last executing test programs: 6m7.778316407s ago: executing program 0 (id=1189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x2, 0x200, 0x3}) 6m5.002920529s ago: executing program 0 (id=1207): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[], 0x0) 6m4.872382095s ago: executing program 0 (id=1209): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffdffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000040)) 6m4.730256112s ago: executing program 0 (id=1210): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x60802a, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_lock}, {@grpjquota}, {@user_xattr}, {@resuid, 0x32}]}, 0x1b, 0x4f6, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$nfs(&(0x7f0000000240)='}', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{'+,'}, {'^!-\xdb'}, {'police\x00'}, {']^)\\[\xf9('}, {'\x00'}, {'noblock_validity'}, {'\x00'}, {}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'usrquota'}}, {@obj_role={'obj_role', 0x3d, '-:'}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'noblock_validity'}}]}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xffff, 0x20000000, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 6m4.304356392s ago: executing program 0 (id=1216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4000000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 6m3.900127401s ago: executing program 0 (id=1219): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0xadf, 0x13, 0x0, 0xffffffffffffffff, 0x6000, '\x00', 0x6, 0x7, 0x0, 0x3, {0x1, 0x9}, {0x4000000000006, 0xfffffffa}, {0x2000001, 0xc}, {0x4, 0xa00}, 0x1, 0x6, 0x1, 0x7}}}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write(r0, &(0x7f0000000700)='h', 0x100000) 6m3.799916026s ago: executing program 32 (id=1219): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0xadf, 0x13, 0x0, 0xffffffffffffffff, 0x6000, '\x00', 0x6, 0x7, 0x0, 0x3, {0x1, 0x9}, {0x4000000000006, 0xfffffffa}, {0x2000001, 0xc}, {0x4, 0xa00}, 0x1, 0x6, 0x1, 0x7}}}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write(r0, &(0x7f0000000700)='h', 0x100000) 4m51.578991836s ago: executing program 5 (id=1630): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, {0x16, 0x5, 0x0, @multicast1}}}}}}, 0x2e) 4m51.368673816s ago: executing program 5 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="306663353a313232373a6569399bac", 0xf) 4m51.332304198s ago: executing program 5 (id=1633): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000010840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendfile(r2, r3, 0x0, 0xe3aa6ea) 4m50.87264598s ago: executing program 5 (id=1635): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}}, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3204010, &(0x7f0000000d00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c636f6465706167653d3836342c757466383d312c696f636861727365743d63703836332c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c61742beb312c7569643c", @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x2a9, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write$P9_RLERRORu(r1, &(0x7f00000002c0)=ANY=[], 0x15) write(r3, &(0x7f0000000240)='1', 0x1) 4m50.532591246s ago: executing program 5 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0xfff, 0x3fffc, 0x182, 0x2, 0x0, 0x101, 0x0, 0x801, 0x5, 0x3336, 0x8, 0x6, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x4, 0x0, [{0x8dd, 0x0, 0x6}, {0xa3f, 0x0, 0x6}, {0x2be, 0x0, 0x10001}, {0x4d0, 0x0, 0x9d71}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m50.194714412s ago: executing program 5 (id=1639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xb) 4m49.859545258s ago: executing program 33 (id=1639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xb) 4m30.668041409s ago: executing program 2 (id=1746): r0 = socket$inet6(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="120110030000004063075001400001020301090226000101ff0004", @ANYRES8, @ANYRES16], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4m28.167609178s ago: executing program 2 (id=1757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000076f000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m27.828305694s ago: executing program 2 (id=1760): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000200)="ffffffffff", 0x5, 0x4000, &(0x7f0000000300)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4m27.659625152s ago: executing program 2 (id=1763): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280), 0x85, 0x7a5, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file1\x00', 0x0, 0x15000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$cgroup_freezer_state(r0, &(0x7f0000000380)='FROZEN\x00', 0x7) 4m27.333008467s ago: executing program 2 (id=1764): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) syz_emit_ethernet(0x4a, &(0x7f0000003580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000a6", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000010840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendfile(r1, r2, 0x0, 0xe3aa6ea) 4m26.295194217s ago: executing program 2 (id=1766): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a010000000000406a05e5000000000000010902240001000000040904000802030003000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60980a101090190008c0508950129309102c0ff"], 0x0}, 0x0) 4m26.175484473s ago: executing program 34 (id=1766): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a010000000000406a05e5000000000000010902240001000000040904000802030003000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60980a101090190008c0508950129309102c0ff"], 0x0}, 0x0) 13.52122203s ago: executing program 7 (id=2915): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 13.421246194s ago: executing program 7 (id=2916): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x38}, 0x2, 0x34005}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x1000, 0x5, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x14, 0xc4, 0x1, 0x2, [{@broadcast, 0xc3b1}, {@multicast2, 0x8}]}]}}}}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) read$char_usb(r3, &(0x7f00000002c0)=""/151, 0x97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x3, 0x0, 0x3, 0x0, 0x18, 0xffffffffffffffff}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xfffffffffffffde6, &(0x7f0000000340)=""/222}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) syz_open_pts(r7, 0x141601) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 9.949396122s ago: executing program 7 (id=2925): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 'caif0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b060323000100000001090227000101008032"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) 9.707822523s ago: executing program 3 (id=2926): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 9.655654116s ago: executing program 3 (id=2927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001140)='vegas', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000280)={0xa, 0x4e24, 0xfffc, @loopback, 0xfffffffd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0xffffffff, 0x3, 0xff, 0x5bd}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r0, 0x80000000, 0x355, 0xb5a2}) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 9.55656068s ago: executing program 3 (id=2928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000001000907d171400008510000006000000180200", @ANYRESOCT], 0x0, 0x2}, 0x94) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x2a00, 0x167) 8.072437932s ago: executing program 7 (id=2933): sendmsg$key(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) socket$phonet_pipe(0x23, 0x5, 0x2) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) execve(&(0x7f00000000c0)='./proc\x00', 0x0, &(0x7f00000003c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 6.218759851s ago: executing program 3 (id=2936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$eJzs20tslNUbx/HfM+90mA79/x0uFjAEmmhiBYFesEBqYrjYaMJFC9VIvKTSKVZ6IZ2ilICwVHcuWLp068KVcWtIXBoXBmNYmCAbN7MSd5jzznuboXRmbDtD6fdD4LyX5x3OOc+8c86ZvCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdefVwT6+1uhYAAKCZTp4e7ul/aPxPt6YyAACgKc6w/gcAAFhLTJ5+l2nPhZKd8PfLsscnpi9dHjk2tPBl7SZTSp4f7/5me/v69780cOBgWC5+/XLbplOnzxzuOjozdXG2UCwWxrpGpifOzYwV6n6FpV5fbZffAV1TFy6NjY8Xu/r29lecvpy/t259Z35w4L2jmTB25NjQ0OlETLrtP//vD3nUDD8jTy/I9PH339pJSSktvS9qvHdWWrvfiF1+I0aODfkNmZwYnZ5zJy0VRKUq+yQT9lETcrEkKcnVyzLLs2Zrk6cfZDqyr2SnJHlhP+z2vxiuqz6tkHZLV0ndWgU5e4ytk6cPZLq1L683gn7185+Rrra6clhx6eD+n7GSvel/Hrj7yX1sHn+r6/Xp8ZlErKWCO2q1jw/N9Jh/NmXl6ZR/x5dsWDuTp9a1rlZolnZ5mpIp89Un/rxC/rz0qcEDO3YeSs4wttR4HRe7N7i56hmT24Kpg6Xcn+VvF+qTNU9/ynT/t6y/3x2OAdKNB4td+EdTqoeVZp4mZfrnWsmsal3qJdb3kdU+9q9s/duzR2cuzs9OnP9obsHzuezhD4tzs6PnFj5dXrt6ySO11rHVUo0tyXJWXvF9/mkpui5YA/yvvBfX5pur8Xuhu6oMJd8/9WzXvYptYB7l6mTm6a5M4+9vLY8zyjXcN2uBy/+QTMXSzxZmOsh/8AxYIv8vx/2Xtcoy4uf2/+XvtcK5xLazmx91fCXy7+rk8v+OTEf+3hp8p1HOv1cV6+I6ZXr35vYgLpVxceEDcPnyK45PTBZ6XOwDmTb+FMbKj80FsZvi2F4XW5Tpi1uVseuD2M1xbJ+LvS3TnV8Xjn06ju13sfMuX3e6wtici90RxHbGsXvPzUyO1epWl/8+md6+/pqFbX5k/hP3/42qMvJQzhffXq785xPHbgR5PRvkP10j/1/KNP/X9rDdft+Hb6sN/r9x/t1c+bublbHhgnJjHNtbb7NazeV/g0z3XrkdtTloW7AbZyiZ/2fSlWXUry3K/4bEsXxQr0yDfbEWFeevXBidnCzMssEGG2xEG63+ZEIzuPF/2I3qA56F85hg/O8o78UzpvufxeP/YFUZadH4vzFxbDCYtbSlpezc1MW2LVK2OH9lz8TU6PnC+cJ0//6Bnr5D+3v6D7ZlwsldvFV33z0JXP53y3Ttx1+idUzl/G/h+X+uqoy0KP+bkm2qmNfU3RVrkst/h0wDd29H683F5v/h+r/72coyuv9alP/NiWP5oF4dDfYFAAAAAAAAAAAAAAAAAKwmOfP0nEyXh1+08DdE9Tz/N1ZVRpb/+a/yD5NrPP/VmTg21qTfNTTU0QAAAAAAAAAAAE2SkqevZXpeJbvuDnRIJ5Ilnmj/BgAA//9+z0gL") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x125042, 0x65) inotify_init1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000600)) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r2], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 5.317714424s ago: executing program 7 (id=2940): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x4202, 0x6a) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x4, 0x96, 0x1, 0x1, 0x30, 0x9, 0x6, 0x19ef, 0x3, 0x9, 0x27ff, 0x2800, 0x2, 0xbb4, 0x0, 0x18, {0x3ff, 0xff7ffbff}, 0xd0, 0x9}}) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 5.316057794s ago: executing program 1 (id=2951): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d000101008032090400000203000000092111010001222300090581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) 5.059211047s ago: executing program 4 (id=2944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001140)='vegas', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000280)={0xa, 0x4e24, 0xfffc, @loopback, 0xfffffffd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0xffffffff, 0x3, 0xff, 0x5bd}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r0, 0x80000000, 0x355, 0xb5a2}) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) socket$inet6(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) 4.936562102s ago: executing program 4 (id=2945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xfa, 0x2, 0xf, 0x6, 0x8001, 0x9}, {0x4, 0x1, 0x96, 0x4, 0x9, 0xa}, 0x9c51, 0x0, 0x187}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 4.835053607s ago: executing program 4 (id=2946): capget(0x0, &(0x7f0000000140)={0x0, 0xdeaf, 0x6, 0x3, 0x3ff, 0xf6}) 4.723788172s ago: executing program 4 (id=2947): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 4.712067823s ago: executing program 6 (id=2948): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xd02, 0x0, 0x0, &(0x7f0000001080), &(0x7f0000001040)) ppoll(&(0x7f00000000c0)=[{r0, 0x800a}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x200000}, {@loopback, 0x15, 0x0, 0x1, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0xf000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000100)) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'veth0_to_bridge\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0xd6, './mysys\x00'}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0xa}, 0x94) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.782030098s ago: executing program 4 (id=2949): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 3.607629916s ago: executing program 6 (id=2950): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0x894, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x9, 0x265, 0x0, {0x1, 0x0, 0xf, 0xc, 0x2, 0x1}, {0xe, 0x1, 0x9, 0x3, 0x400, 0xf992}, 0x0, 0x1, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x60, 0xd5b8, 0x8, 0x1000, 0x4, 0xfff, 0x8001, 0x20, 0x9, 0x9, 0x0, 0x7, 0x1, 0xe, 0xf1ba, 0xe, 0xfffffffb, 0x46, 0x9, 0x2, 0xd, 0x0, 0x3, 0xff, 0x400, 0x47, 0xcbd7, 0x1000, 0x6, 0x3, 0x7fffffff, 0xe9, 0x9d, 0xfff, 0x6, 0x8, 0x40, 0x100, 0xea9, 0x8786, 0x3, 0x5, 0x0, 0x8000, 0xffffffff, 0x1f3540, 0x4, 0x9, 0x1, 0x6, 0x1, 0x0, 0x81, 0x200, 0x1, 0x884, 0x0, 0x0, 0x5, 0x4, 0x1, 0x80000000, 0x0, 0xfffff106, 0x3, 0x6, 0x8, 0x800, 0x2, 0x6, 0x71b, 0xfffffffa, 0xe, 0x7, 0x1, 0x10001, 0x4, 0x8, 0xfffffffa, 0x800, 0x5, 0x3, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfffffff6, 0x2, 0x80000000, 0x2, 0x7f, 0x7, 0x2, 0x6, 0x4, 0x9365, 0x740c172d, 0x7, 0x80000000, 0x58eb2774, 0x80000000, 0x8, 0x415, 0x8, 0x0, 0xff, 0x7f, 0x200, 0x7, 0x1, 0x8, 0xfffffffd, 0x80, 0xe1f, 0x4, 0x9, 0x7, 0x43b, 0x9, 0x12, 0x5, 0x7f, 0x97d, 0x4, 0x10000, 0x5, 0x7, 0x7, 0x0, 0x3b, 0x2, 0x8, 0x6, 0x5, 0x1000, 0x7, 0xbd14, 0xfffffff9, 0xf2, 0x8, 0x4d723a72, 0x3, 0x4, 0xffff, 0x103, 0x8, 0x800000, 0x2, 0x1, 0x4, 0x3, 0xd2, 0x1, 0x7, 0x3, 0x6, 0xfffffffd, 0x2, 0x800, 0x9, 0x72c, 0x983, 0xd613, 0x1000, 0xfff, 0x4, 0x5, 0x3, 0x10000, 0xf6f, 0x4, 0x0, 0x6, 0x9, 0x5, 0x2, 0x1c00, 0x4, 0x6, 0x6, 0x40, 0x401, 0x200, 0x81, 0x4, 0x1, 0xf, 0xf, 0x6, 0xdb, 0x1ff, 0x6, 0x6, 0xff, 0xe69, 0x3, 0x80000000, 0x8, 0x4, 0x6, 0x14, 0x5, 0x7fffffff, 0xac, 0x8, 0x5c74, 0xffff, 0x9, 0xfffffff9, 0x3ff, 0x200, 0x7, 0x6, 0x9, 0x401, 0x4, 0x8, 0xc75, 0x8e0, 0x0, 0x5, 0xff, 0x1, 0x53e8, 0x3, 0x1000, 0x1, 0xcea7, 0x7, 0xf2, 0x6, 0xfffff8d8, 0x7, 0x4, 0x53c3, 0x7fff, 0x0, 0xff, 0x9, 0xff, 0x7, 0x5, 0x0, 0x300000, 0x8, 0x7fff, 0x30e3, 0x3, 0x200, 0x3ff, 0x80, 0x2, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x9, 0x4, 0x3, 0x1, 0x2, 0x9, 0x41d, 0x9, 0x5, 0x5, 0xeb4, 0xd, 0x0, 0x5, 0x5, 0x1cc, 0x1, 0x9, 0x1000, 0x3, 0xb, 0x2, 0xfffffff8, 0x1ff, 0x4, 0x1, 0x6, 0x1, 0x1, 0x6, 0xa, 0x0, 0x7, 0x34, 0xfffffffb, 0x7, 0x101, 0x7fffffff, 0x1, 0x9, 0x0, 0x80000001, 0xa, 0xb, 0xe1bd, 0x0, 0x8c, 0x8, 0x436b, 0xfffff3bd, 0x834, 0x0, 0x9, 0xdc, 0x8, 0x7ff, 0x0, 0x81, 0x100, 0x2, 0x8, 0x9d34, 0xffffffff, 0xfffffffc, 0xfffff38e, 0x101, 0x200, 0x6, 0x4, 0xf0, 0x2, 0xfffffffc, 0x9, 0x7, 0x6, 0x8001, 0x5, 0x1, 0xabe5, 0x7fffffff, 0xffff04f7, 0x3, 0x9, 0x3, 0x4, 0x4c, 0x10000, 0x1, 0x80, 0x3, 0x9, 0x1, 0x7fff, 0x943, 0x7fff, 0xd5, 0x9, 0x81, 0x7fffffff, 0xdf, 0xd87e, 0x6, 0x6, 0x82, 0x7ff, 0x3, 0xffffffcb, 0x5, 0x2, 0xc, 0xfffffff4, 0xe, 0x2d25, 0x7f, 0xc206627, 0x2a, 0x4, 0xcf, 0x7ff, 0x4, 0xf, 0x1, 0xfffffffc, 0x8, 0x7, 0x800, 0x101, 0x3, 0xba6, 0x10000, 0x4, 0x7fff, 0x71, 0x7, 0x6, 0x9, 0x60, 0x2, 0x2, 0x0, 0x2, 0x2, 0x2, 0x5, 0x70c, 0xa0, 0x857, 0x0, 0x8, 0x1e97, 0x4, 0x1, 0xf, 0x10000, 0x4, 0x6069, 0xf32, 0xfb9, 0x3, 0x3, 0x3, 0x80000000, 0x1, 0xc, 0x0, 0x100, 0x609c, 0x101, 0x1, 0xc, 0x90, 0x0, 0x8, 0x5, 0xd549, 0x200, 0x5, 0x4, 0x8, 0x6, 0x9, 0x329, 0x1, 0x2, 0x140, 0x5, 0x3, 0xfffffff9, 0x0, 0x9, 0xa141, 0x80000000, 0x1, 0x80000001, 0x9, 0x80, 0x2, 0x7370, 0x4, 0x3, 0x5, 0x4, 0x0, 0x4, 0x4, 0x7, 0x0, 0xfff, 0x3, 0x2, 0xffffffff, 0x7, 0x8, 0x800, 0x43a, 0x8, 0x68c, 0x7, 0x6, 0x5, 0x3, 0x1, 0x3, 0x33e8, 0x1, 0x7, 0x401, 0x8, 0x10, 0x0, 0x7fffffff, 0xffffffff, 0x6, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x0, 0x3, 0x0, 0x6328, 0x2, 0x3000000, 0x8, 0x81, 0x0, 0xfffffffa, 0x7, 0xb, 0x1c000000, 0x8, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}}, 0x0) 3.481580842s ago: executing program 4 (id=2952): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x38}, 0x2, 0x34005}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x1000, 0x5, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x14, 0xc4, 0x1, 0x2, [{@broadcast, 0xc3b1}, {@multicast2, 0x8}]}]}}}}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) read$char_usb(r3, &(0x7f00000002c0)=""/151, 0x97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x3, 0x0, 0x3, 0x0, 0x18, 0xffffffffffffffff}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xfffffffffffffde6, &(0x7f0000000340)=""/222}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) syz_open_pts(r7, 0x141601) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 2.799040815s ago: executing program 1 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) 2.70380321s ago: executing program 1 (id=2954): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) 2.436723813s ago: executing program 3 (id=2955): sendmsg$key(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) socket$phonet_pipe(0x23, 0x5, 0x2) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) execve(&(0x7f00000000c0)='./proc\x00', 0x0, &(0x7f00000003c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 2.436218973s ago: executing program 1 (id=2965): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d000101008032090400000203000000092111010001222300090581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) 2.259607162s ago: executing program 6 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001140)='vegas', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000280)={0xa, 0x4e24, 0xfffc, @loopback, 0xfffffffd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0xffffffff, 0x3, 0xff, 0x5bd}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r0, 0x80000000, 0x355, 0xb5a2}) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) socket$inet6(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) 1.841548131s ago: executing program 6 (id=2957): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unlink(&(0x7f0000000100)='./file0\x00') unshare(0x8020000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.710665707s ago: executing program 6 (id=2958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xfa, 0x2, 0xf, 0x6, 0x8001, 0x9}, {0x4, 0x1, 0x96, 0x4, 0x9, 0xa}, 0x9c51, 0x0, 0x187}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.558948035s ago: executing program 6 (id=2959): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 'caif0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) 1.194239143s ago: executing program 3 (id=2960): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x200000, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "4cc0238c", {0x3, 0x7, 0x0, 0x0, 0x8, 0x8, 0xb6}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 257.714118ms ago: executing program 7 (id=2961): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 51.580427ms ago: executing program 1 (id=2962): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 0s ago: executing program 1 (id=2963): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x2c, 0x52, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x801) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) kernel console output (not intermixed with test programs): 7f3ee22e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 509.105253][T12505] RAX: ffffffffffffffda RBX: 00007f3ee430ffa0 RCX: 00007f3ee4088159 [ 509.113207][T12505] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 509.121159][T12505] RBP: 00007f3ee411f03b R08: 0000000000000000 R09: 0000000000000000 [ 509.129118][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.137074][T12505] R13: 00007f3ee4310038 R14: 00007f3ee430ffa0 R15: 00007ffe0551f468 [ 509.145044][T12505] [ 509.148140][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.374426][ T7637] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.384617][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 510.641865][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 510.695560][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 510.739766][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 510.788515][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 510.835546][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 510.889451][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 510.938290][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 510.985012][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 511.034521][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 511.080813][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 511.147024][ T7637] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 511.212754][ T7637] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.257882][ T7637] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 511.345190][T12511] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 511.468341][ T7637] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 511.498022][ T7637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.517090][ T7637] usb 8-1: Product: syz [ 511.527935][ T7637] usb 8-1: Manufacturer: syz [ 511.544359][ T7637] usb 8-1: SerialNumber: syz [ 511.584733][ T7637] usb 8-1: can't set config #1, error -71 [ 511.597736][ T13] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 511.652485][ T7637] usb 8-1: USB disconnect, device number 44 [ 511.722905][ T26] audit: type=1326 audit(1789295826.032:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 511.746982][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.766788][T12539] netlink: 'syz.4.2705': attribute type 1 has an invalid length. [ 511.833300][ T13] usb 7-1: device descriptor read/64, error -71 [ 511.880416][ T26] audit: type=1326 audit(1789295826.078:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 511.908117][T12539] device bond1 entered promiscuous mode [ 511.925589][T12539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.945808][T12544] batman_adv: batadv0: Adding interface: veth0 [ 511.974319][T12544] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.999448][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.036327][ T26] audit: type=1326 audit(1789295826.078:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.132980][T12544] batman_adv: batadv0: Interface activated: veth0 [ 512.139699][ T13] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 512.158775][ T26] audit: type=1326 audit(1789295826.078:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.182860][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.259286][ T26] audit: type=1326 audit(1789295826.078:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.366694][ T13] usb 7-1: device descriptor read/64, error -71 [ 512.379971][ T26] audit: type=1326 audit(1789295826.078:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.488421][ T26] audit: type=1326 audit(1789295826.078:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.538657][ T13] usb usb7-port1: attempt power cycle [ 512.598237][ T26] audit: type=1326 audit(1789295826.078:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.681343][ T26] audit: type=1326 audit(1789295826.078:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.705433][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.828177][ T26] audit: type=1326 audit(1789295826.078:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 512.852264][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.944892][T12561] FAULT_INJECTION: forcing a failure. [ 512.944892][T12561] name failslab, interval 1, probability 0, space 0, times 0 [ 512.975904][ T26] audit: type=1326 audit(1789295826.096:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 513.005946][ T13] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 513.053023][T12561] CPU: 0 PID: 12561 Comm: syz.1.2713 Not tainted syzkaller #0 [ 513.060511][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 513.070545][T12561] Call Trace: [ 513.073803][T12561] [ 513.077146][T12561] dump_stack_lvl+0x188/0x250 [ 513.081816][T12561] ? show_regs_print_info+0x20/0x20 [ 513.086989][T12561] ? load_image+0x410/0x410 [ 513.091473][T12561] ? __might_sleep+0xf0/0xf0 [ 513.096037][T12561] ? __lock_acquire+0x7b50/0x7b50 [ 513.101051][T12561] ? memset+0x1e/0x40 [ 513.105012][T12561] should_fail+0x383/0x4b0 [ 513.109413][T12561] should_failslab+0x5/0x20 [ 513.113960][T12561] slab_pre_alloc_hook+0x51/0xc0 [ 513.118899][T12561] kmem_cache_alloc_trace+0x47/0x290 [ 513.124173][T12561] ? sctp_auth_shkey_create+0x77/0x190 [ 513.129626][T12561] sctp_auth_shkey_create+0x77/0x190 [ 513.134903][T12561] sctp_endpoint_new+0x43c/0xa00 [ 513.139864][T12561] sctp_init_sock+0x95b/0x11c0 [ 513.144608][T12561] sctp_v6_init_sock+0x12/0x60 [ 513.149348][T12561] inet6_create+0xd88/0x1130 [ 513.153936][T12561] __sock_create+0x473/0x910 [ 513.158508][T12561] __sys_socket+0xe2/0x170 [ 513.162907][T12561] __x64_sys_socket+0x76/0x80 [ 513.167562][T12561] do_syscall_64+0x4c/0xa0 [ 513.171959][T12561] ? clear_bhb_loop+0x30/0x80 [ 513.176614][T12561] ? clear_bhb_loop+0x30/0x80 [ 513.181268][T12561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.187142][T12561] RIP: 0033:0x7ff1801b3159 [ 513.191541][T12561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.211123][T12561] RSP: 002b:00007ff17e40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 513.219525][T12561] RAX: ffffffffffffffda RBX: 00007ff18043afa0 RCX: 00007ff1801b3159 [ 513.227505][T12561] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 513.235463][T12561] RBP: 00007ff18024a03b R08: 0000000000000000 R09: 0000000000000000 [ 513.243415][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.251367][T12561] R13: 00007ff18043b038 R14: 00007ff18043afa0 R15: 00007ffe3d86a058 [ 513.259413][T12561] [ 513.262538][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.318928][ T13] usb 7-1: device descriptor read/8, error -71 [ 513.340702][ T26] audit: type=1326 audit(1789295826.096:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.2704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f0f9159 code=0x7ffc0000 [ 513.588135][ T1323] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 513.620667][ T13] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 513.728862][ T13] usb 7-1: device descriptor read/8, error -71 [ 513.847960][ T1323] usb 5-1: Using ep0 maxpacket: 32 [ 515.048413][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 515.064000][ T1323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.088732][ T1323] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.107375][ T13] usb usb7-port1: unable to enumerate USB device [ 515.113908][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 515.159110][ T1323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.199142][ T1323] usb 5-1: config 0 descriptor?? [ 515.281453][ T1323] hub 5-1:0.0: bad descriptor, ignoring hub [ 515.310398][ T1323] hub: probe of 5-1:0.0 failed with error -5 [ 515.328320][ T1323] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 515.708715][T12585] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 515.758178][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2720'. [ 516.179006][ T1323] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 516.471981][ T1323] usb 2-1: Using ep0 maxpacket: 8 [ 516.610330][ T1323] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 516.637652][ T1323] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 516.683678][ T1323] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 516.742828][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.916414][ T7] usb 5-1: USB disconnect, device number 115 [ 517.050194][ T7] usb 2-1: USB disconnect, device number 125 [ 517.309610][T12614] Config c1/1 of g1 needs at least one function. [ 517.332420][T12614] udc dummy_udc.0: failed to start g1: -22 [ 518.281372][T12639] loop7: detected capacity change from 0 to 128 [ 518.355220][T12634] FAULT_INJECTION: forcing a failure. [ 518.355220][T12634] name failslab, interval 1, probability 0, space 0, times 0 [ 518.411628][T12639] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 518.514945][T12634] CPU: 0 PID: 12634 Comm: syz.3.2732 Not tainted syzkaller #0 [ 518.522503][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 518.532557][T12634] Call Trace: [ 518.535833][T12634] [ 518.538753][T12634] dump_stack_lvl+0x188/0x250 [ 518.543440][T12634] ? show_regs_print_info+0x20/0x20 [ 518.548618][T12634] ? load_image+0x410/0x410 [ 518.553221][T12634] ? __might_sleep+0xf0/0xf0 [ 518.557794][T12634] ? __lock_acquire+0x7b50/0x7b50 [ 518.562800][T12634] ? memset+0x1e/0x40 [ 518.566770][T12634] should_fail+0x383/0x4b0 [ 518.571177][T12634] should_failslab+0x5/0x20 [ 518.575669][T12634] slab_pre_alloc_hook+0x51/0xc0 [ 518.580586][T12634] kmem_cache_alloc_trace+0x47/0x290 [ 518.585848][T12634] ? sctp_auth_shkey_create+0x77/0x190 [ 518.591302][T12634] sctp_auth_shkey_create+0x77/0x190 [ 518.596567][T12634] sctp_endpoint_new+0x43c/0xa00 [ 518.601485][T12634] sctp_init_sock+0x95b/0x11c0 [ 518.606228][T12634] sctp_v6_init_sock+0x12/0x60 [ 518.610969][T12634] inet6_create+0xd88/0x1130 [ 518.615539][T12634] __sock_create+0x473/0x910 [ 518.620109][T12634] __sys_socket+0xe2/0x170 [ 518.624503][T12634] __x64_sys_socket+0x76/0x80 [ 518.629161][T12634] do_syscall_64+0x4c/0xa0 [ 518.633555][T12634] ? clear_bhb_loop+0x30/0x80 [ 518.638209][T12634] ? clear_bhb_loop+0x30/0x80 [ 518.642863][T12634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 518.648733][T12634] RIP: 0033:0x7f27aa51c159 [ 518.653124][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.672721][T12634] RSP: 002b:00007f27a8774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 518.681113][T12634] RAX: ffffffffffffffda RBX: 00007f27aa7a3fa0 RCX: 00007f27aa51c159 [ 518.689064][T12634] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 518.697011][T12634] RBP: 00007f27aa5b303b R08: 0000000000000000 R09: 0000000000000000 [ 518.704957][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.712904][T12634] R13: 00007f27aa7a4038 R14: 00007f27aa7a3fa0 R15: 00007fffd0fab3f8 [ 518.720879][T12634] [ 518.723898][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.896195][ T7] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 519.339847][ T7] usb 8-1: not running at top speed; connect to a high speed hub [ 520.520656][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.688993][T12662] jffs2: notice: (12662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 520.726480][ T7] usb 8-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 520.765997][ T7] usb 8-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 520.801563][ T7] usb 8-1: Product: syz [ 520.820512][ T7] usb 8-1: Manufacturer: syz [ 520.890409][ T7] usb 8-1: Found UVC 1.00 device syz (225a:e1d4) [ 521.138921][ T13] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 521.148830][ T7] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 521.204464][ T7] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 521.249679][ T7] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 521.305449][ T7] usb 8-1: USB disconnect, device number 45 [ 521.560300][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 521.570785][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 522.679798][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 522.704640][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 522.729653][ T13] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 522.751575][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.795580][T12666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 522.861014][T12666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 522.868041][T12666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 522.990963][ T13] pl2303 5-1:1.0: pl2303 converter detected [ 523.018355][ T13] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 523.212014][ T13] usb 5-1: USB disconnect, device number 116 [ 523.247216][ T13] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 523.288210][ T13] pl2303 5-1:1.0: device disconnected [ 523.551760][T12708] loop1: detected capacity change from 0 to 128 [ 523.595860][T12708] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 523.954183][ T13] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 524.322541][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 524.387612][ T1323] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 524.430881][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.582551][ T13] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 524.607065][ T13] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 524.639414][ T13] usb 2-1: Product: syz [ 524.654562][ T13] usb 2-1: Manufacturer: syz [ 524.729136][ T13] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 524.781477][ T1323] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 524.824158][ T1323] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 524.834587][ C0] hrtimer: interrupt took 628582 ns [ 524.862329][ T1323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 524.902226][ T1323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 524.929245][ T1323] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 524.960883][ T1323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.972638][ T13] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 525.016855][T12720] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 525.024759][ T13] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 525.054523][T12720] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 525.094191][ T13] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 525.120196][T12720] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 525.170591][ T13] usb 2-1: USB disconnect, device number 126 [ 525.191929][ T1323] pl2303 5-1:1.0: pl2303 converter detected [ 525.235570][ T1323] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 525.414651][ T4234] usb 5-1: USB disconnect, device number 117 [ 525.458451][ T4234] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 525.516647][ T4234] pl2303 5-1:1.0: device disconnected [ 526.143151][ T13] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 526.587473][ T13] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 526.773275][ T13] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 526.853215][ T13] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 526.933161][ T13] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 526.987759][ T13] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 527.038195][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.129430][T12744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.174218][T12744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.242190][T12744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.347226][ T13] pl2303 8-1:1.0: pl2303 converter detected [ 527.392365][ T13] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 527.617688][ T7637] usb 8-1: USB disconnect, device number 46 [ 527.705043][T12776] loop4: detected capacity change from 0 to 128 [ 527.721375][ T7637] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 527.806036][ T7637] pl2303 8-1:1.0: device disconnected [ 527.816029][T12776] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 528.256292][ T7] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 528.646676][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 528.760332][T12800] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 528.789608][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.951527][ T7] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 528.985533][ T7] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 529.061143][ T7] usb 5-1: Product: syz [ 529.092355][ T7] usb 5-1: Manufacturer: syz [ 529.181963][ T7] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 529.437533][ T7] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 529.471386][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2796'. [ 529.524395][ T7] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 529.555696][ T7] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 529.582395][T12813] autofs4:pid:12813:autofs_fill_super: called with bogus options [ 529.626595][ T7] usb 5-1: USB disconnect, device number 118 [ 529.969688][T12819] Config c1/1 of g1 needs at least one function. [ 530.084673][T12819] udc dummy_udc.0: failed to start g1: -22 [ 530.458354][ T7637] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 530.590012][ T7] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 530.860266][ T7637] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 530.871004][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 530.897151][ T7637] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 530.912095][ T7637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 530.927798][ T7637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 530.940944][ T7637] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 530.954392][ T7637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.987924][T12830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.001740][T12830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.011961][ T7] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 531.022945][T12830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.034273][ T7637] pl2303 5-1:1.0: pl2303 converter detected [ 531.044530][ T7] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 531.059574][ T7637] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 531.068399][ T7] usb 8-1: config 179 has no interface number 0 [ 531.097893][ T7] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 531.126316][ T7] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 531.144782][ T7] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 531.155176][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.263145][T12840] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 531.283426][ T7] usb 5-1: USB disconnect, device number 119 [ 531.301610][T12838] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 531.332178][T12838] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 531.351862][T12838] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 531.370528][T12838] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 531.423328][T12838] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 531.452005][ T7637] usb 8-1: USB disconnect, device number 47 [ 531.474232][ T7] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 531.505439][ T7] pl2303 5-1:1.0: device disconnected [ 532.224925][ T7] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 532.417746][ T7637] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 532.554854][T12862] Config c1/1 of g1 needs at least one function. [ 532.611363][T12862] udc dummy_udc.0: failed to start g1: -22 [ 532.647036][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.677847][ T7637] usb 8-1: device descriptor read/64, error -71 [ 534.613463][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.671404][ T7] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 534.698691][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.876703][T12873] FAULT_INJECTION: forcing a failure. [ 534.876703][T12873] name failslab, interval 1, probability 0, space 0, times 0 [ 534.891415][ T7637] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 534.995744][T12873] CPU: 0 PID: 12873 Comm: syz.3.2817 Not tainted syzkaller #0 [ 535.003223][T12873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 535.013269][T12873] Call Trace: [ 535.016540][T12873] [ 535.019454][T12873] dump_stack_lvl+0x188/0x250 [ 535.024133][T12873] ? show_regs_print_info+0x20/0x20 [ 535.029326][T12873] ? load_image+0x410/0x410 [ 535.033832][T12873] ? __might_sleep+0xf0/0xf0 [ 535.038405][T12873] ? __lock_acquire+0x7b50/0x7b50 [ 535.043421][T12873] should_fail+0x383/0x4b0 [ 535.047839][T12873] should_failslab+0x5/0x20 [ 535.052357][T12873] slab_pre_alloc_hook+0x51/0xc0 [ 535.057289][T12873] ? __d_alloc+0x27/0x6d0 [ 535.061614][T12873] kmem_cache_alloc+0x3d/0x280 [ 535.066384][T12873] __d_alloc+0x27/0x6d0 [ 535.070530][T12873] d_alloc_parallel+0x7b/0x1320 [ 535.075401][T12873] ? lock_chain_count+0x20/0x20 [ 535.080247][T12873] ? __init_waitqueue_head+0xa4/0x140 [ 535.085639][T12873] __lookup_slow+0x134/0x410 [ 535.090213][T12873] ? lookup_one_len+0x2d0/0x2d0 [ 535.095049][T12873] ? down_read+0x1aa/0x2e0 [ 535.099448][T12873] lookup_slow+0x53/0x70 [ 535.103671][T12873] walk_component+0x314/0x460 [ 535.108333][T12873] link_path_walk+0x688/0xde0 [ 535.112991][T12873] ? handle_lookup_down+0x130/0x130 [ 535.118171][T12873] path_openat+0x28e/0x2fb0 [ 535.122668][T12873] ? __kasan_slab_alloc+0xa9/0xc0 [ 535.127674][T12873] ? do_filp_open+0x400/0x400 [ 535.132334][T12873] do_filp_open+0x1df/0x400 [ 535.136816][T12873] ? vfs_tmpfile+0x300/0x300 [ 535.141387][T12873] ? noop_direct_IO+0x10/0x10 [ 535.146106][T12873] ? _raw_spin_unlock+0x24/0x40 [ 535.150933][T12873] ? alloc_fd+0x59e/0x650 [ 535.155242][T12873] do_sys_openat2+0x14b/0x500 [ 535.159895][T12873] ? __lock_acquire+0x7b50/0x7b50 [ 535.164899][T12873] ? do_sys_open+0xe0/0xe0 [ 535.169292][T12873] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 535.175251][T12873] ? lock_chain_count+0x20/0x20 [ 535.180100][T12873] __x64_sys_openat+0x135/0x160 [ 535.184934][T12873] do_syscall_64+0x4c/0xa0 [ 535.189340][T12873] ? clear_bhb_loop+0x30/0x80 [ 535.194007][T12873] ? clear_bhb_loop+0x30/0x80 [ 535.198661][T12873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.204535][T12873] RIP: 0033:0x7f27aa4dc98e [ 535.208933][T12873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.228531][T12873] RSP: 002b:00007f27a8773ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.237365][T12873] RAX: ffffffffffffffda RBX: 00007f27a87746c0 RCX: 00007f27aa4dc98e [ 535.245324][T12873] RDX: 0000000000000002 RSI: 00007f27a8773f90 RDI: ffffffffffffff9c [ 535.253285][T12873] RBP: 00007f27aa5b303b R08: 0000000000000000 R09: 0000000000000000 [ 535.261246][T12873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.269194][T12873] R13: 00007f27aa7a4038 R14: 00007f27aa7a3fa0 R15: 00007fffd0fab3f8 [ 535.277154][T12873] [ 535.493011][ T7637] usb 8-1: device descriptor read/64, error -71 [ 535.502108][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 535.508822][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.518933][ T7] usbhid 5-1:1.0: can't add hid device: -71 [ 535.525871][ T7] usbhid: probe of 5-1:1.0 failed with error -71 [ 535.604209][T12883] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 535.655569][ T7] usb 5-1: USB disconnect, device number 120 [ 535.701477][ T7637] usb usb8-port1: attempt power cycle [ 536.168038][ T7637] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 536.202971][ T4234] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 536.233848][ T7] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 536.276523][ T7637] usb 8-1: Using ep0 maxpacket: 8 [ 536.406705][ T7637] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 536.426467][ T7637] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 536.449109][ T7] usb 5-1: device descriptor read/64, error -71 [ 536.470947][ T7637] usb 8-1: config 179 has no interface number 0 [ 536.488571][ T7637] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 536.500705][ T4234] usb 7-1: Using ep0 maxpacket: 32 [ 536.535937][ T7637] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 536.588029][ T7637] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 536.626893][ T7637] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 536.648008][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.668681][ T7637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.690915][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.724840][ T4234] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 536.741954][T12886] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 536.766379][ T7] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 536.789540][ T4234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.829907][ T4234] usb 7-1: config 0 descriptor?? [ 536.884071][ T4234] hub 7-1:0.0: USB hub found [ 537.012625][ T7] usb 5-1: device descriptor read/64, error -71 [ 537.040886][ T7637] usb 8-1: USB disconnect, device number 50 [ 537.156804][ T7] usb usb5-port1: attempt power cycle [ 537.208566][ T4234] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 537.576223][ T4234] usbhid 7-1:0.0: can't add hid device: -71 [ 537.595874][ T4234] usbhid: probe of 7-1:0.0 failed with error -71 [ 537.612468][ T7] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 537.698176][ T4234] usb 7-1: USB disconnect, device number 52 [ 537.749779][ T7] usb 5-1: device descriptor read/8, error -71 [ 538.050026][T12903] binder: 12901:12903 ioctl 402c5828 2000000003c0 returned -22 [ 538.058349][ T7] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 538.129873][T12904] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 538.209907][ T7] usb 5-1: device descriptor read/8, error -71 [ 539.103972][ T7] usb usb5-port1: unable to enumerate USB device [ 540.697215][ T1323] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 540.959426][ T1323] usb 8-1: device descriptor read/64, error -71 [ 541.080774][T12928] binder: 12927:12928 unknown command 0 [ 541.134007][T12928] binder: 12927:12928 ioctl c0306201 2000000004c0 returned -22 [ 541.250005][ T1323] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 541.311997][T12929] FAULT_INJECTION: forcing a failure. [ 541.311997][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 541.325923][T12929] CPU: 0 PID: 12929 Comm: syz.4.2838 Not tainted syzkaller #0 [ 541.333376][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 541.343410][T12929] Call Trace: [ 541.346670][T12929] [ 541.349587][T12929] dump_stack_lvl+0x188/0x250 [ 541.354246][T12929] ? show_regs_print_info+0x20/0x20 [ 541.359418][T12929] ? load_image+0x410/0x410 [ 541.363904][T12929] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 541.369865][T12929] should_fail+0x383/0x4b0 [ 541.374261][T12929] should_failslab+0x5/0x20 [ 541.378742][T12929] slab_pre_alloc_hook+0x51/0xc0 [ 541.383656][T12929] __kmalloc+0x6b/0x340 [ 541.387787][T12929] ? hash_ip4_add+0x14a4/0x1ef0 [ 541.392702][T12929] hash_ip4_add+0x14a4/0x1ef0 [ 541.397366][T12929] hash_ip4_uadt+0x680/0x8a0 [ 541.401932][T12929] ? hash_ip4_uadt+0x8a0/0x8a0 [ 541.406670][T12929] ? hash_ip4_kadt+0x4b0/0x4b0 [ 541.411420][T12929] call_ad+0x182/0x9a0 [ 541.415468][T12929] ? __nla_validate+0x50/0x50 [ 541.420137][T12929] ? ip_set_ad+0x9c0/0x9c0 [ 541.424534][T12929] ? __nla_parse+0x3c/0x50 [ 541.428925][T12929] ip_set_ad+0x816/0x9c0 [ 541.433146][T12929] ? ip_set_dump_done+0x2f0/0x2f0 [ 541.438161][T12929] nfnetlink_rcv_msg+0xbf7/0x1180 [ 541.443220][T12929] ? arch_stack_walk+0xf2/0x140 [ 541.448107][T12929] ? nfnetlink_bind+0x280/0x280 [ 541.452954][T12929] netlink_rcv_skb+0x1e9/0x430 [ 541.457754][T12929] ? nfnetlink_bind+0x280/0x280 [ 541.462581][T12929] ? netlink_ack+0xb10/0xb10 [ 541.467151][T12929] ? bpf_lsm_capable+0x5/0x10 [ 541.471800][T12929] ? security_capable+0x85/0xb0 [ 541.476646][T12929] nfnetlink_rcv+0x2b4/0x2450 [ 541.481319][T12929] ? __local_bh_enable_ip+0x136/0x1c0 [ 541.486727][T12929] ? lockdep_hardirqs_on+0x94/0x140 [ 541.491914][T12929] ? __local_bh_enable_ip+0x136/0x1c0 [ 541.497276][T12929] ? _local_bh_enable+0xa0/0xa0 [ 541.502118][T12929] ? __dev_queue_xmit+0x1b64/0x2e50 [ 541.507297][T12929] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 541.512829][T12929] ? dev_queue_xmit+0x20/0x20 [ 541.517483][T12929] ? memcpy+0x3c/0x60 [ 541.521446][T12929] ? __copy_skb_header+0x3ba/0x4f0 [ 541.526545][T12929] ? skb_clone+0x1f1/0x350 [ 541.530944][T12929] ? rcu_lock_release+0x5/0x20 [ 541.535699][T12929] ? __lock_acquire+0x7b50/0x7b50 [ 541.540834][T12929] netlink_unicast+0x78f/0x940 [ 541.545594][T12929] netlink_sendmsg+0x8ba/0xbe0 [ 541.550344][T12929] ? netlink_getsockopt+0x570/0x570 [ 541.555524][T12929] ? aa_sock_msg_perm+0x94/0x150 [ 541.560505][T12929] ? apparmor_socket_sendmsg+0x173/0x230 [ 541.566144][T12929] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 541.571412][T12929] ? security_socket_sendmsg+0x7c/0xa0 [ 541.576847][T12929] ? netlink_getsockopt+0x570/0x570 [ 541.582026][T12929] ____sys_sendmsg+0x5be/0x8f0 [ 541.586772][T12929] ? __sys_sendmsg_sock+0x30/0x30 [ 541.591774][T12929] ? import_iovec+0x6f/0xa0 [ 541.596274][T12929] ___sys_sendmsg+0x236/0x2e0 [ 541.600936][T12929] ? __sys_sendmsg+0x290/0x290 [ 541.605692][T12929] __se_sys_sendmsg+0x1b7/0x2a0 [ 541.610523][T12929] ? __x64_sys_sendmsg+0x80/0x80 [ 541.615432][T12929] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 541.621393][T12929] ? lockdep_hardirqs_on+0x94/0x140 [ 541.626569][T12929] do_syscall_64+0x4c/0xa0 [ 541.630959][T12929] ? clear_bhb_loop+0x30/0x80 [ 541.635621][T12929] ? clear_bhb_loop+0x30/0x80 [ 541.640290][T12929] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.646162][T12929] RIP: 0033:0x7f3ee4088159 [ 541.650557][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.670144][T12929] RSP: 002b:00007f3ee22e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.678536][T12929] RAX: ffffffffffffffda RBX: 00007f3ee430ffa0 RCX: 00007f3ee4088159 [ 541.686486][T12929] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000007 [ 541.694434][T12929] RBP: 00007f3ee411f03b R08: 0000000000000000 R09: 0000000000000000 [ 541.702378][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.710325][T12929] R13: 00007f3ee4310038 R14: 00007f3ee430ffa0 R15: 00007ffe0551f468 [ 541.718285][T12929] [ 541.813583][ T13] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 541.901793][ T1323] usb 8-1: device descriptor read/64, error -71 [ 542.033241][ T1323] usb usb8-port1: attempt power cycle [ 542.085961][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 542.216277][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 542.248919][ T7] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 542.422417][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 542.455461][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 542.476834][ T13] usb 4-1: Product: syz [ 542.487099][ T1323] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 542.495365][ T13] usb 4-1: Manufacturer: syz [ 542.506176][ T13] usb 4-1: SerialNumber: syz [ 542.512937][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 542.539193][ T13] usb 4-1: config 0 descriptor?? [ 542.573180][T12931] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 542.595772][ T1323] usb 8-1: device descriptor read/8, error -71 [ 542.663159][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.712162][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.744843][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.765862][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.799168][ T7] usb 7-1: config 0 descriptor?? [ 542.854756][ T7] hub 7-1:0.0: USB hub found [ 542.891498][ T1323] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 543.006736][ T1323] usb 8-1: device descriptor read/8, error -71 [ 543.149990][ T1323] usb usb8-port1: unable to enumerate USB device [ 543.171245][ T7] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 543.375612][T12942] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 543.426455][T12942] kvm: pic: non byte read [ 543.449449][T12942] kvm: pic: level sensitive irq not supported [ 543.456924][T12942] kvm: pic: non byte read [ 543.491123][T12942] kvm: pic: level sensitive irq not supported [ 543.491525][T12942] kvm: pic: non byte read [ 543.524256][T12942] kvm: pic: level sensitive irq not supported [ 543.524557][T12942] kvm: pic: non byte read [ 543.561720][ T7] usbhid 7-1:0.0: can't add hid device: -71 [ 543.573030][ T7] usbhid: probe of 7-1:0.0 failed with error -71 [ 543.587303][T12942] kvm: pic: level sensitive irq not supported [ 543.587720][T12942] kvm: pic: non byte read [ 543.660413][T12942] kvm: pic: level sensitive irq not supported [ 543.660815][T12942] kvm: pic: non byte read [ 543.680341][ T7] usb 7-1: USB disconnect, device number 53 [ 543.774118][T12942] kvm: pic: level sensitive irq not supported [ 543.774382][T12942] kvm: pic: non byte read [ 543.832826][T12942] kvm: pic: level sensitive irq not supported [ 543.833155][T12942] kvm: pic: non byte read [ 543.868650][T12942] kvm: pic: level sensitive irq not supported [ 543.868772][T12942] kvm: pic: non byte read [ 544.100300][ T13] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 544.162520][T12949] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 544.332931][ T4229] usb 4-1: USB disconnect, device number 93 [ 544.349350][ T13] usb 5-1: device descriptor read/64, error -71 [ 545.055251][ T13] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 546.364162][T12957] FAULT_INJECTION: forcing a failure. [ 546.364162][T12957] name failslab, interval 1, probability 0, space 0, times 0 [ 546.475536][T12957] CPU: 0 PID: 12957 Comm: syz.6.2847 Not tainted syzkaller #0 [ 546.483011][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 546.493047][T12957] Call Trace: [ 546.496329][T12957] [ 546.499243][T12957] dump_stack_lvl+0x188/0x250 [ 546.503910][T12957] ? show_regs_print_info+0x20/0x20 [ 546.509088][T12957] ? load_image+0x410/0x410 [ 546.513588][T12957] ? __might_sleep+0xf0/0xf0 [ 546.518164][T12957] ? __lock_acquire+0x7b50/0x7b50 [ 546.523171][T12957] should_fail+0x383/0x4b0 [ 546.527751][T12957] should_failslab+0x5/0x20 [ 546.532230][T12957] slab_pre_alloc_hook+0x51/0xc0 [ 546.537146][T12957] ? security_file_alloc+0x30/0x110 [ 546.542326][T12957] kmem_cache_alloc+0x3d/0x280 [ 546.547064][T12957] ? rcu_is_watching+0x11/0xa0 [ 546.551876][T12957] security_file_alloc+0x30/0x110 [ 546.556880][T12957] __alloc_file+0xc2/0x240 [ 546.561293][T12957] alloc_empty_file+0x90/0x180 [ 546.566050][T12957] alloc_file+0x5c/0x510 [ 546.570278][T12957] ? do_raw_spin_unlock+0x11d/0x230 [ 546.575459][T12957] alloc_file_pseudo+0x180/0x200 [ 546.580378][T12957] ? alloc_empty_file_noaccount+0x80/0x80 [ 546.586081][T12957] ? alloc_fd+0x59e/0x650 [ 546.590400][T12957] sock_alloc_file+0xb3/0x240 [ 546.595064][T12957] __sys_socket+0x11d/0x170 [ 546.599559][T12957] __x64_sys_socket+0x76/0x80 [ 546.604257][T12957] do_syscall_64+0x4c/0xa0 [ 546.608655][T12957] ? clear_bhb_loop+0x30/0x80 [ 546.613315][T12957] ? clear_bhb_loop+0x30/0x80 [ 546.617978][T12957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 546.623860][T12957] RIP: 0033:0x7f397d4a9159 [ 546.628269][T12957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.647860][T12957] RSP: 002b:00007f397b701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 546.656255][T12957] RAX: ffffffffffffffda RBX: 00007f397d730fa0 RCX: 00007f397d4a9159 [ 546.664227][T12957] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 546.672176][T12957] RBP: 00007f397d54003b R08: 0000000000000000 R09: 0000000000000000 [ 546.680129][T12957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.688078][T12957] R13: 00007f397d731038 R14: 00007f397d730fa0 R15: 00007ffd7c3875e8 [ 546.696036][T12957] [ 546.856066][ T13] usb 5-1: device descriptor read/64, error -71 [ 548.978239][ T13] usb usb5-port1: attempt power cycle [ 549.544318][ T13] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 549.811524][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.854657][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 549.898038][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 549.912712][ T7] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 549.964527][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 550.020939][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 550.169005][ T7] usb 4-1: device descriptor read/64, error -71 [ 550.277381][ T13] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 550.304156][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.350790][ T13] usb 5-1: Product: syz [ 550.364023][ T13] usb 5-1: Manufacturer: syz [ 550.380039][ T13] usb 5-1: SerialNumber: syz [ 550.423234][T12970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 550.474876][T12970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 550.483524][ T7] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 550.532683][T12970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 550.617065][ T13] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 550.625017][ T1323] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 550.634318][T12990] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 550.656790][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 550.678280][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 550.707375][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 550.721823][ T7] usb 4-1: device descriptor read/64, error -71 [ 550.761309][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 550.790399][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 550.802789][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 550.812594][ T13] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 550.826903][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 550.835485][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 550.847702][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 550.859996][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 550.873528][ T7] usb usb4-port1: attempt power cycle [ 550.879460][ T13] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 550.888010][ T1323] usb 8-1: Using ep0 maxpacket: 32 [ 550.917782][ T13] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 551.014297][ T1323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.054768][ T1323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.086558][ T1323] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.111374][ T1323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.141668][ T1323] usb 8-1: config 0 descriptor?? [ 551.210206][ T1323] hub 8-1:0.0: USB hub found [ 551.218413][ T4231] usb 5-1: USB disconnect, device number 127 [ 551.268245][ T4231] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 551.303973][ T4231] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 551.323217][ T4231] keyspan 5-1:1.0: device disconnected [ 551.350125][ T7] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 551.466534][ T7] usb 4-1: device descriptor read/8, error -71 [ 551.534481][ T1323] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 551.545191][ T13] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 551.751094][ T13] usb 7-1: device descriptor read/64, error -71 [ 551.783633][ T7] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 551.794597][ T4234] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 551.896067][ T7] usb 4-1: device descriptor read/8, error -71 [ 551.902850][ T1323] usbhid 8-1:0.0: can't add hid device: -71 [ 551.912013][ T1323] usbhid: probe of 8-1:0.0 failed with error -71 [ 551.957750][ T1323] usb 8-1: USB disconnect, device number 55 [ 552.043906][ T13] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 552.052169][ T7] usb usb4-port1: unable to enumerate USB device [ 552.210373][ T4234] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.275178][ T13] usb 7-1: device descriptor read/64, error -71 [ 552.326457][ T4234] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.423338][ T13] usb usb7-port1: attempt power cycle [ 552.522325][ T4234] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 552.563295][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.592875][ T4234] usb 2-1: Product: syz [ 552.606343][ T4234] usb 2-1: Manufacturer: syz [ 552.622789][ T4234] usb 2-1: SerialNumber: syz [ 552.696030][ T4234] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 552.745802][ T4234] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 552.811182][ T4234] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 552.889400][ T13] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 553.019268][ T13] usb 7-1: device descriptor read/8, error -71 [ 553.368147][ T13] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 553.417090][T13023] Config c1/1 of g1 needs at least one function. [ 553.436252][T13023] udc dummy_udc.0: failed to start g1: -22 [ 553.467868][T13010] FAULT_INJECTION: forcing a failure. [ 553.467868][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 553.481632][T13010] CPU: 0 PID: 13010 Comm: syz.3.2866 Not tainted syzkaller #0 [ 553.489100][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 553.499131][T13010] Call Trace: [ 553.502388][T13010] [ 553.505303][T13010] dump_stack_lvl+0x188/0x250 [ 553.509963][T13010] ? show_regs_print_info+0x20/0x20 [ 553.515144][T13010] ? load_image+0x410/0x410 [ 553.519648][T13010] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 553.525625][T13010] should_fail+0x383/0x4b0 [ 553.530023][T13010] should_failslab+0x5/0x20 [ 553.534519][T13010] slab_pre_alloc_hook+0x51/0xc0 [ 553.539446][T13010] __kmalloc+0x6b/0x340 [ 553.543577][T13010] ? hash_ip4_add+0xc68/0x1ef0 [ 553.548318][T13010] hash_ip4_add+0xc68/0x1ef0 [ 553.552904][T13010] hash_ip4_uadt+0x680/0x8a0 [ 553.557540][T13010] ? hash_ip4_uadt+0x8a0/0x8a0 [ 553.562420][T13010] ? hash_ip4_kadt+0x4b0/0x4b0 [ 553.567165][T13010] ? __local_bh_enable_ip+0x136/0x1c0 [ 553.572531][T13010] call_ad+0x387/0x9a0 [ 553.576598][T13010] ? ip_set_ad+0x9c0/0x9c0 [ 553.581007][T13010] ? __nla_parse+0x3c/0x50 [ 553.585418][T13010] ip_set_ad+0x816/0x9c0 [ 553.589651][T13010] ? ip_set_dump_done+0x2f0/0x2f0 [ 553.594668][T13010] nfnetlink_rcv_msg+0xbf7/0x1180 [ 553.599677][T13010] ? arch_stack_walk+0xf2/0x140 [ 553.604526][T13010] ? nfnetlink_bind+0x280/0x280 [ 553.609401][T13010] netlink_rcv_skb+0x1e9/0x430 [ 553.614160][T13010] ? nfnetlink_bind+0x280/0x280 [ 553.618992][T13010] ? netlink_ack+0xb10/0xb10 [ 553.623568][T13010] ? bpf_lsm_capable+0x5/0x10 [ 553.628232][T13010] ? security_capable+0x85/0xb0 [ 553.633069][T13010] nfnetlink_rcv+0x2b4/0x2450 [ 553.637730][T13010] ? __local_bh_enable_ip+0x136/0x1c0 [ 553.643079][T13010] ? lockdep_hardirqs_on+0x94/0x140 [ 553.648256][T13010] ? __local_bh_enable_ip+0x136/0x1c0 [ 553.653600][T13010] ? _local_bh_enable+0xa0/0xa0 [ 553.658428][T13010] ? __dev_queue_xmit+0x1b64/0x2e50 [ 553.663645][T13010] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 553.669173][T13010] ? dev_queue_xmit+0x20/0x20 [ 553.673823][T13010] ? memcpy+0x3c/0x60 [ 553.677779][T13010] ? __copy_skb_header+0x3ba/0x4f0 [ 553.682964][T13010] ? skb_clone+0x1f1/0x350 [ 553.687373][T13010] ? rcu_lock_release+0x5/0x20 [ 553.692128][T13010] ? __lock_acquire+0x7b50/0x7b50 [ 553.697253][T13010] netlink_unicast+0x78f/0x940 [ 553.702014][T13010] netlink_sendmsg+0x8ba/0xbe0 [ 553.706763][T13010] ? netlink_getsockopt+0x570/0x570 [ 553.711944][T13010] ? aa_sock_msg_perm+0x94/0x150 [ 553.716871][T13010] ? apparmor_socket_sendmsg+0x173/0x230 [ 553.722487][T13010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 553.727754][T13010] ? security_socket_sendmsg+0x7c/0xa0 [ 553.733207][T13010] ? netlink_getsockopt+0x570/0x570 [ 553.739107][T13010] ____sys_sendmsg+0x5be/0x8f0 [ 553.743867][T13010] ? __sys_sendmsg_sock+0x30/0x30 [ 553.748874][T13010] ? import_iovec+0x6f/0xa0 [ 553.753358][T13010] ___sys_sendmsg+0x236/0x2e0 [ 553.758017][T13010] ? __sys_sendmsg+0x290/0x290 [ 553.762777][T13010] __se_sys_sendmsg+0x1b7/0x2a0 [ 553.767610][T13010] ? __x64_sys_sendmsg+0x80/0x80 [ 553.772521][T13010] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 553.778497][T13010] ? lockdep_hardirqs_on+0x94/0x140 [ 553.783675][T13010] do_syscall_64+0x4c/0xa0 [ 553.788080][T13010] ? clear_bhb_loop+0x30/0x80 [ 553.792738][T13010] ? clear_bhb_loop+0x30/0x80 [ 553.797394][T13010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.803262][T13010] RIP: 0033:0x7f27aa51c159 [ 553.807661][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.827242][T13010] RSP: 002b:00007f27a8774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.835654][T13010] RAX: ffffffffffffffda RBX: 00007f27aa7a3fa0 RCX: 00007f27aa51c159 [ 553.843601][T13010] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000007 [ 553.851549][T13010] RBP: 00007f27aa5b303b R08: 0000000000000000 R09: 0000000000000000 [ 553.859498][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.867443][T13010] R13: 00007f27aa7a4038 R14: 00007f27aa7a3fa0 R15: 00007fffd0fab3f8 [ 553.875418][T13010] [ 553.932902][ T13] usb 7-1: device descriptor read/8, error -71 [ 554.021113][ T4229] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 554.062249][ T13] usb usb7-port1: unable to enumerate USB device [ 554.311990][ T4229] usb 8-1: Using ep0 maxpacket: 8 [ 554.402316][T13039] FAULT_INJECTION: forcing a failure. [ 554.402316][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 554.471319][ T4229] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 554.480238][T13039] CPU: 0 PID: 13039 Comm: syz.3.2875 Not tainted syzkaller #0 [ 554.487683][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 554.497802][T13039] Call Trace: [ 554.501078][T13039] [ 554.503990][T13039] dump_stack_lvl+0x188/0x250 [ 554.508654][T13039] ? show_regs_print_info+0x20/0x20 [ 554.513829][T13039] ? load_image+0x410/0x410 [ 554.518333][T13039] ? __might_sleep+0xf0/0xf0 [ 554.522908][T13039] ? __lock_acquire+0x7b50/0x7b50 [ 554.527925][T13039] should_fail+0x383/0x4b0 [ 554.532321][T13039] should_failslab+0x5/0x20 [ 554.536816][T13039] slab_pre_alloc_hook+0x51/0xc0 [ 554.541732][T13039] kmem_cache_alloc_trace+0x47/0x290 [ 554.546989][T13039] ? ntfs_init_fs_context+0x1d1/0x490 [ 554.552364][T13039] ntfs_init_fs_context+0x1d1/0x490 [ 554.557606][T13039] alloc_fs_context+0x628/0x7d0 [ 554.562523][T13039] __se_sys_fsopen+0x111/0x320 [ 554.567277][T13039] do_syscall_64+0x4c/0xa0 [ 554.571692][T13039] ? clear_bhb_loop+0x30/0x80 [ 554.576352][T13039] ? clear_bhb_loop+0x30/0x80 [ 554.581012][T13039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.586884][T13039] RIP: 0033:0x7f27aa51c159 [ 554.591285][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.610875][T13039] RSP: 002b:00007f27a8774028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 554.619285][T13039] RAX: ffffffffffffffda RBX: 00007f27aa7a3fa0 RCX: 00007f27aa51c159 [ 554.627248][T13039] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 554.635208][T13039] RBP: 00007f27aa5b303b R08: 0000000000000000 R09: 0000000000000000 [ 554.643166][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.651207][T13039] R13: 00007f27aa7a4038 R14: 00007f27aa7a3fa0 R15: 00007fffd0fab3f8 [ 554.659268][T13039] [ 554.686608][ T4229] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.701882][ T4229] usb 8-1: config 0 has no interface number 0 [ 554.708396][ T4229] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 554.724281][ T4229] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 554.734540][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.756669][ T4229] usb 8-1: config 0 descriptor?? [ 554.797921][ T4229] ldusb 8-1:0.55: Interrupt in endpoint not found [ 554.829013][ T13] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 555.033727][ T4234] usb 8-1: USB disconnect, device number 56 [ 555.143279][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 555.240874][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.256145][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 555.267369][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 555.283984][ T13] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 555.299244][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 555.371551][ T4229] usb 5-1: device descriptor read/64, error -71 [ 555.479159][ T13] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 555.488787][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.533200][ T13] usb 7-1: Product: syz [ 555.537716][ T13] usb 7-1: Manufacturer: syz [ 555.556189][T13061] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2882'. [ 555.569638][ T13] usb 7-1: SerialNumber: syz [ 555.598623][T13037] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 555.628241][T13037] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 555.657236][T13037] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 555.665733][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 555.691813][T13061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.729302][ T13] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 555.767541][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 87 [ 555.791056][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 555.813214][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 555.822282][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 555.842548][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 85 [ 555.869159][ T4229] usb 5-1: device descriptor read/64, error -71 [ 555.887451][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 555.910675][ T13] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 555.938613][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 555.950165][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 555.974493][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 555.986105][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 86 [ 555.997928][ T13] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 556.018628][ T13] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 556.027604][ T4229] usb usb5-port1: attempt power cycle [ 556.128076][T13061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.208924][T13061] bond0 (unregistering): Released all slaves [ 556.271368][ C0] usb 2-1: ti_interrupt_callback - nonzero urb status, -71 [ 556.279420][ T4234] usb 2-1: USB disconnect, device number 127 [ 556.286954][T12999] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -71 [ 556.304233][ C0] usb 2-1: ti_interrupt_callback - nonzero urb status, -71 [ 556.311435][ C0] usb 2-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 556.360887][ T4234] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 556.424783][ T4234] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 556.453191][ T4234] ti_usb_3410_5052 2-1:2.0: device disconnected [ 556.479734][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 556.509755][ T1323] usb 7-1: USB disconnect, device number 58 [ 556.540924][ T1323] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 556.580643][ T1323] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 556.600779][ T4229] usb 5-1: device descriptor read/8, error -71 [ 556.613772][ T1323] keyspan 7-1:1.0: device disconnected [ 556.765384][T13066] Config c1/1 of g1 needs at least one function. [ 556.777581][T13066] udc dummy_udc.0: failed to start g1: -22 [ 556.911114][ T4229] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 557.050543][ T4229] usb 5-1: device descriptor read/8, error -71 [ 557.137853][T13072] FAULT_INJECTION: forcing a failure. [ 557.137853][T13072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.202302][ T4229] usb usb5-port1: unable to enumerate USB device [ 557.312853][T13072] CPU: 0 PID: 13072 Comm: syz.1.2885 Not tainted syzkaller #0 [ 557.320342][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 557.330387][T13072] Call Trace: [ 557.333649][T13072] [ 557.336558][T13072] dump_stack_lvl+0x188/0x250 [ 557.341249][T13072] ? show_regs_print_info+0x20/0x20 [ 557.346425][T13072] ? load_image+0x410/0x410 [ 557.350907][T13072] ? __lock_acquire+0x7b50/0x7b50 [ 557.355919][T13072] should_fail+0x383/0x4b0 [ 557.360333][T13072] prepare_alloc_pages+0x1e3/0x5b0 [ 557.365516][T13072] __alloc_pages+0x11b/0x480 [ 557.370109][T13072] ? zone_statistics+0x170/0x170 [ 557.375028][T13072] ? up_write+0x1b6/0x410 [ 557.379338][T13072] alloc_pages_vma+0x2bc/0x790 [ 557.384100][T13072] handle_mm_fault+0x23be/0x4440 [ 557.389084][T13072] ? get_page+0xe0/0xe0 [ 557.393222][T13072] ? follow_page_mask+0x272/0x12b0 [ 557.398573][T13072] ? vma_is_secretmem+0x9/0x40 [ 557.403356][T13072] ? check_vma_flags+0x359/0x470 [ 557.408273][T13072] __get_user_pages+0x952/0x11e0 [ 557.413197][T13072] ? populate_vma_page_range+0x290/0x290 [ 557.418916][T13072] ? __might_sleep+0xf0/0xf0 [ 557.423483][T13072] ? read_lock_is_recursive+0x10/0x10 [ 557.428843][T13072] __get_user_pages_remote+0x1c2/0x730 [ 557.434288][T13072] ? get_user_pages_remote+0x55/0xa0 [ 557.439558][T13072] get_arg_page+0x11b/0x350 [ 557.444041][T13072] ? copy_string_kernel+0x280/0x280 [ 557.449213][T13072] ? up_write+0x1b6/0x410 [ 557.453552][T13072] copy_string_kernel+0x14d/0x280 [ 557.458554][T13072] do_execveat_common+0x360/0x6b0 [ 557.463560][T13072] __x64_sys_execve+0x8e/0xa0 [ 557.468214][T13072] do_syscall_64+0x4c/0xa0 [ 557.472609][T13072] ? clear_bhb_loop+0x30/0x80 [ 557.477262][T13072] ? clear_bhb_loop+0x30/0x80 [ 557.481928][T13072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.487797][T13072] RIP: 0033:0x7ff1801b3159 [ 557.492191][T13072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.511777][T13072] RSP: 002b:00007ff17e40b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 557.520170][T13072] RAX: ffffffffffffffda RBX: 00007ff18043afa0 RCX: 00007ff1801b3159 [ 557.528118][T13072] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 557.536066][T13072] RBP: 00007ff18024a03b R08: 0000000000000000 R09: 0000000000000000 [ 557.544011][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.551963][T13072] R13: 00007ff18043b038 R14: 00007ff18043afa0 R15: 00007ffe3d86a058 [ 557.559921][T13072] [ 557.807018][T13082] loop6: detected capacity change from 0 to 128 [ 557.900903][T13082] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 558.350988][ T1323] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 558.591229][ T4517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.611014][ T4229] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 558.681309][ T4517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.719494][ T1323] usb 7-1: not running at top speed; connect to a high speed hub [ 558.761084][T13091] chnl_net:caif_netlink_parms(): no params data found [ 558.811760][ T4517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.827983][ T1323] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.893710][ T4229] usb 8-1: Using ep0 maxpacket: 8 [ 558.924366][ T4517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.984318][ T1323] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 559.026491][ T1323] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 559.036016][ T4229] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.076571][ T4229] usb 8-1: config 179 has no interface number 0 [ 559.084371][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.100889][ T1323] usb 7-1: Product: syz [ 559.116388][ T4229] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.136325][ T1323] usb 7-1: Manufacturer: syz [ 559.142185][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.178549][T13091] device bridge_slave_0 entered promiscuous mode [ 559.197107][ T4229] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.222322][ T1323] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 559.244284][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.266264][ T4229] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.278874][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.310102][T13091] device bridge_slave_1 entered promiscuous mode [ 559.317369][ T4229] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 559.344053][ T4229] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 559.377957][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.394541][ T4229] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 559.418310][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.431666][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.478117][ T1323] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 559.521477][T13090] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 559.561516][T13091] team0: Port device team_slave_0 added [ 559.569797][ T1323] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 559.609439][ T4229] xpad: probe of 8-1:179.65 failed with error -5 [ 559.640143][ T1323] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 559.691957][ T1323] usb 7-1: USB disconnect, device number 59 [ 559.763047][T13091] team0: Port device team_slave_1 added [ 559.849805][ T7] usb 8-1: USB disconnect, device number 57 [ 559.923815][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.987608][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.017186][T13079] infiniband syz1: set active [ 560.037752][T13079] infiniband syz1: added syz_tun [ 560.067036][ T4229] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 560.126661][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.199781][T13079] RDS/IB: syz1: added [ 560.254837][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.291914][T13079] smc: adding ib device syz1 with port count 1 [ 560.355785][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 560.365792][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.399653][T13079] smc: ib device syz1 port 1 has pnetid [ 560.507703][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 560.555254][ T7637] Bluetooth: hci3: command 0x0409 tx timeout [ 560.563143][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.724357][ T4229] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.745986][ T7] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 560.775889][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.819119][ T4229] usb 5-1: Product: syz [ 560.841797][ T4229] usb 5-1: Manufacturer: syz [ 560.865212][ T7637] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 560.874062][ T4229] usb 5-1: SerialNumber: syz [ 560.914826][ T4229] usb 5-1: config 0 descriptor?? [ 560.959499][T13091] device hsr_slave_0 entered promiscuous mode [ 560.985985][ T4229] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 561.024882][ T4229] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 561.056267][T13091] device hsr_slave_1 entered promiscuous mode [ 561.087099][T13091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.115280][T13091] Cannot create hsr debugfs directory [ 561.136242][ T7] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.238234][ T7] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.255306][ T7637] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 561.298696][ T7637] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 561.374835][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 561.459606][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 561.504662][ T7] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 561.537093][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 561.564271][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.595120][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 561.613103][ T7] usb 7-1: Product: syz [ 561.617568][ T7] usb 7-1: Manufacturer: syz [ 561.643945][ T7] usb 7-1: SerialNumber: syz [ 561.653762][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 561.683864][ T4229] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 561.716245][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 561.739944][ T7] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 561.758481][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 561.788556][ T7] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 561.802308][ T7637] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 561.832241][ T7] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 561.851031][ T7637] usb 8-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 562.111923][ T7637] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 562.159635][ T7637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.223415][ T7637] usb 8-1: Product: syz [ 562.227887][ T7637] usb 8-1: Manufacturer: syz [ 562.268039][ T7637] usb 8-1: SerialNumber: syz [ 562.278416][ T4229] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 562.321452][ T4229] em28xx 5-1:0.0: board has no eeprom [ 562.339226][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.368682][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.439739][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.507829][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.567525][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.575009][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.695759][T13114] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 562.761756][ T4229] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 562.795533][ T7637] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 562.818420][ T4229] em28xx 5-1:0.0: dvb set to bulk mode. [ 562.836654][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 562.887091][ T4229] usb 5-1: USB disconnect, device number 6 [ 562.912774][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 562.932930][ T4229] em28xx 5-1:0.0: Disconnecting em28xx [ 562.939905][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 562.953494][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 562.964571][ T7637] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 562.985036][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 563.001405][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 563.009669][ T7637] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 563.024350][ T7637] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 563.071745][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 563.125402][ T7] em28xx 5-1:0.0: Binding DVB extension [ 563.247968][T13091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.310464][T13091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.343957][ T7] em28xx 5-1:0.0: Registering input extension [ 563.388674][ T4229] em28xx 5-1:0.0: Closing input extension [ 563.644917][ T4229] em28xx 5-1:0.0: Freeing device [ 563.717254][T13091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.770101][T13152] Config c1/1 of g1 needs at least one function. [ 563.795097][T13091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.842035][T13152] udc dummy_udc.0: failed to start g1: -22 [ 564.139487][ T4229] usb 8-1: USB disconnect, device number 58 [ 564.189243][T13091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.207737][ T4229] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 564.278733][ C0] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 564.287226][T13109] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -71 [ 564.341596][ T7637] usb 7-1: USB disconnect, device number 60 [ 564.354484][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.374770][ T4229] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 564.419965][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.452419][ T7637] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 564.486524][ T4229] keyspan 8-1:1.0: device disconnected [ 564.511097][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.589527][T13162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 564.602142][ T7637] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 564.758253][ T7637] ti_usb_3410_5052 7-1:2.0: device disconnected [ 564.797245][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.907755][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.916665][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.924179][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.585322][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 567.005537][ T7637] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 567.298376][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 567.384436][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 567.405223][T13187] loop4: detected capacity change from 0 to 128 [ 567.453701][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.461370][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.480724][T13187] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 567.612932][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 567.681360][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 567.725196][ T7637] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.793273][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 567.843839][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 567.918381][ T7637] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 567.967128][ T7637] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 568.026190][ T4517] device hsr_slave_0 left promiscuous mode [ 568.045691][ T4517] device hsr_slave_1 left promiscuous mode [ 568.068615][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.095535][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.121400][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.153359][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.178880][ T4517] device bridge_slave_1 left promiscuous mode [ 568.187508][ T7637] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 568.197187][ T4231] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 568.219449][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.230690][ T7637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.242520][ T7637] usb 8-1: Product: syz [ 568.250383][ T7637] usb 8-1: Manufacturer: syz [ 568.265750][ T7637] usb 8-1: SerialNumber: syz [ 568.300307][ T4517] device bridge_slave_0 left promiscuous mode [ 568.310319][ T4229] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 568.318731][ T7637] usb 8-1: can't set config #1, error -71 [ 568.344310][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.370161][ T7637] usb 8-1: USB disconnect, device number 59 [ 568.433218][ T4517] device veth1_macvtap left promiscuous mode [ 568.465160][ T4517] device veth0_macvtap left promiscuous mode [ 568.487205][ T4517] device veth1_vlan left promiscuous mode [ 568.525268][ T4517] device veth0_vlan left promiscuous mode [ 568.561755][ T4231] usb 5-1: not running at top speed; connect to a high speed hub [ 568.678935][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.748352][ T4229] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 568.780043][ T4229] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 568.815515][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 568.848192][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 568.862819][ T4231] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 568.872418][ T4231] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 568.903196][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 568.927555][ T4231] usb 5-1: Product: syz [ 568.943261][ T4231] usb 5-1: Manufacturer: syz [ 568.952851][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 568.998083][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 569.029685][ T4231] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 569.049654][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 569.081882][ T4229] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 569.114454][ T4229] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 569.151572][ T4229] usb 7-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 569.275031][ T4231] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 569.312930][ T4231] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 569.359127][ T4231] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 569.367507][ T4229] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 569.393114][ T4229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.430643][ T4231] usb 5-1: USB disconnect, device number 7 [ 569.454159][ T4229] usb 7-1: Product: syz [ 569.458631][ T4229] usb 7-1: Manufacturer: syz [ 569.495915][ T4229] usb 7-1: SerialNumber: syz [ 569.545789][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.558462][ T4517] bond1 (unregistering): Released all slaves [ 569.579597][ T7637] Bluetooth: hci3: command 0x0419 tx timeout [ 569.586533][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.616109][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.670405][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.711774][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.744445][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.777002][T13203] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 569.851555][ T4229] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 569.876622][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 569.894425][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 569.910811][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 569.922778][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 569.933259][ T4229] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 569.944912][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 569.955214][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 569.964785][ T4229] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 569.975355][ T4229] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 570.017627][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 570.083979][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 570.345490][ T4231] usb 7-1: USB disconnect, device number 61 [ 570.362195][ T4231] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 570.377554][ T4231] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 570.394065][ T4231] keyspan 7-1:1.0: device disconnected [ 570.446532][T13191] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2905'. [ 570.483042][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.498772][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.516990][T13191] bond0 (unregistering): Released all slaves [ 570.526956][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.539971][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.551784][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.562983][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.573646][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.589952][T13091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.600670][ T4229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 570.612210][T13091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.625135][T13216] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 570.644395][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 570.677430][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.752687][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.780011][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.823579][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.864460][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 570.999635][ T4229] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 571.117195][ T4229] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 571.138680][ T4234] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 571.182829][T13238] FAULT_INJECTION: forcing a failure. [ 571.182829][T13238] name failslab, interval 1, probability 0, space 0, times 0 [ 571.256804][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.278744][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.291233][T13238] CPU: 0 PID: 13238 Comm: syz.6.2920 Not tainted syzkaller #0 [ 571.298697][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 571.308732][T13238] Call Trace: [ 571.311991][T13238] [ 571.314904][T13238] dump_stack_lvl+0x188/0x250 [ 571.319567][T13238] ? show_regs_print_info+0x20/0x20 [ 571.324749][T13238] ? load_image+0x410/0x410 [ 571.329230][T13238] ? __lock_acquire+0x7b50/0x7b50 [ 571.334259][T13238] should_fail+0x383/0x4b0 [ 571.338658][T13238] should_failslab+0x5/0x20 [ 571.343137][T13238] slab_pre_alloc_hook+0x51/0xc0 [ 571.348049][T13238] ? prepare_creds+0x3c/0x610 [ 571.352767][T13238] kmem_cache_alloc+0x3d/0x280 [ 571.357514][T13238] prepare_creds+0x3c/0x610 [ 571.361992][T13238] prepare_exec_creds+0x14/0x220 [ 571.366908][T13238] bprm_execve+0xf1/0x1740 [ 571.371304][T13238] ? get_arg_page+0x2b6/0x350 [ 571.375963][T13238] ? copy_string_kernel+0x280/0x280 [ 571.381136][T13238] ? up_write+0x1b6/0x410 [ 571.385445][T13238] ? copy_strings+0x411/0x4b0 [ 571.390119][T13238] ? alloc_bprm+0x690/0x690 [ 571.394613][T13238] ? put_arg_page+0xe1/0x200 [ 571.399179][T13238] ? copy_string_kernel+0x26c/0x280 [ 571.404351][T13238] do_execveat_common+0x504/0x6b0 [ 571.409356][T13238] __x64_sys_execve+0x8e/0xa0 [ 571.414008][T13238] do_syscall_64+0x4c/0xa0 [ 571.418399][T13238] ? clear_bhb_loop+0x30/0x80 [ 571.423050][T13238] ? clear_bhb_loop+0x30/0x80 [ 571.427733][T13238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 571.433605][T13238] RIP: 0033:0x7f397d4a9159 [ 571.438000][T13238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.457595][T13238] RSP: 002b:00007f397b701028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 571.466002][T13238] RAX: ffffffffffffffda RBX: 00007f397d730fa0 RCX: 00007f397d4a9159 [ 571.473948][T13238] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 571.481894][T13238] RBP: 00007f397d54003b R08: 0000000000000000 R09: 0000000000000000 [ 571.489840][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.497788][T13238] R13: 00007f397d731038 R14: 00007f397d730fa0 R15: 00007ffd7c3875e8 [ 571.505762][T13238] [ 571.539192][T13091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.574902][ T4229] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 571.586781][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.603292][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.614330][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.631096][ T4229] usb 5-1: Product: syz [ 571.639945][ T4234] usb 8-1: Using ep0 maxpacket: 32 [ 571.648668][ T4229] usb 5-1: Manufacturer: syz [ 571.657964][ T4229] usb 5-1: SerialNumber: syz [ 571.705528][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.715479][ T4229] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 571.742269][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.758360][ T4229] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 571.767316][ T4234] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 571.800155][T13091] device veth0_vlan entered promiscuous mode [ 571.817305][ T4229] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 571.832781][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.853558][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.925898][T13091] device veth1_vlan entered promiscuous mode [ 571.986975][ T4234] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 572.021070][ T4234] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 572.038708][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 572.063212][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.080381][ T4234] usb 8-1: Product: syz [ 572.103273][ T4234] usb 8-1: Manufacturer: syz [ 572.107879][ T4234] usb 8-1: SerialNumber: syz [ 572.125514][T13091] device veth0_macvtap entered promiscuous mode [ 572.156899][ T4234] usb 8-1: config 0 descriptor?? [ 572.167399][T13091] device veth1_macvtap entered promiscuous mode [ 572.202598][T13226] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 572.241983][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.297602][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.335698][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.371141][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.410758][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.455777][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.496336][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.542723][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.586298][T13091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.605567][T13243] rdma_rxe: rxe_register_device failed with error -23 [ 572.628882][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.652865][T13243] rdma_rxe: failed to add syz_tun [ 572.661410][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.702922][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.746847][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.799689][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.843119][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.881796][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.928467][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.967385][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.002469][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.056614][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.087225][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.136964][T13091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.196616][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 573.215377][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 573.238484][T13091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.259410][T13091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.280348][T13091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.303456][T13091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.419942][ T7] usb 8-1: USB disconnect, device number 60 [ 573.429815][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.461951][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.480823][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 573.488359][ T7637] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 573.516714][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 573.540361][ T4632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.554855][ T4632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.579717][T11594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.681047][T13267] FAULT_INJECTION: forcing a failure. [ 573.681047][T13267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 573.695483][T13267] CPU: 0 PID: 13267 Comm: syz.3.2889 Not tainted syzkaller #0 [ 573.702932][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 573.712969][T13267] Call Trace: [ 573.716228][T13267] [ 573.719135][T13267] dump_stack_lvl+0x188/0x250 [ 573.723806][T13267] ? show_regs_print_info+0x20/0x20 [ 573.728998][T13267] ? load_image+0x410/0x410 [ 573.733484][T13267] ? uncharge_page+0x490/0x490 [ 573.738290][T13267] should_fail+0x383/0x4b0 [ 573.742707][T13267] prepare_alloc_pages+0x1e3/0x5b0 [ 573.747816][T13267] __alloc_pages+0x11b/0x480 [ 573.752388][T13267] ? zone_statistics+0x170/0x170 [ 573.757309][T13267] ? rcu_lock_acquire+0x30/0x30 [ 573.762137][T13267] ? alloc_pages+0x452/0x560 [ 573.766704][T13267] __get_free_pages+0x8/0x30 [ 573.771285][T13267] __tlb_remove_page_size+0x1f2/0x3f0 [ 573.776642][T13267] unmap_page_range+0xfcf/0x2410 [ 573.781568][T13267] unmap_vmas+0x131/0x250 [ 573.785872][T13267] ? unmap_page_range+0x2410/0x2410 [ 573.791045][T13267] ? __mutex_lock_common+0x435/0x2400 [ 573.796395][T13267] ? exit_mm_release+0x16/0x30 [ 573.801212][T13267] exit_mmap+0x3b9/0x640 [ 573.805435][T13267] ? vm_brk+0x20/0x20 [ 573.809401][T13267] ? uprobe_clear_state+0x2f6/0x460 [ 573.814642][T13267] __mmput+0x115/0x390 [ 573.818713][T13267] exit_mm+0x632/0x7b0 [ 573.822763][T13267] ? perf_pmu_migrate_context+0xb70/0xb70 [ 573.828460][T13267] ? do_exit+0x2110/0x2110 [ 573.832854][T13267] ? __ia32_sys_timer_delete+0x40/0x40 [ 573.838351][T13267] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 573.843820][T13267] ? tty_audit_exit+0x149/0x1f0 [ 573.848690][T13267] do_exit+0x5b8/0x2110 [ 573.852838][T13267] ? put_task_struct+0x80/0x80 [ 573.857579][T13267] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 573.863543][T13267] ? _raw_spin_lock_irq+0xb7/0xf0 [ 573.868542][T13267] do_group_exit+0x12c/0x2f0 [ 573.873124][T13267] ? lockdep_hardirqs_on+0x94/0x140 [ 573.878320][T13267] get_signal+0x7eb/0x12e0 [ 573.882771][T13267] arch_do_signal_or_restart+0xe6/0x12a0 [ 573.888386][T13267] ? arch_do_signal_or_restart+0xec5/0x12a0 [ 573.894276][T13267] ? futex_exit_release+0x1c0/0x1c0 [ 573.899457][T13267] ? get_sigframe_size+0x10/0x10 [ 573.904372][T13267] ? __context_tracking_exit+0x4c/0x80 [ 573.909810][T13267] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 573.915776][T13267] ? exit_to_user_mode_loop+0x3b/0x130 [ 573.921209][T13267] exit_to_user_mode_loop+0x9e/0x130 [ 573.926485][T13267] exit_to_user_mode_prepare+0xee/0x180 [ 573.932003][T13267] syscall_exit_to_user_mode+0x16/0x40 [ 573.937441][T13267] do_syscall_64+0x58/0xa0 [ 573.941830][T13267] ? clear_bhb_loop+0x30/0x80 [ 573.946500][T13267] ? clear_bhb_loop+0x30/0x80 [ 573.951153][T13267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 573.957017][T13267] RIP: 0033:0x7fa5fd6f4159 [ 573.961405][T13267] Code: Unable to access opcode bytes at RIP 0x7fa5fd6f412f. [ 573.968740][T13267] RSP: 002b:00007fa5fb94c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 573.977127][T13267] RAX: fffffffffffffe00 RBX: 00007fa5fd97bfa8 RCX: 00007fa5fd6f4159 [ 573.985074][T13267] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa5fd97bfa8 [ 573.993024][T13267] RBP: 00007fa5fd97bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 574.000975][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.008935][T13267] R13: 00007fa5fd97c038 R14: 00007ffc893892e0 R15: 00007ffc893893c8 [ 574.016902][T13267] [ 574.088248][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 574.093460][ T7637] usb 7-1: Using ep0 maxpacket: 8 [ 574.230306][ T7637] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.238702][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.273501][ T7637] usb 7-1: config 179 has no interface number 0 [ 574.288517][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.305564][ T7637] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 574.323246][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.332856][ T7637] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 574.347284][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.355480][ T7637] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.375471][ T4229] usb 2-1: config 0 descriptor?? [ 574.381459][ T7637] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 574.396258][ T7637] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 574.411109][ T7637] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 574.423078][ T4229] hub 2-1:0.0: USB hub found [ 574.429959][ T7637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.465847][T13264] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 574.491682][ T7] usb 5-1: USB disconnect, device number 8 [ 574.512478][T13221] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -71 [ 574.541136][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 574.584518][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 574.600767][T13274] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 574.614301][ T7] ti_usb_3410_5052 5-1:2.0: device disconnected [ 574.801553][ T1323] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 574.942557][ T4229] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 574.965358][ T7637] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 575.144673][T13278] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 575.193706][ T1323] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.221207][ T1323] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 575.251436][ T1323] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 575.280974][ T1323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.301004][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 575.307065][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 575.357236][ T7637] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 575.368129][ T4229] usb 2-1: USB disconnect, device number 2 [ 575.395261][ T7637] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 575.423252][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 575.450063][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 575.472359][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 575.496524][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 575.514483][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 575.532876][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 575.563263][ T7637] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 575.589224][ T7637] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 575.604317][ T7637] usb 4-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 575.625667][ T13] usb 7-1: USB disconnect, device number 62 [ 575.643388][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 575.654886][ T4231] usb 8-1: USB disconnect, device number 61 [ 575.809574][ T7637] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 575.821535][ T7637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.829514][ T7637] usb 4-1: Product: syz [ 575.836535][ T7637] usb 4-1: Manufacturer: syz [ 575.841120][ T7637] usb 4-1: SerialNumber: syz [ 575.875467][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.888015][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.895148][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.904160][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.913382][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.921610][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 575.930928][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.937895][T13276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 575.983617][ T7637] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 575.992592][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 576.004210][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 576.012127][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 576.022713][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 576.031291][ T7637] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 576.043593][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 576.051414][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 576.063340][ T7637] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 576.071974][ T7637] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 576.229752][T13291] FAULT_INJECTION: forcing a failure. [ 576.229752][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 576.301987][T13291] CPU: 0 PID: 13291 Comm: syz.7.2933 Not tainted syzkaller #0 [ 576.309470][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 576.319607][T13291] Call Trace: [ 576.322869][T13291] [ 576.325780][T13291] dump_stack_lvl+0x188/0x250 [ 576.330444][T13291] ? show_regs_print_info+0x20/0x20 [ 576.335616][T13291] ? load_image+0x410/0x410 [ 576.340099][T13291] ? __lock_acquire+0x7b50/0x7b50 [ 576.345105][T13291] should_fail+0x383/0x4b0 [ 576.349519][T13291] should_failslab+0x5/0x20 [ 576.354001][T13291] slab_pre_alloc_hook+0x51/0xc0 [ 576.358931][T13291] ? prepare_creds+0x3c/0x610 [ 576.363599][T13291] kmem_cache_alloc+0x3d/0x280 [ 576.368353][T13291] prepare_creds+0x3c/0x610 [ 576.372852][T13291] prepare_exec_creds+0x14/0x220 [ 576.377801][T13291] bprm_execve+0xf1/0x1740 [ 576.382225][T13291] ? get_arg_page+0x2b6/0x350 [ 576.386888][T13291] ? copy_string_kernel+0x280/0x280 [ 576.392078][T13291] ? up_write+0x1b6/0x410 [ 576.396405][T13291] ? copy_strings+0x411/0x4b0 [ 576.401130][T13291] ? alloc_bprm+0x690/0x690 [ 576.405629][T13291] ? put_arg_page+0xe1/0x200 [ 576.410211][T13291] ? copy_string_kernel+0x26c/0x280 [ 576.415489][T13291] do_execveat_common+0x504/0x6b0 [ 576.420509][T13291] __x64_sys_execve+0x8e/0xa0 [ 576.425169][T13291] do_syscall_64+0x4c/0xa0 [ 576.429582][T13291] ? clear_bhb_loop+0x30/0x80 [ 576.434241][T13291] ? clear_bhb_loop+0x30/0x80 [ 576.438899][T13291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.444786][T13291] RIP: 0033:0x7f665f0f9159 [ 576.449185][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.468770][T13291] RSP: 002b:00007f665d351028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 576.477164][T13291] RAX: ffffffffffffffda RBX: 00007f665f380fa0 RCX: 00007f665f0f9159 [ 576.485115][T13291] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 576.493069][T13291] RBP: 00007f665f19003b R08: 0000000000000000 R09: 0000000000000000 [ 576.501017][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.508967][T13291] R13: 00007f665f381038 R14: 00007f665f380fa0 R15: 00007fff54095a48 [ 576.516933][T13291] [ 576.536821][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.564875][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.587122][ T4229] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.624928][ T4229] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 576.635834][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.766881][ T13] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 577.777009][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 577.777020][ T26] audit: type=1326 audit(1789295886.782:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 577.963925][ T4234] usb 4-1: USB disconnect, device number 98 [ 577.998133][ T4234] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 578.029260][ T4234] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 578.045976][ T4229] lg-g15 0003:046D:C222.0042: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 578.061525][ T26] audit: type=1326 audit(1789295886.782:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 578.173459][ T4234] keyspan 4-1:1.0: device disconnected [ 578.269262][ T26] audit: type=1326 audit(1789295886.893:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff18017398e code=0x7ffc0000 [ 578.294833][ T4229] lg-g15 0003:046D:C222.0042: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 578.327687][T13304] loop3: detected capacity change from 0 to 128 [ 578.382837][ T4229] usb 5-1: USB disconnect, device number 9 [ 578.407156][T13304] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 578.432149][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.480176][ T13] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 578.493004][ T26] audit: type=1326 audit(1789295886.893:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 578.568789][T13307] fido_id[13307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 578.583287][ T13] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 578.605092][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.624616][ T26] audit: type=1326 audit(1789295886.893:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 578.728745][ T26] audit: type=1326 audit(1789295887.087:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 578.756486][T13292] rdma_rxe: rxe_register_device failed with error -23 [ 578.774991][T13292] rdma_rxe: failed to add syz_tun [ 578.818428][ T26] audit: type=1326 audit(1789295887.087:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 578.948143][ T4229] usb 7-1: USB disconnect, device number 63 [ 578.999711][ T26] audit: type=1326 audit(1789295887.087:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 579.061573][ T4231] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 579.124143][ T26] audit: type=1326 audit(1789295887.151:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 579.173225][T13318] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 579.190619][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 579.236928][ T26] audit: type=1326 audit(1789295887.151:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1801b3159 code=0x7ffc0000 [ 579.353300][ T7637] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 579.418672][ T4231] usb 4-1: not running at top speed; connect to a high speed hub [ 579.526693][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.583691][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.611671][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.655575][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.690828][ T4231] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 579.702897][T13331] ubi0: attaching mtd0 [ 579.708641][T13331] ubi0: scanning is finished [ 579.733581][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 579.746173][ T4231] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 579.777808][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.788361][ T4231] usb 4-1: Product: syz [ 579.792652][T13331] ubi0: empty MTD device detected [ 579.798078][ T7637] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 579.820003][ T4231] usb 4-1: Manufacturer: syz [ 579.907212][ T4231] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 579.927620][ T7637] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.007502][T13331] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 580.048774][T13331] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 580.098075][T13331] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 580.144523][ T7637] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 580.164582][T13331] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 580.172305][ T4231] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 580.198617][ T7637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.217678][T13331] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 580.231011][ T4231] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 580.265237][ T7637] usb 8-1: Product: syz [ 580.269472][T13331] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 580.282758][ T4231] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 580.293592][ T7637] usb 8-1: Manufacturer: syz [ 580.315533][ T7637] usb 8-1: SerialNumber: syz [ 580.322988][T13331] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2212877190 [ 580.354337][ T4231] usb 4-1: USB disconnect, device number 99 [ 580.363840][ T13] lg-g15 0003:046D:C222.0043: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 580.413006][T13331] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 580.437660][ T7637] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 580.494319][ T7637] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 580.515985][T13333] ubi0: background thread "ubi_bgt0d" started, PID 13333 [ 580.545256][ T13] lg-g15 0003:046D:C222.0043: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 580.568127][ T7637] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 580.669347][T13338] FAULT_INJECTION: forcing a failure. [ 580.669347][T13338] name failslab, interval 1, probability 0, space 0, times 0 [ 580.682262][ T13] usb 2-1: USB disconnect, device number 3 [ 580.798918][T13338] CPU: 0 PID: 13338 Comm: syz.6.2950 Not tainted syzkaller #0 [ 580.806412][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 580.816451][T13338] Call Trace: [ 580.819729][T13338] [ 580.822641][T13338] dump_stack_lvl+0x188/0x250 [ 580.827314][T13338] ? verify_lock_unused+0x140/0x140 [ 580.832533][T13338] ? show_regs_print_info+0x20/0x20 [ 580.837727][T13338] ? load_image+0x410/0x410 [ 580.842238][T13338] should_fail+0x383/0x4b0 [ 580.846653][T13338] should_failslab+0x5/0x20 [ 580.851145][T13338] slab_pre_alloc_hook+0x51/0xc0 [ 580.856068][T13338] ? skb_clone+0x1bd/0x350 [ 580.860475][T13338] kmem_cache_alloc+0x3d/0x280 [ 580.865228][T13338] skb_clone+0x1bd/0x350 [ 580.869456][T13338] __netlink_deliver_tap+0x3cb/0x7c0 [ 580.874765][T13338] netlink_deliver_tap+0x16c/0x180 [ 580.879880][T13338] netlink_sendskb+0x64/0x130 [ 580.884547][T13338] nlmsg_notify+0x122/0x190 [ 580.889085][T13338] tc_ctl_action+0x83a/0xba0 [ 580.893767][T13338] ? tcf_free_cookie_rcu+0x40/0x40 [ 580.898861][T13338] ? __dev_queue_xmit+0x195d/0x2e50 [ 580.904045][T13338] ? ___sys_sendmsg+0x236/0x2e0 [ 580.908900][T13338] ? tcf_free_cookie_rcu+0x40/0x40 [ 580.913988][T13338] rtnetlink_rcv_msg+0x7f1/0xf10 [ 580.918916][T13338] ? lock_chain_count+0x20/0x20 [ 580.923746][T13338] ? rtnetlink_bind+0x80/0x80 [ 580.928409][T13338] ? __local_bh_enable_ip+0x136/0x1c0 [ 580.933771][T13338] ? lockdep_hardirqs_on+0x94/0x140 [ 580.938970][T13338] ? __local_bh_enable_ip+0x136/0x1c0 [ 580.944323][T13338] ? _local_bh_enable+0xa0/0xa0 [ 580.949167][T13338] ? __dev_queue_xmit+0x1b64/0x2e50 [ 580.954353][T13338] ? dev_queue_xmit+0x20/0x20 [ 580.959005][T13338] ? memcpy+0x3c/0x60 [ 580.962994][T13338] ? __copy_skb_header+0x3ba/0x4f0 [ 580.968097][T13338] netlink_rcv_skb+0x1e9/0x430 [ 580.972843][T13338] ? rtnetlink_bind+0x80/0x80 [ 580.977502][T13338] ? netlink_ack+0xb10/0xb10 [ 580.982079][T13338] netlink_unicast+0x78f/0x940 [ 580.986825][T13338] netlink_sendmsg+0x8ba/0xbe0 [ 580.991585][T13338] ? netlink_getsockopt+0x570/0x570 [ 580.996766][T13338] ? aa_sock_msg_perm+0x94/0x150 [ 581.001704][T13338] ? apparmor_socket_sendmsg+0x88/0x230 [ 581.007225][T13338] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 581.012502][T13338] ? security_socket_sendmsg+0x7c/0xa0 [ 581.017937][T13338] ? netlink_getsockopt+0x570/0x570 [ 581.023113][T13338] ____sys_sendmsg+0x5be/0x8f0 [ 581.027861][T13338] ? __sys_sendmsg_sock+0x30/0x30 [ 581.032867][T13338] ? import_iovec+0x6f/0xa0 [ 581.037351][T13338] ___sys_sendmsg+0x236/0x2e0 [ 581.042017][T13338] ? __sys_sendmsg+0x290/0x290 [ 581.046795][T13338] __se_sys_sendmsg+0x1b7/0x2a0 [ 581.051636][T13338] ? __x64_sys_sendmsg+0x80/0x80 [ 581.056548][T13338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 581.062530][T13338] ? lockdep_hardirqs_on+0x94/0x140 [ 581.067724][T13338] do_syscall_64+0x4c/0xa0 [ 581.072130][T13338] ? clear_bhb_loop+0x30/0x80 [ 581.076793][T13338] ? clear_bhb_loop+0x30/0x80 [ 581.081470][T13338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 581.087364][T13338] RIP: 0033:0x7f397d4a9159 [ 581.091765][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.111362][T13338] RSP: 002b:00007f397b701028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.119784][T13338] RAX: ffffffffffffffda RBX: 00007f397d730fa0 RCX: 00007f397d4a9159 [ 581.127746][T13338] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 581.135694][T13338] RBP: 00007f397d54003b R08: 0000000000000000 R09: 0000000000000000 [ 581.143646][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.151608][T13338] R13: 00007f397d731038 R14: 00007f397d730fa0 R15: 00007ffd7c3875e8 [ 581.159580][T13338] [ 581.187888][T13339] fido_id[13339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 581.577253][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 581.845814][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 581.993089][T13356] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 582.021777][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 582.050738][T13358] FAULT_INJECTION: forcing a failure. [ 582.050738][T13358] name failslab, interval 1, probability 0, space 0, times 0 [ 582.066238][ T1323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 582.137534][T13358] CPU: 0 PID: 13358 Comm: syz.3.2955 Not tainted syzkaller #0 [ 582.145010][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 582.155056][T13358] Call Trace: [ 582.158326][T13358] [ 582.161242][T13358] dump_stack_lvl+0x188/0x250 [ 582.165908][T13358] ? show_regs_print_info+0x20/0x20 [ 582.171097][T13358] ? load_image+0x410/0x410 [ 582.175622][T13358] ? __lock_acquire+0x7b50/0x7b50 [ 582.180661][T13358] should_fail+0x383/0x4b0 [ 582.185081][T13358] should_failslab+0x5/0x20 [ 582.189568][T13358] slab_pre_alloc_hook+0x51/0xc0 [ 582.194490][T13358] ? prepare_creds+0x3c/0x610 [ 582.199158][T13358] kmem_cache_alloc+0x3d/0x280 [ 582.203906][T13358] prepare_creds+0x3c/0x610 [ 582.208393][T13358] prepare_exec_creds+0x14/0x220 [ 582.213314][T13358] bprm_execve+0xf1/0x1740 [ 582.217719][T13358] ? get_arg_page+0x2b6/0x350 [ 582.222373][T13358] ? copy_string_kernel+0x280/0x280 [ 582.227549][T13358] ? up_write+0x1b6/0x410 [ 582.231861][T13358] ? copy_strings+0x411/0x4b0 [ 582.236532][T13358] ? alloc_bprm+0x690/0x690 [ 582.241019][T13358] ? put_arg_page+0xe1/0x200 [ 582.245599][T13358] ? copy_string_kernel+0x26c/0x280 [ 582.250776][T13358] do_execveat_common+0x504/0x6b0 [ 582.255781][T13358] __x64_sys_execve+0x8e/0xa0 [ 582.260452][T13358] do_syscall_64+0x4c/0xa0 [ 582.264880][T13358] ? clear_bhb_loop+0x30/0x80 [ 582.269550][T13358] ? clear_bhb_loop+0x30/0x80 [ 582.274215][T13358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 582.280103][T13358] RIP: 0033:0x7fa5fd6f4159 [ 582.284510][T13358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.304119][T13358] RSP: 002b:00007fa5fb94c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 582.312537][T13358] RAX: ffffffffffffffda RBX: 00007fa5fd97bfa0 RCX: 00007fa5fd6f4159 [ 582.320510][T13358] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 582.328463][T13358] RBP: 00007fa5fd78b03b R08: 0000000000000000 R09: 0000000000000000 [ 582.336413][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.344366][T13358] R13: 00007fa5fd97c038 R14: 00007fa5fd97bfa0 R15: 00007ffc893893c8 [ 582.352342][T13358] [ 582.485707][ T13] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 582.527862][ T13] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 582.558247][ T13] usb 5-1: Product: syz [ 582.565487][ T13] usb 5-1: Manufacturer: syz [ 582.581026][ T13] usb 5-1: SerialNumber: syz [ 582.594325][ T13] usb 5-1: config 0 descriptor?? [ 582.630994][T13346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 582.717260][ T1323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.750755][ T1323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.772946][ T1323] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.807927][ T1323] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 582.828965][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.942041][T13360] rdma_rxe: rxe_register_device failed with error -23 [ 582.960013][T13360] rdma_rxe: failed to add syz_tun [ 583.019360][ T7637] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 583.310561][ T4234] usb 8-1: USB disconnect, device number 62 [ 583.333572][T13314] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -71 [ 583.342857][ T13] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 583.357657][ T4234] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 583.372724][ T1323] lg-g15 0003:046D:C222.0044: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 583.396774][ T4234] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 583.412427][ T4234] ti_usb_3410_5052 8-1:2.0: device disconnected [ 583.430461][ T7637] usb 7-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 583.444362][ T7637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 5184, setting to 1024 [ 583.457969][ T7637] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 583.469652][ T7637] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 583.485954][ T7637] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 583.501107][ T7637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.512207][ T1323] lg-g15 0003:046D:C222.0044: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 583.549890][T13369] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 583.570231][ T7637] pl2303 7-1:1.0: required endpoints missing [ 583.598020][ T7637] usb 2-1: USB disconnect, device number 4 [ 583.612845][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 583.753158][ T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.764758][ T13] usb 4-1: config 179 has no interface number 0 [ 583.771056][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.784307][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.803269][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.814882][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 583.832351][ T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.849692][ T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.861131][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.881911][ T7637] usb 7-1: USB disconnect, device number 64 [ 583.895808][T13371] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 584.278097][T13386] [ 584.280469][T13386] ====================================================== [ 584.287495][T13386] WARNING: possible circular locking dependency detected [ 584.294507][T13386] syzkaller #0 Not tainted [ 584.298896][T13386] ------------------------------------------------------ [ 584.305902][T13386] syz.1.2963/13386 is trying to acquire lock: [ 584.311944][T13386] ffff888145fca4c0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 584.323413][T13386] [ 584.323413][T13386] but task is already holding lock: [ 584.330749][T13386] ffff888061cb6120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 584.339821][T13386] [ 584.339821][T13386] which lock already depends on the new lock. [ 584.339821][T13386] [ 584.350287][T13386] [ 584.350287][T13386] the existing dependency chain (in reverse order) is: [ 584.359280][T13386] [ 584.359280][T13386] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 584.366905][T13386] __mutex_lock_common+0x1e5/0x2400 [ 584.372614][T13386] mutex_lock_nested+0x17/0x20 [ 584.377877][T13386] tcm_set_name+0x26/0x90 [ 584.382708][T13386] function_make+0x195/0x350 [ 584.387860][T13386] configfs_mkdir+0x511/0x9e0 [ 584.393058][T13386] vfs_mkdir+0x386/0x570 [ 584.397812][T13386] do_mkdirat+0x1dd/0x5c0 [ 584.402641][T13386] __x64_sys_mkdir+0x6a/0x80 [ 584.407729][T13386] do_syscall_64+0x4c/0xa0 [ 584.412671][T13386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.419065][T13386] [ 584.419065][T13386] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 584.427292][T13386] __mutex_lock_common+0x1e5/0x2400 [ 584.432988][T13386] mutex_lock_nested+0x17/0x20 [ 584.438249][T13386] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 584.444967][T13386] configfs_symlink+0x5a4/0x13b0 [ 584.450446][T13386] vfs_symlink+0x245/0x3d0 [ 584.455358][T13386] do_symlinkat+0x1ab/0x6b0 [ 584.460356][T13386] __x64_sys_symlinkat+0x95/0xa0 [ 584.465804][T13386] do_syscall_64+0x4c/0xa0 [ 584.470739][T13386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.477125][T13386] [ 584.477125][T13386] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 584.485783][T13386] __lock_acquire+0x2c66/0x7b50 [ 584.491134][T13386] lock_acquire+0x19e/0x400 [ 584.496131][T13386] down_write+0x38/0x60 [ 584.500786][T13386] configfs_depend_item_unlocked+0x14f/0x430 [ 584.507271][T13386] usbg_make_tpg+0x1f3/0x580 [ 584.512414][T13386] target_fabric_make_tpg+0xa0/0x6d0 [ 584.518293][T13386] configfs_mkdir+0x511/0x9e0 [ 584.523472][T13386] vfs_mkdir+0x386/0x570 [ 584.528213][T13386] do_mkdirat+0x1dd/0x5c0 [ 584.533040][T13386] __x64_sys_mkdir+0x6a/0x80 [ 584.538127][T13386] do_syscall_64+0x4c/0xa0 [ 584.543038][T13386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.549429][T13386] [ 584.549429][T13386] other info that might help us debug this: [ 584.549429][T13386] [ 584.559630][T13386] Chain exists of: [ 584.559630][T13386] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 584.559630][T13386] [ 584.574291][T13386] Possible unsafe locking scenario: [ 584.574291][T13386] [ 584.581720][T13386] CPU0 CPU1 [ 584.587069][T13386] ---- ---- [ 584.592415][T13386] lock(&opts->dep_lock); [ 584.596835][T13386] lock(gadget_subsys.su_mutex); [ 584.604360][T13386] lock(&opts->dep_lock); [ 584.611273][T13386] lock(&sb->s_type->i_mutex_key#25); [ 584.616728][T13386] [ 584.616728][T13386] *** DEADLOCK *** [ 584.616728][T13386] [ 584.624858][T13386] 5 locks held by syz.1.2963/13386: [ 584.630039][T13386] #0: ffff8881463b6460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 584.639256][T13386] #1: ffff8880713c4150 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 584.650019][T13386] #2: ffffffff8cc242b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 584.659728][T13386] #3: ffffffff8cf20b08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 584.669355][T13386] #4: ffff888061cb6120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 584.678836][T13386] [ 584.678836][T13386] stack backtrace: [ 584.684702][T13386] CPU: 0 PID: 13386 Comm: syz.1.2963 Not tainted syzkaller #0 [ 584.692163][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 584.702193][T13386] Call Trace: [ 584.705454][T13386] [ 584.708373][T13386] dump_stack_lvl+0x188/0x250 [ 584.713064][T13386] ? load_image+0x410/0x410 [ 584.717559][T13386] ? show_regs_print_info+0x20/0x20 [ 584.722737][T13386] ? print_circular_bug+0x12b/0x1a0 [ 584.727911][T13386] check_noncircular+0x296/0x330 [ 584.732827][T13386] ? add_chain_block+0x9b0/0x9b0 [ 584.737739][T13386] ? lockdep_lock+0xf1/0x1f0 [ 584.742309][T13386] ? mark_lock+0x94/0x320 [ 584.746613][T13386] ? mark_lock+0x94/0x320 [ 584.750934][T13386] ? _find_first_zero_bit+0xd1/0xf0 [ 584.756107][T13386] __lock_acquire+0x2c66/0x7b50 [ 584.760951][T13386] ? verify_lock_unused+0x140/0x140 [ 584.766152][T13386] ? __mutex_trylock_common+0x15c/0x260 [ 584.771693][T13386] ? rcu_lock_release+0x20/0x20 [ 584.776526][T13386] lock_acquire+0x19e/0x400 [ 584.781008][T13386] ? configfs_depend_item_unlocked+0x14f/0x430 [ 584.787160][T13386] ? __might_sleep+0xf0/0xf0 [ 584.791820][T13386] ? __kasan_kmalloc+0xc6/0xe0 [ 584.796577][T13386] ? read_lock_is_recursive+0x10/0x10 [ 584.801945][T13386] ? mutex_lock_io_nested+0x60/0x60 [ 584.807121][T13386] down_write+0x38/0x60 [ 584.811254][T13386] ? configfs_depend_item_unlocked+0x14f/0x430 [ 584.817382][T13386] configfs_depend_item_unlocked+0x14f/0x430 [ 584.823340][T13386] usbg_make_tpg+0x1f3/0x580 [ 584.827908][T13386] ? mutex_lock_io_nested+0x60/0x60 [ 584.833082][T13386] ? usbg_drop_tport+0x20/0x20 [ 584.837820][T13386] ? vscnprintf+0x80/0x80 [ 584.842194][T13386] target_fabric_make_tpg+0xa0/0x6d0 [ 584.847457][T13386] ? target_fabric_release_wwn+0xa0/0xa0 [ 584.853080][T13386] configfs_mkdir+0x511/0x9e0 [ 584.857759][T13386] vfs_mkdir+0x386/0x570 [ 584.861981][T13386] do_mkdirat+0x1dd/0x5c0 [ 584.866287][T13386] ? vfs_mkdir+0x570/0x570 [ 584.870680][T13386] ? getname_flags+0x1f9/0x4f0 [ 584.875419][T13386] __x64_sys_mkdir+0x6a/0x80 [ 584.879984][T13386] do_syscall_64+0x4c/0xa0 [ 584.884379][T13386] ? clear_bhb_loop+0x30/0x80 [ 584.889046][T13386] ? clear_bhb_loop+0x30/0x80 [ 584.893713][T13386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.899584][T13386] RIP: 0033:0x7ff1801b3159 [ 584.903974][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.923553][T13386] RSP: 002b:00007ff17e40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 584.931939][T13386] RAX: ffffffffffffffda RBX: 00007ff18043afa0 RCX: 00007ff1801b3159 [ 584.939893][T13386] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 584.947853][T13386] RBP: 00007ff18024a03b R08: 0000000000000000 R09: 0000000000000000 [ 584.955808][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.963765][T13386] R13: 00007ff18043b038 R14: 00007ff18043afa0 R15: 00007ffe3d86a058 [ 584.971723][T13386] [ 585.003353][ T13] usb 5-1: USB disconnect, device number 10 [ 585.200318][ T4234] usb 4-1: USB disconnect, device number 100 [ 585.206436][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.206459][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19