000000 [ 154.034978][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.034992][ T6898] R13: 00007ffb85e26038 R14: 00007ffb85e25fa0 R15: 00007fff0d65fd88 [ 154.035039][ T6898] [ 154.178825][ T32] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 154.330782][ T32] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 154.343971][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.344117][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 154.344275][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.344350][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.344526][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.411741][ T32] usb 3-1: config 0 descriptor?? [ 154.435185][ T6894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.872119][ T32] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 154.919729][ T32] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 154.983781][ T6907] binder: BINDER_SET_CONTEXT_MGR already set [ 155.292145][ T5755] usb 3-1: USB disconnect, device number 29 [ 155.369823][ T5727] gspca_sunplus: reg_w_riv err -71 [ 155.369922][ T5727] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 155.388836][ T5727] usb 4-1: USB disconnect, device number 20 [ 155.457406][ T5712] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 155.627042][ T5712] usb 2-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 155.628281][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.632159][ T5712] usb 2-1: config 0 descriptor?? [ 155.849658][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 156.022789][ T6921] jffs2: notice: (6921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.053983][ T6921] FAULT_INJECTION: forcing a failure. [ 156.053983][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 156.054020][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.3.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.054052][ T6921] Tainted: [L]=SOFTLOCKUP [ 156.054061][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.054076][ T6921] Call Trace: [ 156.054086][ T6921] [ 156.054097][ T6921] dump_stack_lvl+0xe8/0x150 [ 156.054135][ T6921] should_fail_ex+0x3eb/0x540 [ 156.054165][ T6921] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 156.054190][ T6921] should_failslab+0xa8/0x100 [ 156.054229][ T6921] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 156.054252][ T6921] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 156.054279][ T6921] ? jffs2_alloc_inode+0x28/0x40 [ 156.054302][ T6921] ? jffs2_alloc_inode+0x28/0x40 [ 156.054331][ T6921] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 156.054355][ T6921] jffs2_alloc_inode+0x28/0x40 [ 156.054378][ T6921] alloc_inode+0x6a/0x1b0 [ 156.054403][ T6921] new_inode+0x1f/0x170 [ 156.054433][ T6921] jffs2_new_inode+0xdd/0xd20 [ 156.054463][ T6921] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 156.054496][ T6921] ? jffs2_mkdir+0x83/0xec0 [ 156.054524][ T6921] ? __pfx_jffs2_new_inode+0x10/0x10 [ 156.054545][ T6921] ? jffs2_mkdir+0x83/0xec0 [ 156.054569][ T6921] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 156.054602][ T6921] ? jffs2_mkdir+0x83/0xec0 [ 156.054635][ T6921] jffs2_mkdir+0x189/0xec0 [ 156.054667][ T6921] ? generic_permission+0x2ba/0x660 [ 156.054694][ T6921] ? __pfx_jffs2_mkdir+0x10/0x10 [ 156.054723][ T6921] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 156.054748][ T6921] ? security_inode_mkdir+0xc3/0x340 [ 156.054780][ T6921] vfs_mkdir+0x40e/0x630 [ 156.054821][ T6921] filename_mkdirat+0x285/0x510 [ 156.054852][ T6921] ? __might_fault+0xaf/0x130 [ 156.054892][ T6921] ? __pfx_filename_mkdirat+0x10/0x10 [ 156.054939][ T6921] ? do_getname+0x151/0x250 [ 156.054979][ T6921] __se_sys_mkdirat+0x35/0x150 [ 156.055016][ T6921] do_syscall_64+0x166/0x520 [ 156.055044][ T6921] ? trace_irq_disable+0x3b/0x140 [ 156.055071][ T6921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.055097][ T6921] ? clear_bhb_loop+0x70/0xc0 [ 156.055126][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.055149][ T6921] RIP: 0033:0x7fe69d79e159 [ 156.055172][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.055193][ T6921] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 156.055219][ T6921] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 156.055237][ T6921] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 156.055254][ T6921] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 156.055270][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.055284][ T6921] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 156.055322][ T6921] [ 156.559024][ T6929] binder: Write failure EINVAL in pid:281 [ 156.561638][ T6929] binder: BINDER_SET_CONTEXT_MGR already set [ 156.928723][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'. [ 157.802126][ T6929] syz.2.423 (6929): drop_caches: 2 [ 157.844445][ T6940] gadgetfs: bound to dummy_udc driver [ 158.115691][ T6948] jffs2: notice: (6948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.141326][ T6948] FAULT_INJECTION: forcing a failure. [ 158.141326][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 158.141363][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.2.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.141396][ T6948] Tainted: [L]=SOFTLOCKUP [ 158.141405][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.141420][ T6948] Call Trace: [ 158.141429][ T6948] [ 158.141440][ T6948] dump_stack_lvl+0xe8/0x150 [ 158.141478][ T6948] should_fail_ex+0x3eb/0x540 [ 158.141509][ T6948] should_failslab+0xa8/0x100 [ 158.141542][ T6948] ? security_inode_alloc+0x39/0x310 [ 158.141568][ T6948] kmem_cache_alloc_noprof+0x9c/0x600 [ 158.141599][ T6948] ? __pfx_make_kgid+0x10/0x10 [ 158.141625][ T6948] ? security_inode_alloc+0x39/0x310 [ 158.141657][ T6948] security_inode_alloc+0x39/0x310 [ 158.141686][ T6948] inode_init_always_gfp+0x97e/0xd30 [ 158.141717][ T6948] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 158.141741][ T6948] alloc_inode+0x82/0x1b0 [ 158.141766][ T6948] new_inode+0x1f/0x170 [ 158.141795][ T6948] jffs2_new_inode+0xdd/0xd20 [ 158.141824][ T6948] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 158.141857][ T6948] ? jffs2_mkdir+0x83/0xec0 [ 158.141884][ T6948] ? __pfx_jffs2_new_inode+0x10/0x10 [ 158.141905][ T6948] ? jffs2_mkdir+0x83/0xec0 [ 158.141927][ T6948] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 158.141960][ T6948] ? jffs2_mkdir+0x83/0xec0 [ 158.141993][ T6948] jffs2_mkdir+0x189/0xec0 [ 158.142023][ T6948] ? generic_permission+0x2ba/0x660 [ 158.142051][ T6948] ? __pfx_jffs2_mkdir+0x10/0x10 [ 158.142080][ T6948] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 158.142105][ T6948] ? security_inode_mkdir+0xc3/0x340 [ 158.142136][ T6948] vfs_mkdir+0x40e/0x630 [ 158.142176][ T6948] filename_mkdirat+0x285/0x510 [ 158.142216][ T6948] ? __might_fault+0xaf/0x130 [ 158.142256][ T6948] ? __pfx_filename_mkdirat+0x10/0x10 [ 158.142292][ T6948] ? do_getname+0x151/0x250 [ 158.142332][ T6948] __se_sys_mkdirat+0x35/0x150 [ 158.142367][ T6948] do_syscall_64+0x166/0x520 [ 158.142395][ T6948] ? trace_irq_disable+0x3b/0x140 [ 158.142423][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.142448][ T6948] ? clear_bhb_loop+0x70/0xc0 [ 158.142478][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.142502][ T6948] RIP: 0033:0x7fdc37d9e159 [ 158.142525][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.142545][ T6948] RSP: 002b:00007fdc38c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 158.142571][ T6948] RAX: ffffffffffffffda RBX: 00007fdc38025fa0 RCX: 00007fdc37d9e159 [ 158.142589][ T6948] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 158.142606][ T6948] RBP: 00007fdc37e3506b R08: 0000000000000000 R09: 0000000000000000 [ 158.142623][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.142637][ T6948] R13: 00007fdc38026038 R14: 00007fdc38025fa0 R15: 00007ffffc4a4da8 [ 158.142675][ T6948] [ 158.299585][ T5755] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 158.451974][ T5755] usb 4-1: Using ep0 maxpacket: 32 [ 158.459241][ T5755] usb 4-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 158.484999][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.504206][ T5755] usb 4-1: config 0 descriptor?? [ 158.505050][ T5712] usb 2-1: Cannot read MAC address [ 158.505283][ T5712] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 158.539070][ T5712] usb 2-1: USB disconnect, device number 28 [ 158.565534][ T5755] gspca_main: sunplus-2.14.0 probing 041e:400b [ 159.317268][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 159.336577][ T5682] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 159.466225][ T5682] usb 2-1: device descriptor read/64, error -71 [ 159.535650][ T6976] jffs2: notice: (6976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.578079][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.585271][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.595822][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.610228][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.611180][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.612456][ T6976] FAULT_INJECTION: forcing a failure. [ 159.612456][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 159.612487][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: syz.2.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.612516][ T6976] Tainted: [L]=SOFTLOCKUP [ 159.612529][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.612544][ T6976] Call Trace: [ 159.612559][ T6976] [ 159.612569][ T6976] dump_stack_lvl+0xe8/0x150 [ 159.612610][ T6976] should_fail_ex+0x3eb/0x540 [ 159.612640][ T6976] should_failslab+0xa8/0x100 [ 159.612672][ T6976] ? security_inode_alloc+0x39/0x310 [ 159.612699][ T6976] kmem_cache_alloc_noprof+0x9c/0x600 [ 159.612726][ T6976] ? __pfx_make_kgid+0x10/0x10 [ 159.612751][ T6976] ? security_inode_alloc+0x39/0x310 [ 159.612789][ T6976] security_inode_alloc+0x39/0x310 [ 159.612816][ T6976] inode_init_always_gfp+0x97e/0xd30 [ 159.612846][ T6976] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 159.612870][ T6976] alloc_inode+0x82/0x1b0 [ 159.612895][ T6976] new_inode+0x1f/0x170 [ 159.612923][ T6976] jffs2_new_inode+0xdd/0xd20 [ 159.612953][ T6976] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 159.612984][ T6976] ? jffs2_mkdir+0x83/0xec0 [ 159.613012][ T6976] ? __pfx_jffs2_new_inode+0x10/0x10 [ 159.613032][ T6976] ? jffs2_mkdir+0x83/0xec0 [ 159.613059][ T6976] ? remove_pfn_range_from_zone+0x8cf/0xbc0 [ 159.613092][ T6976] ? jffs2_mkdir+0x83/0xec0 [ 159.613125][ T6976] jffs2_mkdir+0x189/0xec0 [ 159.613155][ T6976] ? generic_permission+0x2ba/0x660 [ 159.613182][ T6976] ? __pfx_jffs2_mkdir+0x10/0x10 [ 159.613212][ T6976] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 159.613249][ T6976] ? security_inode_mkdir+0xc3/0x340 [ 159.613280][ T6976] vfs_mkdir+0x40e/0x630 [ 159.613320][ T6976] filename_mkdirat+0x285/0x510 [ 159.613361][ T6976] ? __might_fault+0xaf/0x130 [ 159.613402][ T6976] ? __pfx_filename_mkdirat+0x10/0x10 [ 159.613438][ T6976] ? do_getname+0x151/0x250 [ 159.613476][ T6976] __se_sys_mkdirat+0x35/0x150 [ 159.613512][ T6976] do_syscall_64+0x166/0x520 [ 159.613539][ T6976] ? trace_irq_disable+0x3b/0x140 [ 159.613566][ T6976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.613616][ T6976] ? clear_bhb_loop+0x70/0xc0 [ 159.613650][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.613674][ T6976] RIP: 0033:0x7fdc37d9e159 [ 159.613697][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.613717][ T6976] RSP: 002b:00007fdc38c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 159.613743][ T6976] RAX: ffffffffffffffda RBX: 00007fdc38025fa0 RCX: 00007fdc37d9e159 [ 159.613762][ T6976] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 159.613778][ T6976] RBP: 00007fdc37e3506b R08: 0000000000000000 R09: 0000000000000000 [ 159.613794][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.613809][ T6976] R13: 00007fdc38026038 R14: 00007fdc38025fa0 R15: 00007ffffc4a4da8 [ 159.613854][ T6976] [ 159.768950][ T5682] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 159.941077][ T5682] usb 2-1: device descriptor read/64, error -71 [ 160.053085][ T5682] usb usb2-port1: attempt power cycle [ 160.207036][ T5755] gspca_sunplus: reg_w_riv err -71 [ 160.207130][ T5755] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 160.228673][ T5755] usb 4-1: USB disconnect, device number 21 [ 160.397164][ T5682] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 160.430185][ T5682] usb 2-1: device descriptor read/8, error -71 [ 160.526791][ T97] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.576315][ T5727] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 160.635720][ T97] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.686339][ T5682] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 160.707873][ T5682] usb 2-1: device descriptor read/8, error -71 [ 160.727063][ T5727] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 160.729275][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.729323][ T5727] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.729345][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.729369][ T5727] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.729410][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.807907][ T97] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.827233][ T5682] usb usb2-port1: unable to enumerate USB device [ 160.981654][ T97] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.079913][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.080087][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.080244][ T6978] bridge_slave_0: entered allmulticast mode [ 161.082397][ T6978] bridge_slave_0: entered promiscuous mode [ 161.112872][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.113055][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.113265][ T6978] bridge_slave_1: entered allmulticast mode [ 161.115141][ T6978] bridge_slave_1: entered promiscuous mode [ 161.245762][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.274534][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.333845][ T7004] kvm: pic: non byte write [ 161.390601][ T6978] team0: Port device team_slave_0 added [ 161.395309][ T6978] team0: Port device team_slave_1 added [ 161.449671][ T97] bridge_slave_1: left allmulticast mode [ 161.449705][ T97] bridge_slave_1: left promiscuous mode [ 161.452917][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.484673][ T97] bridge_slave_0: left allmulticast mode [ 161.484696][ T97] bridge_slave_0: left promiscuous mode [ 161.485503][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.707339][ T4928] Bluetooth: hci4: command tx timeout [ 161.782624][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.785896][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.808153][ T97] bond0 (unregistering): Released all slaves [ 161.824569][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.824588][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.824636][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.853516][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.853571][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.853703][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.984155][ T6978] hsr_slave_0: entered promiscuous mode [ 161.985111][ T6978] hsr_slave_1: entered promiscuous mode [ 161.985765][ T6978] debugfs: 'hsr0' already exists in 'hsr' [ 161.985785][ T6978] Cannot create hsr debugfs directory [ 162.037423][ T5727] gud 3-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 162.037501][ T5727] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 162.037546][ T5727] gud 3-1:1.0: Failed to get connectors (error=-5) [ 162.037597][ T5727] gud 3-1:1.0: probe with driver gud failed with error -5 [ 162.262843][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.275299][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.289816][ T7011] netlink: 6 bytes leftover after parsing attributes in process `syz.1.453'. [ 162.635307][ T7023] jffs2: notice: (7023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.675600][ T7023] FAULT_INJECTION: forcing a failure. [ 162.675600][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 162.675639][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.675671][ T7023] Tainted: [L]=SOFTLOCKUP [ 162.675679][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.675693][ T7023] Call Trace: [ 162.675703][ T7023] [ 162.675713][ T7023] dump_stack_lvl+0xe8/0x150 [ 162.675749][ T7023] should_fail_ex+0x3eb/0x540 [ 162.675780][ T7023] should_failslab+0xa8/0x100 [ 162.675813][ T7023] ? jffs2_do_new_inode+0x2 ** replaying previous printk message ** [ 162.675813][ T7023] ? jffs2_do_new_inode+0x27/0x510 [ 162.675847][ T7023] kmem_cache_alloc_noprof+0x9c/0x600 [ 162.675875][ T7023] ? jffs2_do_new_inode+0x27/0x510 [ 162.675908][ T7023] ? __pfx_from_kgid+0x10/0x10 [ 162.675938][ T7023] jffs2_do_new_inode+0x27/0x510 [ 162.675977][ T7023] jffs2_new_inode+0x45c/0xd20 [ 162.676014][ T7023] ? __pfx_jffs2_new_inode+0x10/0x10 [ 162.676034][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 162.676057][ T7023] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 162.676093][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 162.676125][ T7023] jffs2_mkdir+0x189/0xec0 [ 162.676156][ T7023] ? generic_permission+0x2ba/0x660 [ 162.676183][ T7023] ? __pfx_jffs2_mkdir+0x10/0x10 [ 162.676214][ T7023] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 162.676238][ T7023] ? security_inode_mkdir+0xc3/0x340 [ 162.676270][ T7023] vfs_mkdir+0x40e/0x630 [ 162.676309][ T7023] filename_mkdirat+0x285/0x510 [ 162.676340][ T7023] ? __might_fault+0xaf/0x130 [ 162.676390][ T7023] ? __pfx_filename_mkdirat+0x10/0x10 [ 162.676427][ T7023] ? do_getname+0x151/0x250 [ 162.676468][ T7023] __se_sys_mkdirat+0x35/0x150 [ 162.676504][ T7023] do_syscall_64+0x166/0x520 [ 162.676532][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.676557][ T7023] ? clear_bhb_loop+0x70/0xc0 [ 162.676586][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.676609][ T7023] RIP: 0033:0x7fe69d79e159 [ 162.676630][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.676652][ T7023] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 162.676677][ T7023] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 162.676695][ T7023] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.676712][ T7023] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 162.676728][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.676775][ T7023] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 162.676813][ T7023] [ 162.681538][ T7023] ================================================================== [ 162.681590][ T7023] BUG: KASAN: slab-use-after-free in jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 162.681685][ T7023] Read of size 4 at addr ffff88807c838f68 by task syz.3.454/7023 [ 162.681736][ T7023] [ 162.681770][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.681853][ T7023] Tainted: [L]=SOFTLOCKUP [ 162.681874][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.681896][ T7023] Call Trace: [ 162.681918][ T7023] [ 162.681946][ T7023] dump_stack_lvl+0xe8/0x150 [ 162.682020][ T7023] print_address_description+0x55/0x1e0 [ 162.682105][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 162.682171][ T7023] print_report+0x58/0x70 [ 162.682238][ T7023] kasan_report+0x117/0x150 [ 162.682324][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 162.682418][ T7023] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 162.682502][ T7023] jffs2_do_clear_inode+0x58/0x390 [ 162.682594][ T7023] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 162.682695][ T7023] evict+0x624/0xb50 [ 162.682795][ T7023] ? __pfx_evict+0x10/0x10 [ 162.682869][ T7023] ? do_raw_spin_unlock+0xf5/0x200 [ 162.682958][ T7023] ? _raw_spin_unlock+0x28/0x50 [ 162.683013][ T7023] ? iput+0xb7f/0xf00 [ 162.683078][ T7023] jffs2_new_inode+0x48a/0xd20 [ 162.683143][ T7023] ? __pfx_jffs2_new_inode+0x10/0x10 [ 162.683188][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 162.683243][ T7023] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 162.683325][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 162.683400][ T7023] jffs2_mkdir+0x189/0xec0 [ 162.683470][ T7023] ? generic_permission+0x2ba/0x660 [ 162.683533][ T7023] ? __pfx_jffs2_mkdir+0x10/0x10 [ 162.683597][ T7023] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 162.683662][ T7023] ? security_inode_mkdir+0xc3/0x340 [ 162.683734][ T7023] vfs_mkdir+0x40e/0x630 [ 162.683818][ T7023] filename_mkdirat+0x285/0x510 [ 162.683897][ T7023] ? __might_fault+0xaf/0x130 [ 162.683982][ T7023] ? __pfx_filename_mkdirat+0x10/0x10 [ 162.684080][ T7023] ? do_getname+0x151/0x250 [ 162.684182][ T7023] __se_sys_mkdirat+0x35/0x150 [ 162.684264][ T7023] do_syscall_64+0x166/0x520 [ 162.684329][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.684393][ T7023] ? clear_bhb_loop+0x70/0xc0 [ 162.684450][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.684512][ T7023] RIP: 0033:0x7fe69d79e159 [ 162.684564][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.684617][ T7023] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 162.684681][ T7023] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 162.684731][ T7023] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.684772][ T7023] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 162.684800][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.684832][ T7023] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 162.684889][ T7023] [ 162.684909][ T7023] [ 162.684937][ T7023] Allocated by task 6948: [ 162.684960][ T7023] kasan_save_track+0x3e/0x80 [ 162.685031][ T7023] __kasan_slab_alloc+0x6c/0x80 [ 162.685097][ T7023] kmem_cache_alloc_noprof+0x2b4/0x600 [ 162.685149][ T7023] jffs2_scan_make_ino_cache+0x89/0x1d0 [ 162.685232][ T7023] jffs2_scan_medium+0x35ac/0x7240 [ 162.685301][ T7023] jffs2_do_mount_fs+0x775/0x22b0 [ 162.685387][ T7023] jffs2_do_fill_super+0x555/0xc50 [ 162.685433][ T7023] mtd_get_sb+0x192/0x420 [ 162.685525][ T7023] get_tree_mtd+0x597/0x7d0 [ 162.685631][ T7023] vfs_get_tree+0x92/0x2a0 [ 162.685697][ T7023] do_new_mount+0x319/0xdc0 [ 162.685742][ T7023] __se_sys_mount+0x31d/0x420 [ 162.685804][ T7023] do_syscall_64+0x166/0x520 [ 162.685873][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.685906][ T7023] [ 162.685925][ T7023] Freed by task 5614: [ 162.685948][ T7023] kasan_save_track+0x3e/0x80 [ 162.686003][ T7023] kasan_save_free_info+0x40/0x50 [ 162.686049][ T7023] __kasan_slab_free+0x5c/0x80 [ 162.686120][ T7023] kmem_cache_free+0x182/0x650 [ 162.686175][ T7023] jffs2_free_ino_caches+0xec/0x1c0 [ 162.686239][ T7023] jffs2_put_super+0x6c/0x170 [ 162.686284][ T7023] generic_shutdown_super+0x13d/0x2d0 [ 162.686338][ T7023] kill_mtd_super+0x23/0x70 [ 162.686422][ T7023] jffs2_kill_sb+0x96/0xb0 [ 162.686468][ T7023] deactivate_locked_super+0xbe/0x110 [ 162.686519][ T7023] cleanup_mnt+0x3d3/0x460 [ 162.686583][ T7023] task_work_run+0x1d9/0x260 [ 162.686635][ T7023] exit_to_user_mode_loop+0x204/0x770 [ 162.686697][ T7023] do_syscall_64+0x328/0x520 [ 162.686758][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.686812][ T7023] [ 162.686831][ T7023] The buggy address belongs to the object at ffff88807c838f40 [ 162.686831][ T7023] which belongs to the cache jffs2_inode_cache of size 48 [ 162.686893][ T7023] The buggy address is located 40 bytes inside of [ 162.686893][ T7023] freed 48-byte region [ffff88807c838f40, ffff88807c838f70) [ 162.686956][ T7023] [ 162.686968][ T7023] The buggy address belongs to the physical page: [ 162.687010][ T7023] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c838b80 pfn:0x7c838 [ 162.687080][ T7023] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 162.687142][ T7023] page_type: f5(slab) [ 162.687187][ T7023] raw: 00fff00000000200 ffff8881404e2b40 ffffea0001d84a10 ffff88801e791648 [ 162.687241][ T7023] raw: ffff88807c838b80 0000000200400022 00000000f5000000 0000000000000000 [ 162.687272][ T7023] page dumped because: kasan: bad access detected [ 162.687304][ T7023] page_owner tracks the page as allocated [ 162.687325][ T7023] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5771, tgid 5770 (syz.1.8), ts 88831326196 [ 162.687416][ T7023] post_alloc_hook+0x1f9/0x250 [ 162.687468][ T7023] get_page_from_freelist+0x220f/0x2280 [ 162.687530][ T7023] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 162.687591][ T7023] allocate_slab+0x7d/0x5e0 [ 162.687664][ T7023] refill_objects+0x2d5/0x350 [ 162.687730][ T7023] __pcs_replace_empty_main+0x2c8/0x6c0 [ 162.687808][ T7023] kmem_cache_alloc_noprof+0x394/0x600 [ 162.687854][ T7023] jffs2_do_read_inode+0x33f/0x6a0 [ 162.687921][ T7023] jffs2_iget+0x228/0xcc0 [ 162.688001][ T7023] jffs2_do_fill_super+0x59d/0xc50 [ 162.688047][ T7023] mtd_get_sb+0x192/0x420 [ 162.688120][ T7023] get_tree_mtd+0x597/0x7d0 [ 162.688200][ T7023] vfs_get_tree+0x92/0x2a0 [ 162.688276][ T7023] do_new_mount+0x319/0xdc0 [ 162.688334][ T7023] __se_sys_mount+0x31d/0x420 [ 162.688389][ T7023] do_syscall_64+0x166/0x520 [ 162.688449][ T7023] page last free pid 5616 tgid 5616 ts 88796791037 stack trace: [ 162.688490][ T7023] __free_frozen_pages+0xc97/0xd90 [ 162.688534][ T7023] tlb_remove_table_rcu+0x85/0x100 [ 162.688595][ T7023] rcu_core+0x926/0x1260 [ 162.688659][ T7023] handle_softirqs+0x223/0x840 [ 162.688722][ T7023] __irq_exit_rcu+0xcb/0x220 [ 162.688800][ T7023] irq_exit_rcu+0x9/0x30 [ 162.688864][ T7023] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.688912][ T7023] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.688974][ T7023] [ 162.688986][ T7023] Memory state around the buggy address: [ 162.689017][ T7023] ffff88807c838e00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 162.689058][ T7023] ffff88807c838e80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 162.689098][ T7023] >ffff88807c838f00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 162.689128][ T7023] ^ [ 162.689161][ T7023] ffff88807c838f80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 162.689194][ T7023] ffff88807c839000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 162.689225][ T7023] ================================================================== [ 162.744834][ T7023] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.714980][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.725872][ T7023] Tainted: [L]=SOFTLOCKUP [ 163.730238][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.740332][ T7023] Call Trace: [ 163.743664][ T7023] [ 163.746638][ T7023] vpanic+0x26f/0x710 [ 163.750679][ T7023] panic+0xc5/0xd0 [ 163.754452][ T7023] ? __pfx_panic+0x10/0x10 [ 163.758912][ T7023] ? preempt_schedule_thunk+0x16/0x40 [ 163.764326][ T7023] ? preempt_schedule_thunk+0x16/0x40 [ 163.769758][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 163.775535][ T7023] check_panic_on_warn+0x89/0xb0 [ 163.780545][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 163.786316][ T7023] end_report+0x73/0x170 [ 163.790628][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 163.796430][ T7023] kasan_report+0x128/0x150 [ 163.801010][ T7023] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 163.806807][ T7023] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 163.812424][ T7023] jffs2_do_clear_inode+0x58/0x390 [ 163.817610][ T7023] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 163.823145][ T7023] evict+0x624/0xb50 [ 163.827109][ T7023] ? __pfx_evict+0x10/0x10 [ 163.831587][ T7023] ? do_raw_spin_unlock+0xf5/0x200 [ 163.836763][ T7023] ? _raw_spin_unlock+0x28/0x50 [ 163.841670][ T7023] ? iput+0xb7f/0xf00 [ 163.845751][ T7023] jffs2_new_inode+0x48a/0xd20 [ 163.850574][ T7023] ? __pfx_jffs2_new_inode+0x10/0x10 [ 163.855902][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 163.860449][ T7023] ? remove_pfn_range_from_zone+0x890/0xbc0 [ 163.866396][ T7023] ? jffs2_mkdir+0x83/0xec0 [ 163.870953][ T7023] jffs2_mkdir+0x189/0xec0 [ 163.875417][ T7023] ? generic_permission+0x2ba/0x660 [ 163.880654][ T7023] ? __pfx_jffs2_mkdir+0x10/0x10 [ 163.885633][ T7023] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 163.890701][ T7023] ? security_inode_mkdir+0xc3/0x340 [ 163.896213][ T7023] vfs_mkdir+0x40e/0x630 [ 163.900512][ T7023] filename_mkdirat+0x285/0x510 [ 163.905426][ T7023] ? __might_fault+0xaf/0x130 [ 163.910166][ T7023] ? __pfx_filename_mkdirat+0x10/0x10 [ 163.915645][ T7023] ? do_getname+0x151/0x250 [ 163.920254][ T7023] __se_sys_mkdirat+0x35/0x150 [ 163.925068][ T7023] do_syscall_64+0x166/0x520 [ 163.929710][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.935824][ T7023] ? clear_bhb_loop+0x70/0xc0 [ 163.940547][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.946498][ T7023] RIP: 0033:0x7fe69d79e159 [ 163.950966][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.970615][ T7023] RSP: 002b:00007fe69e71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 163.979083][ T7023] RAX: ffffffffffffffda RBX: 00007fe69da25fa0 RCX: 00007fe69d79e159 [ 163.987102][ T7023] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 163.995114][ T7023] RBP: 00007fe69d83506b R08: 0000000000000000 R09: 0000000000000000 [ 164.003128][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.011172][ T7023] R13: 00007fe69da26038 R14: 00007fe69da25fa0 R15: 00007ffd917026f8 [ 164.019189][ T7023] [ 164.022852][ T7023] Kernel Offset: disabled [ 164.027212][ T7023] Rebooting in 86400 seconds..