last executing test programs: 2m0.647623762s ago: executing program 3 (id=9): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='r', 0x1) 1m59.563111017s ago: executing program 3 (id=18): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m59.234740288s ago: executing program 3 (id=20): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2}) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x52a1, 0x34}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 1m59.149335585s ago: executing program 3 (id=21): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 1m59.059491053s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) 1m58.699237494s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x2, 0x1, 0x6}}, 0x14) fallocate(r0, 0x100000000000011, 0x9, 0x2f93) creat(&(0x7f0000000040)='./bus\x00', 0xa7) 1m58.440250489s ago: executing program 32 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x2, 0x1, 0x6}}, 0x14) fallocate(r0, 0x100000000000011, 0x9, 0x2f93) creat(&(0x7f0000000040)='./bus\x00', 0xa7) 26.743431477s ago: executing program 2 (id=540): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 25.989740582s ago: executing program 2 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 25.135250091s ago: executing program 2 (id=553): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "46b0d1"}, 0x0}) 20.026315881s ago: executing program 2 (id=590): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x4, 0x353, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x28}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) shutdown(r0, 0x1) 19.888076661s ago: executing program 2 (id=594): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 19.648648492s ago: executing program 2 (id=597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="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", 0xdf2}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.459197955s ago: executing program 4 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.182248971s ago: executing program 0 (id=695): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) io_setup(0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 4.424227206s ago: executing program 33 (id=597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="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", 0xdf2}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.40233239s ago: executing program 4 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) accept4(r5, 0x0, 0xfffffffffffffffd, 0x0) dup(r4) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) 3.803132835s ago: executing program 5 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 3.113033532s ago: executing program 4 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000e80)="58ddb007", 0x4}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.111518734s ago: executing program 0 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./disk.img\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/test\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/test/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/test/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/test/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='./disk.img\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/test/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f00000003e0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/subsystems/test/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='0', 0x1) 2.884237755s ago: executing program 1 (id=701): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.720375461s ago: executing program 5 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 2.659961879s ago: executing program 1 (id=702): r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb4, 0x50, 0x6, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x6, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7a, 0x6, 0xf1}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0xfb, 0xf5, 0x40, 0x9}, 0x21, &(0x7f0000000100)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0xc, 0xff00, 0x0, [0xff0008, 0xffff, 0x3f00, 0xf]}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xa8ab}}, {0x8b, &(0x7f0000000300)=@string={0x8b, 0x3, "35470e4239ac508d8f5cd00201a867f942abf0f32a6c949559ddb694d817de8aab3881836f6b5cf32ce21528d129b27c2212bb6795276b0b8bfe0d37ce273738e6c5dbd1ebc273780e8706e083246c69d930a5030db36bc38b847e519f437fcf17f90850ccf6d994257b72eb8705f63f6379a4e81e75489056199d698f12cdc2ffb9cea94034e56f47"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x24008800) bind$inet(r2, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) listen(r2, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getpriority(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) connect$unix(r1, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) 1.985799435s ago: executing program 1 (id=703): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000006c0)={0x7fe51287edc2689d, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.977943417s ago: executing program 0 (id=704): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000020901010000000000000000011a0001010000800000000008000100ac14141d08"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.790627183s ago: executing program 5 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 1.209840534s ago: executing program 1 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.20939423s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) 1.208717385s ago: executing program 0 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/dev-loop0/state\x00', 0x0, 0x0) read(r4, 0x0, 0x0) 1.035568042s ago: executing program 4 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 919.056334ms ago: executing program 5 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 870.232294ms ago: executing program 1 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) accept4(r5, 0x0, 0xfffffffffffffffd, 0x0) dup(r4) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 173.382672ms ago: executing program 0 (id=711): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) open(0x0, 0x141b42, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) setpgid(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r2 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) 172.800121ms ago: executing program 1 (id=712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = getpid() write$cgroup_pid(r1, &(0x7f0000000180)=r5, 0x12) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x60, 0x1, 0x1}}, 0x14) pipe2$9p(&(0x7f0000000100), 0x80000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, @broadcast, 0xb, 0x20}}) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 170.721898ms ago: executing program 4 (id=720): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=713): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x20, 0x38, 0x2, '@i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): o 10 [ 107.403639][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.403694][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.403818][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.463279][ T5715] usb 1-1: config 0 descriptor?? [ 107.483621][ T6098] evm: overlay not supported [ 107.490684][ T6098] process 'syz.1.82' launched './file0' with NULL argv: empty string added [ 107.492461][ T6098] Invalid argument reading file caps for ./file0 [ 107.906530][ T6111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.005111][ T5715] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.317013][ T6125] Zero length message leads to an empty skb [ 109.067526][ T5715] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 109.122354][ T6144] bond0: (slave bond_slave_1): Releasing backup interface [ 109.147823][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.151824][ T6144] bond0: option mode: unable to set because the bond device has slaves [ 109.239889][ T5715] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 109.246248][ T5715] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 109.246381][ T5715] usb 3-1: config 0 has no interface number 0 [ 109.246555][ T5715] usb 3-1: config 0 interface 41 has no altsetting 0 [ 109.259669][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.259695][ T5715] usb 3-1: Product: syz [ 109.260405][ T5715] usb 3-1: Manufacturer: syz [ 109.260522][ T5715] usb 3-1: SerialNumber: syz [ 109.298225][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 109.299435][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.304495][ T5715] usb 3-1: config 0 descriptor?? [ 109.571065][ T10] net1080 5-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 02:8c:e7:e7:5e:9c [ 110.147803][ T5715] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 110.156909][ T1218] usb 1-1: USB disconnect, device number 6 [ 110.629765][ T6140] net1080 5-1:1.0 usb0: port B, peer disconnected [ 110.833856][ T1218] usb 5-1: USB disconnect, device number 3 [ 110.849106][ T1218] net1080 5-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 111.058232][ T6188] ======================================================= [ 111.058232][ T6188] WARNING: The mand mount option has been deprecated and [ 111.058232][ T6188] and is ignored by this kernel. Remove the mand [ 111.058232][ T6188] option from the mount to silence this warning. [ 111.058232][ T6188] ======================================================= [ 111.066005][ T6188] overlayfs: upper fs does not support file handles, falling back to index=off. [ 111.406013][ T5715] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 111.406474][ T5715] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 111.406698][ T5715] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 111.464360][ T5715] usb 3-1: USB disconnect, device number 6 [ 112.252170][ T6232] syzkaller1: entered promiscuous mode [ 112.252194][ T6232] syzkaller1: entered allmulticast mode [ 112.998086][ T6228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.572356][ T6272] FAULT_INJECTION: forcing a failure. [ 113.572356][ T6272] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.572393][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT(full) [ 113.572420][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.572434][ T6272] Call Trace: [ 113.572442][ T6272] [ 113.572453][ T6272] dump_stack_lvl+0xe8/0x150 [ 113.572491][ T6272] should_fail_ex+0x3eb/0x540 [ 113.572522][ T6272] get_futex_key+0x1b4/0x1580 [ 113.572574][ T6272] ? __pfx_get_futex_key+0x10/0x10 [ 113.572612][ T6272] ? __might_fault+0xaf/0x130 [ 113.572655][ T6272] futex_wake+0x119/0x5f0 [ 113.572688][ T6272] ? __pfx_ucma_write+0x10/0x10 [ 113.572716][ T6272] ? __pfx_futex_wake+0x10/0x10 [ 113.572753][ T6272] ? vfs_write+0x9d5/0xba0 [ 113.572791][ T6272] do_futex+0x458/0x4e0 [ 113.572822][ T6272] ? __pfx_do_futex+0x10/0x10 [ 113.572856][ T6272] __se_sys_futex+0x3a8/0x450 [ 113.572886][ T6272] ? ksys_write+0x242/0x270 [ 113.572916][ T6272] ? __pfx___se_sys_futex+0x10/0x10 [ 113.572942][ T6272] ? __pfx_ksys_write+0x10/0x10 [ 113.572979][ T6272] ? __x64_sys_futex+0x21/0xf0 [ 113.573008][ T6272] do_syscall_64+0x166/0x520 [ 113.573029][ T6272] ? trace_irq_disable+0x3b/0x140 [ 113.573061][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.573085][ T6272] ? clear_bhb_loop+0x70/0xc0 [ 113.573112][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.573135][ T6272] RIP: 0033:0x7fe33859e159 [ 113.573156][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.573175][ T6272] RSP: 002b:00007fe3394960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.573201][ T6272] RAX: ffffffffffffffda RBX: 00007fe338825fa8 RCX: 00007fe33859e159 [ 113.573218][ T6272] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe338825fac [ 113.573233][ T6272] RBP: 00007fe338825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 113.573249][ T6272] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 113.573264][ T6272] R13: 00007fe338826038 R14: 00007ffe3249a2e0 R15: 00007ffe3249a3c8 [ 113.573299][ T6272] [ 114.073707][ T6280] FAULT_INJECTION: forcing a failure. [ 114.073707][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 114.073740][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 114.073763][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.073776][ T6280] Call Trace: [ 114.073784][ T6280] [ 114.073793][ T6280] dump_stack_lvl+0xe8/0x150 [ 114.073827][ T6280] should_fail_ex+0x3eb/0x540 [ 114.073856][ T6280] should_failslab+0xa8/0x100 [ 114.073882][ T6280] __kmalloc_noprof+0xf9/0x710 [ 114.073913][ T6280] ? user_preparse+0x9e/0x160 [ 114.073936][ T6280] ? user_preparse+0x9e/0x160 [ 114.073966][ T6280] user_preparse+0x9e/0x160 [ 114.073993][ T6280] __key_create_or_update+0x3a4/0xa70 [ 114.074027][ T6280] ? __pfx___key_create_or_update+0x10/0x10 [ 114.074072][ T6280] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 114.074103][ T6280] key_create_or_update+0x42/0x60 [ 114.074142][ T6280] __se_sys_add_key+0x349/0x420 [ 114.074175][ T6280] ? __pfx___se_sys_add_key+0x10/0x10 [ 114.074210][ T6280] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 114.074242][ T6280] ? __x64_sys_add_key+0x20/0xc0 [ 114.074273][ T6280] do_syscall_64+0x166/0x520 [ 114.074292][ T6280] ? trace_irq_disable+0x3b/0x140 [ 114.074321][ T6280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.074342][ T6280] ? clear_bhb_loop+0x70/0xc0 [ 114.074367][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.074387][ T6280] RIP: 0033:0x7f844db9e159 [ 114.074406][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.074424][ T6280] RSP: 002b:00007f844ea55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 114.074446][ T6280] RAX: ffffffffffffffda RBX: 00007f844de25fa0 RCX: 00007f844db9e159 [ 114.074461][ T6280] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000180 [ 114.074480][ T6280] RBP: 00007f844dc3506b R08: ffffffffffffffff R09: 0000000000000000 [ 114.074494][ T6280] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 114.074506][ T6280] R13: 00007f844de26038 R14: 00007f844de25fa0 R15: 00007fff55ef9a18 [ 114.074537][ T6280] [ 114.085996][ T6281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.324227][ T6281] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 114.442325][ T6285] input: syz0 as /devices/virtual/input/input9 [ 114.749318][ T5714] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.787484][ T5347] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.899906][ T5714] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 114.901180][ T5714] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.901218][ T5714] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.901252][ T5714] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.901314][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.906834][ T6288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.987446][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.006699][ T5347] usb 3-1: not running at top speed; connect to a high speed hub [ 115.006748][ T5347] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 115.027868][ T5347] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 115.030536][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.030574][ T5347] usb 3-1: Product: syz [ 115.030616][ T5347] usb 3-1: Manufacturer: syz [ 115.030631][ T5347] usb 3-1: SerialNumber: syz [ 115.079624][ T6290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.088988][ T5347] oti6858 3-1:1.0: oti6858 converter detected [ 115.112194][ T5347] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 115.147420][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 115.148189][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 115.152312][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.152337][ T10] usb 5-1: Product: syz [ 115.152351][ T10] usb 5-1: Manufacturer: syz [ 115.152367][ T10] usb 5-1: SerialNumber: syz [ 115.202662][ T10] usb 5-1: config 0 descriptor?? [ 115.504413][ T1218] usb 3-1: USB disconnect, device number 7 [ 115.554227][ T1218] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 115.555142][ T1218] oti6858 3-1:1.0: device disconnected [ 115.628382][ T10] airspy 5-1:0.0: Board ID: 00 [ 115.628405][ T10] airspy 5-1:0.0: Firmware version: [ 115.799736][ T6315] capability: warning: `syz.1.135' uses deprecated v2 capabilities in a way that may be insecure [ 116.207476][ T43] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 116.358556][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.361653][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.361676][ T43] usb 2-1: Product: syz [ 116.361691][ T43] usb 2-1: Manufacturer: syz [ 116.361705][ T43] usb 2-1: SerialNumber: syz [ 116.365978][ T43] usb 2-1: config 0 descriptor?? [ 116.407522][ T1218] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.569608][ T1218] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 116.571329][ T1218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.571356][ T1218] usb 3-1: config 0 has no interfaces? [ 116.574689][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.574714][ T1218] usb 3-1: Product: syz [ 116.574728][ T1218] usb 3-1: Manufacturer: syz [ 116.574741][ T1218] usb 3-1: SerialNumber: syz [ 116.577607][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 116.600292][ T1218] usb 3-1: config 0 descriptor?? [ 116.646008][ T10] airspy 5-1:0.0: Registered as swradio24 [ 116.646031][ T10] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 116.824415][ T10] usb 3-1: USB disconnect, device number 8 [ 116.851874][ T5347] usb 5-1: USB disconnect, device number 4 [ 117.074462][ T5714] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 117.077133][ T5714] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 117.132190][ T5714] usb 1-1: USB disconnect, device number 7 [ 117.132297][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 117.443202][ T6336] syz.2.138 uses obsolete (PF_INET,SOCK_PACKET) [ 117.464295][ T6336] FAULT_INJECTION: forcing a failure. [ 117.464295][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 117.464333][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) [ 117.464360][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.464374][ T6336] Call Trace: [ 117.464384][ T6336] [ 117.464394][ T6336] dump_stack_lvl+0xe8/0x150 [ 117.464443][ T6336] should_fail_ex+0x3eb/0x540 [ 117.464475][ T6336] should_failslab+0xa8/0x100 [ 117.464503][ T6336] __kmalloc_noprof+0xf9/0x710 [ 117.464537][ T6336] ? usb_hcd_submit_urb+0x88e/0x1b60 [ 117.464563][ T6336] ? usb_hcd_submit_urb+0x88e/0x1b60 [ 117.464590][ T6336] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.464628][ T6336] usb_hcd_submit_urb+0x88e/0x1b60 [ 117.464666][ T6336] proc_do_submiturb+0x2657/0x3430 [ 117.464706][ T6336] ? proc_do_submiturb+0x1560/0x3430 [ 117.464761][ T6336] proc_submiturb+0x134/0x1a0 [ 117.464797][ T6336] ? usbdev_ioctl+0x13f/0x21a0 [ 117.464827][ T6336] ? __pfx_proc_submiturb+0x10/0x10 [ 117.464879][ T6336] usbdev_ioctl+0x1104/0x21a0 [ 117.464915][ T6336] ? __pfx_usbdev_ioctl+0x10/0x10 [ 117.464941][ T6336] ? __fget_files+0x2a/0x420 [ 117.464970][ T6336] ? __fget_files+0x3a2/0x420 [ 117.464997][ T6336] ? __fget_files+0x2a/0x420 [ 117.465030][ T6336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.465059][ T6336] ? __pfx_usbdev_ioctl+0x10/0x10 [ 117.465087][ T6336] __se_sys_ioctl+0xfc/0x170 [ 117.465125][ T6336] do_syscall_64+0x166/0x520 [ 117.465146][ T6336] ? trace_irq_disable+0x3b/0x140 [ 117.465185][ T6336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.465209][ T6336] ? clear_bhb_loop+0x70/0xc0 [ 117.465238][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.465261][ T6336] RIP: 0033:0x7fe33859e159 [ 117.465289][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.465309][ T6336] RSP: 002b:00007fe339496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.465340][ T6336] RAX: ffffffffffffffda RBX: 00007fe338825fa0 RCX: 00007fe33859e159 [ 117.465361][ T6336] RDX: 00002000000002c0 RSI: 000000008038550a RDI: 0000000000000005 [ 117.465377][ T6336] RBP: 00007fe33863506b R08: 0000000000000000 R09: 0000000000000000 [ 117.465392][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.465405][ T6336] R13: 00007fe338826038 R14: 00007fe338825fa0 R15: 00007ffe3249a3c8 [ 117.465441][ T6336] [ 117.899826][ T1218] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.027538][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.047463][ T1218] usb 5-1: Using ep0 maxpacket: 32 [ 118.048273][ T1218] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 118.049418][ T1218] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 118.049454][ T1218] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 118.049475][ T1218] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.049496][ T1218] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 118.051331][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.051350][ T1218] usb 5-1: Product: syz [ 118.051362][ T1218] usb 5-1: Manufacturer: syz [ 118.051373][ T1218] usb 5-1: SerialNumber: syz [ 118.107167][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 118.159090][ T1218] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input11 [ 118.180352][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 118.191774][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.192355][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.197772][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 118.244300][ T43] usb 2-1: USB disconnect, device number 6 [ 118.298992][ T1218] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 118.299009][ T1218] (id 0x00) [ 118.329737][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.329791][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 118.333452][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 118.333490][ T25] usb 1-1: can't read configurations, error -71 [ 118.407510][ T1218] rc_core: IR keymap rc-imon-pad not found [ 118.407541][ T1218] Registered IR keymap rc-empty [ 118.407639][ T1218] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 118.407657][ T1218] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.498931][ T1218] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 118.500627][ T1218] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input12 [ 118.506690][ T1218] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:5> initialized [ 118.898376][ T1218] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.028068][ T5715] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.048727][ T1218] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.049900][ T1218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.049925][ T1218] usb 3-1: config 0 has no interfaces? [ 119.049956][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.052147][ T1218] usb 3-1: config 0 descriptor?? [ 119.178259][ T5715] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.179285][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.179319][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.181467][ T5715] usb 2-1: config 0 descriptor?? [ 119.368795][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.392844][ T5715] usbhid 2-1:0.0: can't add hid device: -71 [ 119.392974][ T5715] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.414176][ T5715] usb 2-1: USB disconnect, device number 7 [ 119.468436][ T6350] imon:send_packet: task interrupted [ 119.468500][ T6350] imon:send_packet: packet tx failed (-512) [ 119.468869][ T6350] imon:vfd_write: send packet #2 failed [ 119.471588][ T6350] imon:send_packet: packet tx failed (-32) [ 119.497535][ T6350] imon:vfd_write: send packet #0 failed [ 119.527764][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 119.528486][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.529374][ T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.529391][ T25] usb 1-1: config 0 has no interface number 0 [ 119.531281][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.531299][ T25] usb 1-1: Product: syz [ 119.531310][ T25] usb 1-1: Manufacturer: syz [ 119.531320][ T25] usb 1-1: SerialNumber: syz [ 119.533682][ T25] usb 1-1: config 0 descriptor?? [ 119.632968][ T5715] usb 5-1: USB disconnect, device number 5 [ 119.847436][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.947039][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 119.947080][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 119.999375][ T5714] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 120.000711][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 120.000759][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.003769][ T5714] usb 2-1: config 0 descriptor?? [ 120.422210][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422328][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422358][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422386][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422412][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422439][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422521][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422548][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422574][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.422601][ T5714] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 120.520132][ T5714] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 120.834930][ T5714] usb 2-1: USB disconnect, device number 8 [ 120.916651][ T6368] Bluetooth: MGMT ver 1.23 [ 121.164705][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 121.164998][ T25] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 121.176270][ T25] usb 1-1: USB disconnect, device number 9 [ 121.415526][ T6370] FAULT_INJECTION: forcing a failure. [ 121.415526][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 121.415551][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 121.415568][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.415578][ T6370] Call Trace: [ 121.415584][ T6370] [ 121.415591][ T6370] dump_stack_lvl+0xe8/0x150 [ 121.415620][ T6370] should_fail_ex+0x3eb/0x540 [ 121.415643][ T6370] should_failslab+0xa8/0x100 [ 121.415661][ T6370] ? skb_clone+0x212/0x3a0 [ 121.415680][ T6370] kmem_cache_alloc_noprof+0x9c/0x600 [ 121.415701][ T6370] ? lock_acquire+0x115/0x350 [ 121.415725][ T6370] ? skb_clone+0x212/0x3a0 [ 121.415749][ T6370] skb_clone+0x212/0x3a0 [ 121.415766][ T6370] ? dev_queue_xmit_nit+0x25c/0xac0 [ 121.415784][ T6370] dev_queue_xmit_nit+0x28d/0xac0 [ 121.415800][ T6370] ? dev_queue_xmit_nit+0x2d/0xac0 [ 121.415822][ T6370] dev_hard_start_xmit+0x1c1/0x830 [ 121.415854][ T6370] __dev_queue_xmit+0x14c0/0x3820 [ 121.415873][ T6370] ? __x64_sys_sendmsg+0x1b1/0x290 [ 121.415890][ T6370] ? do_syscall_64+0x166/0x520 [ 121.415913][ T6370] ? __dev_queue_xmit+0x29b/0x3820 [ 121.415940][ T6370] ? __pfx___dev_queue_xmit+0x10/0x10 [ 121.415975][ T6370] ? __copy_skb_header+0xa3/0x4a0 [ 121.415993][ T6370] ? __asan_memcpy+0x40/0x70 [ 121.416015][ T6370] ? __skb_clone+0x5c/0x6c0 [ 121.416036][ T6370] ? __skb_clone+0x449/0x6c0 [ 121.416059][ T6370] ? skb_clone+0x246/0x3a0 [ 121.416079][ T6370] __netlink_deliver_tap+0x5b4/0x860 [ 121.416109][ T6370] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.416131][ T6370] netlink_deliver_tap+0x19c/0x1b0 [ 121.416152][ T6370] netlink_sendskb+0x68/0x140 [ 121.416172][ T6370] netlink_rcv_skb+0x2a4/0x4a0 [ 121.416193][ T6370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.416219][ T6370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.416251][ T6370] ? down_read+0x2b9/0x320 [ 121.416270][ T6370] genl_rcv+0x28/0x40 [ 121.416293][ T6370] netlink_unicast+0x7bd/0x940 [ 121.416319][ T6370] netlink_sendmsg+0x7c3/0xae0 [ 121.416345][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.416372][ T6370] ? apparmor_socket_sendmsg+0x98/0x360 [ 121.416390][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.416410][ T6370] sock_sendmsg_nosec+0x13a/0x180 [ 121.416435][ T6370] ____sys_sendmsg+0x54e/0x850 [ 121.416459][ T6370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.416484][ T6370] ? import_iovec+0x73/0xa0 [ 121.416534][ T6370] ___sys_sendmsg+0x2a5/0x360 [ 121.416559][ T6370] ? __lock_acquire+0x747/0x2de0 [ 121.416598][ T6370] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.416630][ T6370] ? futex_wait+0x2a2/0x390 [ 121.416691][ T6370] ? __fget_files+0x2a/0x420 [ 121.416720][ T6370] ? __fget_files+0x3a2/0x420 [ 121.416748][ T6370] __x64_sys_sendmsg+0x1b1/0x290 [ 121.416769][ T6370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.416803][ T6370] do_syscall_64+0x166/0x520 [ 121.416818][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.416834][ T6370] ? clear_bhb_loop+0x70/0xc0 [ 121.416854][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.416870][ T6370] RIP: 0033:0x7fdc4e59e159 [ 121.416885][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.416898][ T6370] RSP: 002b:00007fdc4c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.416915][ T6370] RAX: ffffffffffffffda RBX: 00007fdc4e825fa0 RCX: 00007fdc4e59e159 [ 121.416927][ T6370] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000006 [ 121.416937][ T6370] RBP: 00007fdc4e63506b R08: 0000000000000000 R09: 0000000000000000 [ 121.416953][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.416962][ T6370] R13: 00007fdc4e826038 R14: 00007fdc4e825fa0 R15: 00007ffc32246808 [ 121.416987][ T6370] [ 121.857506][ T25] usb 3-1: USB disconnect, device number 9 [ 122.044562][ T1519] sl0: header compression turned on [ 123.289857][ T5347] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.459437][ T5347] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 123.462240][ T5347] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 123.462266][ T5347] usb 5-1: config 1 has no interface number 0 [ 123.465066][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.465091][ T5347] usb 5-1: Product: syz [ 123.465106][ T5347] usb 5-1: Manufacturer: syz [ 123.465121][ T5347] usb 5-1: SerialNumber: syz [ 123.535994][ T5347] usb 5-1: 3:1 : does not exist [ 123.536021][ T5347] usb 5-1: 3:2 : does not exist [ 123.778645][ T5347] usb 5-1: USB disconnect, device number 6 [ 123.872875][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.802951][ T6460] FAULT_INJECTION: forcing a failure. [ 124.802951][ T6460] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 124.802989][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT(full) [ 124.803018][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.803032][ T6460] Call Trace: [ 124.803041][ T6460] [ 124.803051][ T6460] dump_stack_lvl+0xe8/0x150 [ 124.803088][ T6460] should_fail_ex+0x3eb/0x540 [ 124.803120][ T6460] prepare_alloc_pages+0x21e/0x5f0 [ 124.803165][ T6460] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 124.803206][ T6460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.803241][ T6460] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 124.803281][ T6460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.803330][ T6460] __alloc_pages_noprof+0x10/0x100 [ 124.803368][ T6460] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 124.803413][ T6460] ? alloc_pages_noprof+0x140/0x2b0 [ 124.803445][ T6460] __kasan_populate_vmalloc+0xb7/0x1c0 [ 124.803486][ T6460] alloc_vmap_area+0xd10/0x1410 [ 124.803533][ T6460] ? __pfx_alloc_vmap_area+0x10/0x10 [ 124.803559][ T6460] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 124.803595][ T6460] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 124.803629][ T6460] ? __get_vm_area_node+0x155/0x2f0 [ 124.803668][ T6460] __get_vm_area_node+0x200/0x2f0 [ 124.803705][ T6460] __vmalloc_node_range_noprof+0x340/0x1690 [ 124.803739][ T6460] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.803811][ T6460] ? __kasan_kmalloc+0x93/0xb0 [ 124.803839][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.803870][ T6460] ? __kmalloc_cache_noprof+0x148/0x600 [ 124.803903][ T6460] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 124.803931][ T6460] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 124.803967][ T6460] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.803997][ T6460] vmalloc_noprof+0xb2/0xe0 [ 124.804027][ T6460] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.804058][ T6460] dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.804086][ T6460] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 124.804127][ T6460] dvb_demux_do_ioctl+0x48b/0x540 [ 124.804161][ T6460] dvb_usercopy+0x199/0x2e0 [ 124.804188][ T6460] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 124.804218][ T6460] ? __pfx_dvb_usercopy+0x10/0x10 [ 124.804257][ T6460] ? __fget_files+0x3a2/0x420 [ 124.804286][ T6460] ? __fget_files+0x2a/0x420 [ 124.804316][ T6460] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 124.804345][ T6460] dvb_demux_ioctl+0x29/0x40 [ 124.804374][ T6460] __se_sys_ioctl+0xfc/0x170 [ 124.804414][ T6460] do_syscall_64+0x166/0x520 [ 124.804435][ T6460] ? trace_irq_disable+0x3b/0x140 [ 124.804469][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.804493][ T6460] ? clear_bhb_loop+0x70/0xc0 [ 124.804522][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.804546][ T6460] RIP: 0033:0x7f4c1179e159 [ 124.804567][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.804586][ T6460] RSP: 002b:00007f4c125b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.804614][ T6460] RAX: ffffffffffffffda RBX: 00007f4c11a25fa0 RCX: 00007f4c1179e159 [ 124.804631][ T6460] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 124.804647][ T6460] RBP: 00007f4c1183506b R08: 0000000000000000 R09: 0000000000000000 [ 124.804661][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.804674][ T6460] R13: 00007f4c11a26038 R14: 00007f4c11a25fa0 R15: 00007fffe3181028 [ 124.804712][ T6460] [ 124.811303][ T6460] syz.4.170: vmalloc error: size 8192, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.811810][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT(full) [ 124.811876][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.811909][ T6460] Call Trace: [ 124.811940][ T6460] [ 124.811962][ T6460] dump_stack_lvl+0xe8/0x150 [ 124.812067][ T6460] warn_alloc+0x24d/0x270 [ 124.812162][ T6460] ? lockdep_hardirqs_on+0x7b/0x110 [ 124.812261][ T6460] ? __pfx_warn_alloc+0x10/0x10 [ 124.812338][ T6460] ? kfree+0x1c5/0x650 [ 124.812434][ T6460] ? __get_vm_area_node+0x219/0x2f0 [ 124.812535][ T6460] __vmalloc_node_range_noprof+0x368/0x1690 [ 124.812696][ T6460] ? __kasan_kmalloc+0x93/0xb0 [ 124.812770][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.812863][ T6460] ? __kmalloc_cache_noprof+0x148/0x600 [ 124.812947][ T6460] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 124.813030][ T6460] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 124.813140][ T6460] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.813216][ T6460] vmalloc_noprof+0xb2/0xe0 [ 124.813300][ T6460] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.813364][ T6460] dvb_dmxdev_filter_start+0x107/0x10d0 [ 124.813442][ T6460] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 124.813556][ T6460] dvb_demux_do_ioctl+0x48b/0x540 [ 124.813641][ T6460] dvb_usercopy+0x199/0x2e0 [ 124.813707][ T6460] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 124.813784][ T6460] ? __pfx_dvb_usercopy+0x10/0x10 [ 124.813890][ T6460] ? __fget_files+0x3a2/0x420 [ 124.813965][ T6460] ? __fget_files+0x2a/0x420 [ 124.814050][ T6460] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 124.814118][ T6460] dvb_demux_ioctl+0x29/0x40 [ 124.814194][ T6460] __se_sys_ioctl+0xfc/0x170 [ 124.814301][ T6460] do_syscall_64+0x166/0x520 [ 124.814348][ T6460] ? trace_irq_disable+0x3b/0x140 [ 124.814451][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.814529][ T6460] ? clear_bhb_loop+0x70/0xc0 [ 124.814603][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.814670][ T6460] RIP: 0033:0x7f4c1179e159 [ 124.814742][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.814787][ T6460] RSP: 002b:00007f4c125b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.814862][ T6460] RAX: ffffffffffffffda RBX: 00007f4c11a25fa0 RCX: 00007f4c1179e159 [ 124.814905][ T6460] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 124.814940][ T6460] RBP: 00007f4c1183506b R08: 0000000000000000 R09: 0000000000000000 [ 124.814981][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.815015][ T6460] R13: 00007f4c11a26038 R14: 00007f4c11a25fa0 R15: 00007fffe3181028 [ 124.815111][ T6460] [ 124.817663][ T6460] Mem-Info: [ 124.817696][ T6460] active_anon:7525 inactive_anon:0 isolated_anon:0 [ 124.817696][ T6460] active_file:0 inactive_file:42543 isolated_file:0 [ 124.817696][ T6460] unevictable:0 dirty:134 writeback:0 [ 124.817696][ T6460] slab_reclaimable:10176 slab_unreclaimable:91644 [ 124.817696][ T6460] mapped:26316 shmem:1849 pagetables:1361 [ 124.817696][ T6460] sec_pagetables:0 bounce:0 [ 124.817696][ T6460] kernel_misc_reclaimable:0 [ 124.817696][ T6460] free:1345139 free_pcp:9298 free_cma:0 [ 124.817868][ T6460] Node 0 active_anon:30100kB inactive_anon:0kB active_file:0kB inactive_file:169972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105264kB dirty:532kB writeback:0kB shmem:7396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12036kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.818037][ T6460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.818191][ T6460] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.818379][ T6460] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 124.818498][ T6460] Node 0 DMA32 free:1427712kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30100kB inactive_anon:0kB active_file:0kB inactive_file:169972kB unevictable:0kB writepending:532kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:37192kB local_pcp:19780kB free_cma:0kB [ 124.818707][ T6460] lowmem_reserve[]: 0 0 1 1 1 [ 124.818816][ T6460] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.818978][ T6460] lowmem_reserve[]: 0 0 0 0 0 [ 124.819077][ T6460] Node 1 Normal free:3937484kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.823726][ T6460] lowmem_reserve[]: 0 0 0 0 0 [ 124.823863][ T6460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.824305][ T6460] Node 0 DMA32: 55*4kB (UME) 363*8kB (UME) 158*16kB (UM) 78*32kB (UME) 42*64kB (UME) 13*128kB (UM) 6*256kB (M) 3*512kB (UM) 3*1024kB (UM) 4*2048kB (ME) 342*4096kB (M) = 1427668kB [ 124.824794][ T6460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.825111][ T6460] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3937484kB [ 124.825656][ T6460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.825702][ T6460] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 124.825752][ T6460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.825803][ T6460] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.825849][ T6460] 44388 total pagecache pages [ 124.825878][ T6460] 0 pages in swap cache [ 124.825899][ T6460] Free swap = 124996kB [ 124.825920][ T6460] Total swap = 124996kB [ 124.825943][ T6460] 2097051 pages RAM [ 124.825957][ T6460] 0 pages HighMem/MovableOnly [ 124.825979][ T6460] 429554 pages reserved [ 124.826000][ T6460] 0 pages cma reserved [ 125.953314][ T6469] jffs2: notice: (6469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.404334][ T6483] syzkaller1: entered promiscuous mode [ 126.404362][ T6483] syzkaller1: entered allmulticast mode [ 126.937878][ T5347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.108239][ T5347] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 127.109487][ T5347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.111518][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.111543][ T5347] usb 5-1: Product: syz [ 127.111559][ T5347] usb 5-1: Manufacturer: syz [ 127.111575][ T5347] usb 5-1: SerialNumber: syz [ 127.298906][ T5707] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.358876][ T5347] usb 5-1: unknown sample rate [ 127.449541][ T5707] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 127.457291][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.457320][ T5707] usb 3-1: Product: syz [ 127.457427][ T5707] usb 3-1: Manufacturer: syz [ 127.457444][ T5707] usb 3-1: SerialNumber: syz [ 127.493253][ T5707] usb 3-1: config 0 descriptor?? [ 127.538507][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.538530][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.544532][ T5347] usb 5-1: USB disconnect, device number 7 [ 127.640824][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.082288][ T6519] FAULT_INJECTION: forcing a failure. [ 128.082288][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 128.082331][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT(full) [ 128.082369][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.082382][ T6519] Call Trace: [ 128.082395][ T6519] [ 128.082402][ T6519] dump_stack_lvl+0xe8/0x150 [ 128.082427][ T6519] should_fail_ex+0x3eb/0x540 [ 128.082449][ T6519] should_failslab+0xa8/0x100 [ 128.082487][ T6519] __kmalloc_cache_noprof+0x9e/0x600 [ 128.082522][ T6519] ? __mmu_notifier_register+0x33e/0x5f0 [ 128.082555][ T6519] ? __mmu_notifier_register+0x33e/0x5f0 [ 128.082584][ T6519] __mmu_notifier_register+0x33e/0x5f0 [ 128.082651][ T6519] mmu_notifier_register+0x70/0x1d0 [ 128.082688][ T6519] kvm_dev_ioctl+0x12fe/0x1770 [ 128.082721][ T6519] ? __se_sys_futex+0x3a8/0x450 [ 128.082744][ T6519] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 128.082783][ T6519] ? bpf_lsm_file_ioctl+0x9/0x20 [ 128.082813][ T6519] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 128.082845][ T6519] __se_sys_ioctl+0xfc/0x170 [ 128.082884][ T6519] do_syscall_64+0x166/0x520 [ 128.082905][ T6519] ? trace_irq_disable+0x3b/0x140 [ 128.082951][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.082977][ T6519] ? clear_bhb_loop+0x70/0xc0 [ 128.083005][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.083026][ T6519] RIP: 0033:0x7fdc4e59e159 [ 128.083048][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.083061][ T6519] RSP: 002b:00007fdc4c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.083078][ T6519] RAX: ffffffffffffffda RBX: 00007fdc4e825fa0 RCX: 00007fdc4e59e159 [ 128.083090][ T6519] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 128.083115][ T6519] RBP: 00007fdc4e63506b R08: 0000000000000000 R09: 0000000000000000 [ 128.083130][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.083143][ T6519] R13: 00007fdc4e826038 R14: 00007fdc4e825fa0 R15: 00007ffc32246808 [ 128.083177][ T6519] [ 128.565385][ T5707] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 128.590865][ T5707] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 128.605636][ T5707] usb 3-1: USB disconnect, device number 10 [ 128.616128][ T5707] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 128.667779][ T5276] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 128.692920][ T5707] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 128.709624][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.858940][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 128.859695][ T25] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 128.862189][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 128.862215][ T25] usb 1-1: SerialNumber: syz [ 128.896910][ T25] usb 1-1: config 0 descriptor?? [ 128.929825][ T25] as10x_usb: device has been detected [ 128.936188][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 128.970321][ T25] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 129.075288][ T25] as10x_usb: error during firmware upload part1 [ 129.078747][ T25] Registered device nBox DVB-T Dongle [ 129.190431][ T5715] usb 1-1: USB disconnect, device number 10 [ 129.306272][ T5715] Unregistered device nBox DVB-T Dongle [ 129.313309][ T5715] as10x_usb: device has been disconnected [ 129.441615][ T6537] capability: warning: `syz.4.195' uses 32-bit capabilities (legacy support in use) [ 129.647619][ T43] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 129.699869][ T5715] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.718419][ T6544] FAULT_INJECTION: forcing a failure. [ 129.718419][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 129.718467][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) [ 129.718493][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.718507][ T6544] Call Trace: [ 129.718516][ T6544] [ 129.718526][ T6544] dump_stack_lvl+0xe8/0x150 [ 129.718564][ T6544] should_fail_ex+0x3eb/0x540 [ 129.718597][ T6544] should_failslab+0xa8/0x100 [ 129.718626][ T6544] __kmalloc_noprof+0xf9/0x710 [ 129.718659][ T6544] ? __kasan_kmalloc+0x93/0xb0 [ 129.718687][ T6544] ? usb_alloc_urb+0x46/0x150 [ 129.718724][ T6544] ? usb_alloc_urb+0x46/0x150 [ 129.718768][ T6544] ? __kmalloc_cache_noprof+0x148/0x600 [ 129.718805][ T6544] usb_alloc_urb+0x46/0x150 [ 129.718855][ T6544] usb_control_msg+0x118/0x3e0 [ 129.718896][ T6544] hub_ext_port_status+0x112/0x840 [ 129.718943][ T6544] hub_activate+0x740/0x1b20 [ 129.718987][ T6544] hub_resume+0xa4/0x3f0 [ 129.719026][ T6544] ? __pfx_hub_resume+0x10/0x10 [ 129.719073][ T6544] usb_resume_both+0x5f1/0xb20 [ 129.719108][ T6544] ? __pfx_usb_runtime_resume+0x10/0x10 [ 129.719137][ T6544] __rpm_callback+0x3ff/0xa80 [ 129.719173][ T6544] ? rcu_is_watching+0x16/0xb0 [ 129.719197][ T6544] ? __pfx_usb_runtime_resume+0x10/0x10 [ 129.719228][ T6544] rpm_resume+0x1074/0x1690 [ 129.719256][ T6544] ? rcu_is_watching+0x16/0xb0 [ 129.719298][ T6544] ? __pfx_rpm_resume+0x10/0x10 [ 129.719327][ T6544] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.719371][ T6544] __pm_runtime_resume+0x117/0x170 [ 129.719405][ T6544] usb_autoresume_device+0x23/0xf0 [ 129.719434][ T6544] usbdev_open+0x190/0x760 [ 129.719463][ T6544] ? do_raw_spin_lock+0x12b/0x2f0 [ 129.719494][ T6544] ? __pfx_usbdev_open+0x10/0x10 [ 129.719525][ T6544] ? do_raw_spin_unlock+0xf5/0x200 [ 129.719558][ T6544] chrdev_open+0x4d9/0x600 [ 129.719586][ T6544] ? __pfx_chrdev_open+0x10/0x10 [ 129.719612][ T6544] ? devcgroup_check_permission+0x31/0x8f0 [ 129.719651][ T6544] ? __pfx_chrdev_open+0x10/0x10 [ 129.719673][ T6544] do_dentry_open+0x80e/0x1360 [ 129.719718][ T6544] vfs_open_consume+0x4a/0x350 [ 129.719743][ T6544] ? path_openat+0x14bb/0x1e40 [ 129.719782][ T6544] path_openat+0x14d7/0x1e40 [ 129.719838][ T6544] do_file_open+0x23e/0x4a0 [ 129.719879][ T6544] ? __pfx_do_file_open+0x10/0x10 [ 129.719938][ T6544] ? _raw_spin_unlock+0x28/0x50 [ 129.719970][ T6544] ? alloc_fd+0x651/0x6c0 [ 129.720010][ T6544] do_sys_openat2+0x115/0x200 [ 129.720040][ T6544] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.720073][ T6544] ? do_user_addr_fault+0xd3f/0x1480 [ 129.720112][ T6544] __x64_sys_openat+0x138/0x170 [ 129.720145][ T6544] do_syscall_64+0x166/0x520 [ 129.720166][ T6544] ? trace_irq_disable+0x3b/0x140 [ 129.720199][ T6544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.720223][ T6544] ? clear_bhb_loop+0x70/0xc0 [ 129.720264][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.720286][ T6544] RIP: 0033:0x7fdc4e55e98e [ 129.720308][ T6544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.720326][ T6544] RSP: 002b:00007fdc4c7f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.720368][ T6544] RAX: ffffffffffffffda RBX: 00007fdc4c7f66c0 RCX: 00007fdc4e55e98e [ 129.720385][ T6544] RDX: 0000000000000000 RSI: 00007fdc4c7f5c00 RDI: ffffffffffffff9c [ 129.720401][ T6544] RBP: 00007fdc4c7f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 129.720416][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 129.720431][ T6544] R13: 00007fdc4e826038 R14: 00007fdc4e825fa0 R15: 00007ffc32246808 [ 129.720467][ T6544] [ 129.750272][ T5707] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.806704][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.817074][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 129.817167][ T43] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 129.850495][ T43] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 129.850626][ T43] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 129.850683][ T43] usb 3-1: config 14 has no interface number 0 [ 129.850790][ T43] usb 3-1: config 14 has no interface number 1 [ 129.851024][ T43] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 129.851148][ T43] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 129.851230][ T43] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 129.851356][ T43] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 129.851432][ T43] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 129.851563][ T43] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.851641][ T43] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.851770][ T43] usb 3-1: config 14 interface 57 has no altsetting 0 [ 129.851826][ T43] usb 3-1: config 14 interface 228 has no altsetting 0 [ 129.861410][ T5715] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.861559][ T5715] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 129.870270][ T5715] usb 1-1: config 0 has no interfaces? [ 129.876612][ T5715] usb 1-1: config 0 has no interfaces? [ 129.889128][ T5715] usb 1-1: config 0 has no interfaces? [ 129.895460][ T5715] usb 1-1: config 0 has no interfaces? [ 129.896336][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.896406][ T43] usb 3-1: Product: syz [ 129.896513][ T43] usb 3-1: Manufacturer: syz [ 129.896555][ T43] usb 3-1: SerialNumber: syz [ 129.916776][ T5715] usb 1-1: config 0 has no interfaces? [ 129.922222][ T5715] usb 1-1: config 0 has no interfaces? [ 129.925664][ T5715] usb 1-1: config 0 has no interfaces? [ 129.933831][ T5715] usb 1-1: config 0 has no interfaces? [ 129.975460][ T5707] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.990301][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.990458][ T5715] usb 1-1: Product: syz [ 129.990503][ T5715] usb 1-1: Manufacturer: syz [ 129.990609][ T5715] usb 1-1: SerialNumber: syz [ 130.029244][ T5707] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.029278][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.029299][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.029348][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.122786][ T5715] usb 1-1: config 0 descriptor?? [ 130.154245][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.154275][ T5707] usb 5-1: Product: syz [ 130.154290][ T5707] usb 5-1: Manufacturer: syz [ 130.454807][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 130.454830][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 130.476806][ T5707] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 130.476831][ T5707] cdc_wdm 5-1:1.0: Unknown control protocol [ 130.629018][ T5707] usb 1-1: USB disconnect, device number 11 [ 130.666670][ T43] legousbtower 3-1:14.57: interrupt endpoints not found [ 130.705514][ T10] usb 5-1: USB disconnect, device number 8 [ 131.069249][ T43] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 131.072546][ T43] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 131.077758][ T5707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.158765][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.227437][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 131.228216][ T5707] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 131.236161][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 131.236186][ T5707] usb 1-1: SerialNumber: syz [ 131.252912][ T5707] usb 1-1: config 0 descriptor?? [ 131.304668][ T5707] as10x_usb: device has been detected [ 131.310232][ T5707] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 131.339611][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.341381][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.341409][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.341430][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.341477][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.344534][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.344574][ T10] usb 5-1: Product: syz [ 131.344590][ T10] usb 5-1: Manufacturer: syz [ 131.423552][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 131.423575][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 131.445649][ T10] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 131.445674][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 131.469696][ T5707] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 131.505279][ T5707] as10x_usb: error during firmware upload part1 [ 131.513423][ T5707] Registered device nBox DVB-T Dongle [ 131.829587][ T5707] usb 1-1: USB disconnect, device number 12 [ 131.885283][ T5707] Unregistered device nBox DVB-T Dongle [ 132.619591][ T6571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.619619][ T6571] overlayfs: failed to set xattr on upper [ 132.619627][ T6571] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.619636][ T6571] overlayfs: ...falling back to index=off. [ 132.619644][ T6571] overlayfs: ...falling back to uuid=null. [ 132.666956][ T6571] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 132.666981][ T6571] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 132.667097][ T6571] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 132.711792][ T6551] usb 3-1: LEGO USB Tower reset control request failed [ 132.712031][ T5707] as10x_usb: device has been disconnected [ 132.725398][ T10] usb 3-1: USB disconnect, device number 11 [ 132.745413][ T6552] usb 3-1: LEGO USB Tower reset control request failed [ 132.765506][ T10] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 132.953656][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953740][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.098718][ T5707] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.269990][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 133.271516][ T5707] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.275071][ T5707] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.275096][ T5707] usb 1-1: config 0 has no interface number 0 [ 133.294363][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.294427][ T5707] usb 1-1: Product: syz [ 133.294461][ T5707] usb 1-1: Manufacturer: syz [ 133.294503][ T5707] usb 1-1: SerialNumber: syz [ 133.323586][ T5707] usb 1-1: config 0 descriptor?? [ 133.696776][ T6598] syzkaller0: entered promiscuous mode [ 133.696802][ T6598] syzkaller0: entered allmulticast mode [ 133.749442][ T5707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 133.749473][ T5707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 133.773173][ T5347] usb 5-1: USB disconnect, device number 9 [ 134.762500][ T5707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 134.762797][ T5707] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 134.773606][ T5707] usb 1-1: USB disconnect, device number 13 [ 134.794759][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ea3000: rx timeout, send abort [ 134.812928][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.979799][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 134.981954][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.982005][ T25] usb 5-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 134.985670][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.985697][ T25] usb 5-1: Product: syz [ 134.985713][ T25] usb 5-1: Manufacturer: syz [ 134.985731][ T25] usb 5-1: SerialNumber: syz [ 135.290311][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ea2800: rx timeout, send abort [ 135.296851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ea3000: abort rx timeout. Force session deactivation [ 135.437004][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888034ea2800: connection exists (fe ff). last cmd: 20 [ 135.492826][ T6628] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 135.686892][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068a7a400: rx timeout, send abort [ 135.807171][ T25] usb 5-1: USB disconnect, device number 10 [ 135.868824][ T5628] udevd[5628]: setting mode of /dev/bus/usb/005/010 to 020664 failed: No such file or directory [ 135.871550][ T5628] udevd[5628]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 135.920461][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.187908][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068a7a400: abort rx timeout. Force session deactivation [ 136.709149][ T6633] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 136.805109][ T6638] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 136.805242][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 136.805490][ T6638] team0: entered promiscuous mode [ 136.805508][ T6638] team_slave_0: entered promiscuous mode [ 136.805709][ T6638] team_slave_1: entered promiscuous mode [ 136.806015][ T6638] team0: entered allmulticast mode [ 136.806031][ T6638] team_slave_0: entered allmulticast mode [ 136.806046][ T6638] team_slave_1: entered allmulticast mode [ 136.876206][ T6638] bridge0: port 3(team0) entered blocking state [ 136.877889][ T6638] bridge0: port 3(team0) entered disabled state [ 136.901037][ T6638] bridge0: port 3(team0) entered blocking state [ 136.901758][ T6638] bridge0: port 3(team0) entered forwarding state [ 136.987619][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.137516][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 137.138277][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.139401][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.139424][ T43] usb 3-1: config 0 has no interfaces? [ 137.139455][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.143148][ T43] usb 3-1: config 0 descriptor?? [ 137.145713][ T5715] rust_binder: 6645: undelivered TRANSACTION_COMPLETE [ 137.220289][ T43] rust_binder: 6645: undelivered transaction 16, process died [ 137.221041][ T6646] syz.0.221 (6646) used greatest stack depth: 11392 bytes left [ 137.257552][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.305205][ T6650] rust_binder: 6649:6650 FDA parent offset not aligned correctly [ 137.305231][ T6650] rust_binder: 6649:6650 error while translating object: EINVAL [ 137.305361][ T6650] rust_binder: Failure in copy_transaction_data: EINVAL [ 137.305386][ T6650] rust_binder: 6649:6650 transaction call to 6649:0 failed EINVAL, code 0 size 80-24 [ 137.346386][ T6648] FAULT_INJECTION: forcing a failure. [ 137.346386][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 137.346420][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 137.346448][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.346463][ T6648] Call Trace: [ 137.346472][ T6648] [ 137.346482][ T6648] dump_stack_lvl+0xe8/0x150 [ 137.346519][ T6648] should_fail_ex+0x3eb/0x540 [ 137.346551][ T6648] should_failslab+0xa8/0x100 [ 137.346578][ T6648] __kmalloc_cache_noprof+0x9e/0x600 [ 137.346614][ T6648] ? get_mountpoint+0x2cc/0x510 [ 137.346648][ T6648] ? get_mountpoint+0x2cc/0x510 [ 137.346691][ T6648] get_mountpoint+0x2cc/0x510 [ 137.346730][ T6648] do_lock_mount+0x570/0x970 [ 137.346777][ T6648] do_new_mount+0x478/0xdc0 [ 137.346813][ T6648] ? __pfx_do_new_mount+0x10/0x10 [ 137.346844][ T6648] ? ns_capable+0x84/0xe0 [ 137.346874][ T6648] ? path_mount+0x647/0x1050 [ 137.346906][ T6648] ? user_path_at+0xd4/0x160 [ 137.346941][ T6648] __se_sys_mount+0x31d/0x420 [ 137.346977][ T6648] ? __pfx___se_sys_mount+0x10/0x10 [ 137.347013][ T6648] ? __x64_sys_mount+0x20/0xc0 [ 137.347053][ T6648] do_syscall_64+0x166/0x520 [ 137.347075][ T6648] ? trace_irq_disable+0x3b/0x140 [ 137.347108][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.347132][ T6648] ? clear_bhb_loop+0x70/0xc0 [ 137.347161][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.347184][ T6648] RIP: 0033:0x7f844db9e159 [ 137.347206][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.347226][ T6648] RSP: 002b:00007f844ea55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.347252][ T6648] RAX: ffffffffffffffda RBX: 00007f844de25fa0 RCX: 00007f844db9e159 [ 137.347269][ T6648] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 137.347285][ T6648] RBP: 00007f844dc3506b R08: 0000200000000200 R09: 0000000000000000 [ 137.347300][ T6648] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 137.347315][ T6648] R13: 00007f844de26038 R14: 00007f844de25fa0 R15: 00007fff55ef9a18 [ 137.347354][ T6648] [ 137.481786][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 137.552516][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.838213][ T25] net1080 5-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, e6:e4:3a:da:c9:88 [ 137.866485][ T6661] kvm: apic: phys broadcast and lowest prio [ 138.735766][ T5715] usb 5-1: USB disconnect, device number 11 [ 138.753124][ T5715] net1080 5-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 139.455761][ T6713] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 139.455785][ T6713] rust_binder: Read failure Err(EFAULT) in pid:159 [ 139.470341][ T6713] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 139.470363][ T6713] rust_binder: Read failure Err(EFAULT) in pid:159 [ 139.471912][ T6713] rust_binder: Error in use_page_slow: EFAULT [ 139.471930][ T6713] rust_binder: use_range failure EFAULT [ 139.471952][ T6713] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 139.471985][ T6713] rust_binder: Failure in copy_transaction_data: EFAULT [ 139.472017][ T6713] rust_binder: 6711:6713 transaction call to 6711:0 failed EFAULT, code 0 size 0-24 [ 139.472843][ T5715] rust_binder: 6711: undelivered TRANSACTION_ERROR: 29201 [ 139.641628][ T5347] usb 3-1: USB disconnect, device number 12 [ 139.697456][ T5714] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.801749][ T6715] kvm: pic: non byte write [ 139.859681][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.866400][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.897978][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.898009][ T5714] usb 5-1: Product: syz [ 139.898025][ T5714] usb 5-1: Manufacturer: syz [ 139.898040][ T5714] usb 5-1: SerialNumber: syz [ 140.006843][ T6721] FAULT_INJECTION: forcing a failure. [ 140.006843][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 140.006879][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 140.006904][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.006917][ T6721] Call Trace: [ 140.006926][ T6721] [ 140.006936][ T6721] dump_stack_lvl+0xe8/0x150 [ 140.006989][ T6721] should_fail_ex+0x3eb/0x540 [ 140.007022][ T6721] should_failslab+0xa8/0x100 [ 140.007048][ T6721] ? alloc_vfsmnt+0x23/0x410 [ 140.007071][ T6721] kmem_cache_alloc_noprof+0x9c/0x600 [ 140.007106][ T6721] ? alloc_vfsmnt+0x23/0x410 [ 140.007136][ T6721] alloc_vfsmnt+0x23/0x410 [ 140.007162][ T6721] clone_mnt+0x4b/0x9b0 [ 140.007193][ T6721] open_new_namespace+0x57e/0xd40 [ 140.007242][ T6721] ? __pfx_open_new_namespace+0x10/0x10 [ 140.007286][ T6721] ? do_getname+0x151/0x250 [ 140.007329][ T6721] vfs_open_tree+0x31f/0x3c0 [ 140.007368][ T6721] ? __pfx_vfs_open_tree+0x10/0x10 [ 140.007412][ T6721] __x64_sys_open_tree+0x96/0x110 [ 140.007442][ T6721] do_syscall_64+0x166/0x520 [ 140.007464][ T6721] ? trace_irq_disable+0x3b/0x140 [ 140.007497][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.007520][ T6721] ? clear_bhb_loop+0x70/0xc0 [ 140.007548][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.007571][ T6721] RIP: 0033:0x7fe33859e159 [ 140.007593][ T6721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.007611][ T6721] RSP: 002b:00007fe339496028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 140.007636][ T6721] RAX: ffffffffffffffda RBX: 00007fe338825fa0 RCX: 00007fe33859e159 [ 140.007652][ T6721] RDX: 0000000000081102 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 140.007668][ T6721] RBP: 00007fe33863506b R08: 0000000000000000 R09: 0000000000000000 [ 140.007683][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.007696][ T6721] R13: 00007fe338826038 R14: 00007fe338825fa0 R15: 00007ffe3249a3c8 [ 140.007732][ T6721] [ 140.464789][ T5714] cdc_ncm 5-1:1.0: bind() failure [ 140.487480][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.491951][ T5714] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 140.491998][ T5714] cdc_ncm 5-1:1.1: bind() failure [ 140.527838][ T5714] usb 5-1: USB disconnect, device number 12 [ 140.678182][ T43] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 140.679212][ T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.679245][ T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.679272][ T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 140.680765][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.680791][ T43] usb 1-1: Product: syz [ 140.680808][ T43] usb 1-1: Manufacturer: syz [ 140.685086][ T6723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.685228][ T6723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.685376][ T6723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.248680][ T5714] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.401556][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 141.421958][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.426851][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.685394][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.685442][ T5714] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 141.686364][ T5714] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 141.686399][ T5714] usb 3-1: can't read configurations, error -71 [ 141.734807][ T6765] FAULT_INJECTION: forcing a failure. [ 141.734807][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 141.734840][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT(full) [ 141.734867][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.734881][ T6765] Call Trace: [ 141.734890][ T6765] [ 141.734901][ T6765] dump_stack_lvl+0xe8/0x150 [ 141.734938][ T6765] should_fail_ex+0x3eb/0x540 [ 141.734971][ T6765] should_failslab+0xa8/0x100 [ 141.734997][ T6765] ? __kernfs_new_node+0xe6/0x980 [ 141.735033][ T6765] kmem_cache_alloc_noprof+0x9c/0x600 [ 141.735068][ T6765] ? __kernfs_new_node+0xe6/0x980 [ 141.735111][ T6765] __kernfs_new_node+0xe6/0x980 [ 141.735166][ T6765] ? __pfx___kernfs_new_node+0x10/0x10 [ 141.735204][ T6765] ? kernfs_root+0x1c/0x230 [ 141.735245][ T6765] ? kernfs_root+0x1c/0x230 [ 141.735278][ T6765] ? kernfs_root+0x1c/0x230 [ 141.735310][ T6765] ? kernfs_root+0x1c/0x230 [ 141.735347][ T6765] kernfs_new_node+0xea/0x140 [ 141.735389][ T6765] __kernfs_create_file+0x4b/0x2e0 [ 141.735420][ T6765] sysfs_add_file_mode_ns+0x237/0x300 [ 141.735459][ T6765] sysfs_create_file_ns+0x12b/0x1b0 [ 141.735491][ T6765] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 141.735522][ T6765] ? sysfs_do_create_link_sd+0xe0/0x110 [ 141.735558][ T6765] ? device_create_file+0xf4/0x1b0 [ 141.735588][ T6765] device_add+0x432/0xb80 [ 141.735618][ T6765] iommu_mock_device_add+0x83/0x1e0 [ 141.735653][ T6765] iommufd_test+0x38d2/0x6360 [ 141.735699][ T6765] ? __lock_acquire+0x747/0x2de0 [ 141.735733][ T6765] ? __pfx_iommufd_test+0x10/0x10 [ 141.735785][ T6765] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.735812][ T6765] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.735840][ T6765] ? lock_acquire+0x115/0x350 [ 141.735888][ T6765] ? __might_fault+0xaf/0x130 [ 141.735925][ T6765] iommufd_fops_ioctl+0x465/0x600 [ 141.735958][ T6765] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 141.735990][ T6765] ? __fget_files+0x2a/0x420 [ 141.736025][ T6765] ? __fget_files+0x2a/0x420 [ 141.736058][ T6765] ? bpf_lsm_file_ioctl+0x9/0x20 [ 141.736088][ T6765] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 141.736114][ T6765] __se_sys_ioctl+0xfc/0x170 [ 141.736174][ T6765] do_syscall_64+0x166/0x520 [ 141.736198][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.736222][ T6765] ? clear_bhb_loop+0x70/0xc0 [ 141.736252][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.736275][ T6765] RIP: 0033:0x7f4c1179e159 [ 141.736297][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.736315][ T6765] RSP: 002b:00007f4c125b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.736341][ T6765] RAX: ffffffffffffffda RBX: 00007f4c11a25fa0 RCX: 00007f4c1179e159 [ 141.736359][ T6765] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 141.736375][ T6765] RBP: 00007f4c1183506b R08: 0000000000000000 R09: 0000000000000000 [ 141.736389][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.736403][ T6765] R13: 00007f4c11a26038 R14: 00007f4c11a25fa0 R15: 00007fffe3181028 [ 141.736439][ T6765] [ 141.962353][ T43] redrat3 1-1:1.0: Firmware rev:  [ 142.331037][ T43] redrat3 1-1:1.0: Failed to read timeout from hardware [ 142.517578][ T43] rc_core: IR keymap rc-hauppauge not found [ 142.517598][ T43] Registered IR keymap rc-empty [ 142.519656][ T43] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0 [ 142.551265][ T43] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input15 [ 142.569620][ T43] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 142.570072][ T43] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 142.570123][ T43] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 142.643068][ T43] redrat3 1-1:1.0: probe with driver redrat3 failed with error -5 [ 142.661380][ T43] usb 1-1: USB disconnect, device number 14 [ 142.802878][ T6795] dlm: no local IP address has been set [ 142.802899][ T6795] dlm: cannot start dlm midcomms -107 [ 142.947443][ T5715] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.101397][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 143.102729][ T5715] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 143.104005][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.143347][ T5715] usb 2-1: config 0 descriptor?? [ 143.159824][ T5715] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 143.214928][ T6810] FAULT_INJECTION: forcing a failure. [ 143.214928][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 143.214989][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.4.260 Not tainted syzkaller #0 PREEMPT(full) [ 143.215024][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.215039][ T6810] Call Trace: [ 143.215048][ T6810] [ 143.215058][ T6810] dump_stack_lvl+0xe8/0x150 [ 143.215094][ T6810] should_fail_ex+0x3eb/0x540 [ 143.215128][ T6810] should_failslab+0xa8/0x100 [ 143.215153][ T6810] ? locks_get_lock_context+0x95/0x5c0 [ 143.215178][ T6810] kmem_cache_alloc_noprof+0x9c/0x600 [ 143.215210][ T6810] ? __kasan_kmalloc+0x93/0xb0 [ 143.215233][ T6810] ? locks_get_lock_context+0x95/0x5c0 [ 143.215256][ T6810] ? __kmalloc_cache_noprof+0x148/0x600 [ 143.215295][ T6810] locks_get_lock_context+0x95/0x5c0 [ 143.215324][ T6810] generic_setlease+0x47e/0xfd0 [ 143.215369][ T6810] ? __pfx_generic_setlease+0x10/0x10 [ 143.215408][ T6810] ? vfs_setlease+0x230/0x2c0 [ 143.215446][ T6810] do_fcntl_add_lease+0x35e/0x470 [ 143.215483][ T6810] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 143.215518][ T6810] ? futex_wait+0x2a2/0x390 [ 143.215557][ T6810] fcntl_setlease+0x24e/0x3b0 [ 143.215591][ T6810] ? __pfx_fcntl_setlease+0x10/0x10 [ 143.215631][ T6810] do_fcntl+0x8ae/0x1a20 [ 143.215670][ T6810] ? lock_acquire+0x115/0x350 [ 143.215703][ T6810] ? __pfx_do_fcntl+0x10/0x10 [ 143.215744][ T6810] ? __fget_files+0x2a/0x420 [ 143.215776][ T6810] ? __fget_files+0x2a/0x420 [ 143.215812][ T6810] ? bpf_lsm_file_fcntl+0x9/0x20 [ 143.215845][ T6810] __se_sys_fcntl+0xc8/0x150 [ 143.215880][ T6810] do_syscall_64+0x166/0x520 [ 143.215901][ T6810] ? trace_irq_disable+0x3b/0x140 [ 143.215934][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.215958][ T6810] ? clear_bhb_loop+0x70/0xc0 [ 143.215987][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.216040][ T6810] RIP: 0033:0x7f4c1179e159 [ 143.216068][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.216088][ T6810] RSP: 002b:00007f4c125b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 143.216114][ T6810] RAX: ffffffffffffffda RBX: 00007f4c11a25fa0 RCX: 00007f4c1179e159 [ 143.216131][ T6810] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 143.216145][ T6810] RBP: 00007f4c1183506b R08: 0000000000000000 R09: 0000000000000000 [ 143.216160][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.216174][ T6810] R13: 00007f4c11a26038 R14: 00007f4c11a25fa0 R15: 00007fffe3181028 [ 143.216210][ T6810] [ 143.310463][ T6807] FAULT_INJECTION: forcing a failure. [ 143.310463][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 143.310576][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT(full) [ 143.310671][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.310707][ T6807] Call Trace: [ 143.310729][ T6807] [ 143.310759][ T6807] dump_stack_lvl+0xe8/0x150 [ 143.310859][ T6807] should_fail_ex+0x3eb/0x540 [ 143.310937][ T6807] should_failslab+0xa8/0x100 [ 143.311025][ T6807] __kmalloc_cache_node_noprof+0xa5/0x620 [ 143.311129][ T6807] ? blkg_alloc+0xcc/0x8f0 [ 143.311192][ T6807] ? blkg_alloc+0xcc/0x8f0 [ 143.311264][ T6807] blkg_alloc+0xcc/0x8f0 [ 143.311335][ T6807] ? xas_store+0x9f5/0x17f0 [ 143.311401][ T6807] blkcg_init_disk+0x1ca/0x2e0 [ 143.311474][ T6807] ? __pfx_blkcg_init_disk+0x10/0x10 [ 143.311553][ T6807] ? do_raw_spin_unlock+0xf5/0x200 [ 143.311645][ T6807] __alloc_disk_node+0x312/0x600 [ 143.311740][ T6807] __blk_alloc_disk+0x105/0x1d0 [ 143.311834][ T6807] ? __pfx___blk_alloc_disk+0x10/0x10 [ 143.312013][ T6807] ? __raw_spin_lock_init+0x45/0x100 [ 143.312103][ T6807] dm_create+0x476/0xf70 [ 143.312188][ T6807] dev_create+0x1f7/0x400 [ 143.312290][ T6807] ? __pfx_dev_create+0x10/0x10 [ 143.312362][ T6807] ? __might_fault+0xaf/0x130 [ 143.312465][ T6807] dm_ctl_ioctl+0x9ec/0xe10 [ 143.312588][ T6807] ? __pfx_dev_create+0x10/0x10 [ 143.312681][ T6807] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 143.312842][ T6807] ? __fget_files+0x2a/0x420 [ 143.312921][ T6807] ? __fget_files+0x3a2/0x420 [ 143.313005][ T6807] ? __fget_files+0x2a/0x420 [ 143.313091][ T6807] ? bpf_lsm_file_ioctl+0x9/0x20 [ 143.313172][ T6807] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 143.313260][ T6807] __se_sys_ioctl+0xfc/0x170 [ 143.313380][ T6807] do_syscall_64+0x166/0x520 [ 143.313440][ T6807] ? trace_irq_disable+0x3b/0x140 [ 143.313519][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.313582][ T6807] ? clear_bhb_loop+0x70/0xc0 [ 143.313657][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.313719][ T6807] RIP: 0033:0x7f844db9e159 [ 143.313780][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.313833][ T6807] RSP: 002b:00007f844ea55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.313899][ T6807] RAX: ffffffffffffffda RBX: 00007f844de25fa0 RCX: 00007f844db9e159 [ 143.313944][ T6807] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 143.313985][ T6807] RBP: 00007f844dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 143.314027][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.314068][ T6807] R13: 00007f844de26038 R14: 00007f844de25fa0 R15: 00007fff55ef9a18 [ 143.314163][ T6807] [ 143.354923][ T5714] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.597626][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 143.600230][ T5714] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 143.604937][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.684242][ T5714] usb 3-1: config 0 descriptor?? [ 143.809332][ T5714] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 144.209604][ T5700] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 144.357755][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 144.358531][ T5700] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 144.359881][ T5700] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.359917][ T5700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.362856][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.362882][ T5700] usb 1-1: Product: syz [ 144.362898][ T5700] usb 1-1: Manufacturer: syz [ 144.362915][ T5700] usb 1-1: SerialNumber: syz [ 144.434076][ T5700] usb 1-1: config 0 descriptor?? [ 144.451479][ C0] Unknown status report in ack skb [ 144.658280][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.664752][ T5700] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 144.696313][ T5700] imon:send_packet: packet tx failed (-71) [ 144.707435][ T5700] imon 1-1:0.0: panel buttons/knobs setup failed [ 144.788447][ T5700] rc_core: IR keymap rc-imon-pad not found [ 144.788478][ T5700] Registered IR keymap rc-empty [ 144.788580][ T5700] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 144.788594][ T5700] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 144.788911][ T5700] imon:send_packet: packet tx failed (-71) [ 144.821111][ T5700] imon 1-1:0.0: remote input dev register failed [ 144.821291][ T5700] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 144.895828][ T5700] imon 1-1:0.0: unable to initialize intf0, err 0 [ 144.895871][ T5700] imon:imon_probe: failed to initialize context! [ 144.895941][ T5700] imon 1-1:0.0: unable to register, err -19 [ 144.923391][ T5700] usb 1-1: USB disconnect, device number 15 [ 145.237491][ T5700] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 145.398187][ T5700] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 145.399659][ T5700] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 145.399691][ T5700] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 145.399747][ T5700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.402409][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.402436][ T5700] usb 1-1: Product: syz [ 145.402452][ T5700] usb 1-1: Manufacturer: syz [ 145.402542][ T5700] usb 1-1: SerialNumber: syz [ 145.407308][ T5700] usb 1-1: config 0 descriptor?? [ 145.475443][ T6815] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.564726][ T6844] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 145.623001][ T6844] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 145.693777][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 145.705922][ T5700] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 145.794090][ T6846] Bluetooth: MGMT ver 1.23 [ 145.888922][ T5715] gspca_sonixj: reg_w1 err -71 [ 145.889044][ T5715] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 145.895826][ T5715] usb 2-1: USB disconnect, device number 9 [ 145.987480][ T5700] rc_core: IR keymap rc-imon-pad not found [ 145.987513][ T5700] Registered IR keymap rc-empty [ 145.987589][ T5700] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 145.987612][ T5700] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 146.110068][ T5700] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.112378][ T5700] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 146.116331][ T5700] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:16> initialized [ 146.191684][ T5714] gspca_vc032x: reg_r err -71 [ 146.191707][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191718][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191730][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191739][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191750][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191759][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191769][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191779][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191789][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191800][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191810][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191820][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191829][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191839][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191849][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191859][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191868][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.191878][ T5714] gspca_vc032x: Unknown sensor... [ 146.191951][ T5714] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 146.289654][ T5714] usb 3-1: USB disconnect, device number 15 [ 146.343359][ T6815] imon:lcd_write: invalid payload size: 0 (expected 8) [ 146.349827][ T6815] imon:display_open: display port is already open [ 146.369346][ T10] usb 1-1: USB disconnect, device number 16 [ 146.773810][ T5626] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 146.773847][ T5626] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 147.077513][ T5715] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 147.248897][ T5715] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 147.250069][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.250119][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.250144][ T5715] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.250168][ T5715] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.250211][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.543897][ T6870] FAULT_INJECTION: forcing a failure. [ 147.543897][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 147.543930][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 147.543955][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.543970][ T6870] Call Trace: [ 147.543979][ T6870] [ 147.543988][ T6870] dump_stack_lvl+0xe8/0x150 [ 147.544025][ T6870] should_fail_ex+0x3eb/0x540 [ 147.544056][ T6870] should_failslab+0xa8/0x100 [ 147.544084][ T6870] __kmalloc_cache_noprof+0x9e/0x600 [ 147.544119][ T6870] ? __kmalloc_cache_noprof+0x148/0x600 [ 147.544151][ T6870] ? sctp_auth_init+0x1f3/0x400 [ 147.544180][ T6870] ? sctp_auth_init+0x1f3/0x400 [ 147.544217][ T6870] sctp_auth_init+0x1f3/0x400 [ 147.544254][ T6870] sctp_setsockopt_auth_supported+0x302/0x530 [ 147.544296][ T6870] sctp_setsockopt+0x599/0x12c0 [ 147.544330][ T6870] ? sock_common_setsockopt+0x36/0xc0 [ 147.544364][ T6870] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.544401][ T6870] do_sock_setsockopt+0x17c/0x1b0 [ 147.544431][ T6870] __x64_sys_setsockopt+0x13d/0x1b0 [ 147.544461][ T6870] do_syscall_64+0x166/0x520 [ 147.544482][ T6870] ? trace_irq_disable+0x3b/0x140 [ 147.544514][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.544539][ T6870] ? clear_bhb_loop+0x70/0xc0 [ 147.544567][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.544589][ T6870] RIP: 0033:0x7fdc4e59e159 [ 147.544610][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.544629][ T6870] RSP: 002b:00007fdc4c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.544653][ T6870] RAX: ffffffffffffffda RBX: 00007fdc4e825fa0 RCX: 00007fdc4e59e159 [ 147.544670][ T6870] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 147.544684][ T6870] RBP: 00007fdc4e63506b R08: 0000000000000008 R09: 0000000000000000 [ 147.544699][ T6870] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 147.544713][ T6870] R13: 00007fdc4e826038 R14: 00007fdc4e825fa0 R15: 00007ffc32246808 [ 147.544749][ T6870] [ 147.817482][ T5612] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 147.817805][ T5626] Bluetooth: hci1: command 0x0c24 tx timeout [ 147.819576][ T4931] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 147.975441][ T6880] syzkaller0: entered promiscuous mode [ 147.975480][ T6880] syzkaller0: entered allmulticast mode [ 148.431395][ T5715] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 148.992215][ T6896] gadgetfs: bound to dummy_udc driver [ 149.238056][ T25] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 149.238380][ C1] gadgetfs: connected [ 149.239222][ T25] gadgetfs: disconnected [ 149.897552][ T5612] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 149.897746][ T5612] Bluetooth: hci0: command 0x0c24 tx timeout [ 149.898135][ T5612] Bluetooth: hci1: command 0x0c24 tx timeout [ 149.898312][ T4931] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 150.964000][ T6920] fuse: fd is not a fuse device [ 151.644870][ T5626] Bluetooth: hci2: SCO packet too small [ 151.857807][ T25] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 151.980047][ T6945] fuse: fd is not a fuse device [ 152.008535][ T25] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 152.010090][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.010138][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 152.010196][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 152.010225][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 152.010258][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.013946][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 152.013972][ T25] usb 1-1: Product: syz [ 152.014015][ T25] usb 1-1: Manufacturer: syz [ 152.014032][ T25] usb 1-1: SerialNumber: syz [ 152.072207][ T25] usb 1-1: config 0 descriptor?? [ 152.332183][ T25] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 152.332212][ T25] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 152.424913][ T5626] Bluetooth: hci0: SCO packet too small [ 152.534623][ T25] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 152.534652][ T25] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 152.534673][ T25] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 152.735470][ T25] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 153.584982][ T5715] Console: switching to colour frame buffer device 128x48 [ 153.609040][ T5715] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 153.641610][ T10] usb 3-1: USB disconnect, device number 16 [ 153.695388][ T10] Console: switching to colour VGA+ 80x25 [ 154.154309][ T5626] Bluetooth: hci3: SCO packet too small [ 154.355431][ T25] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 154.381428][ T25] usb 1-1: USB disconnect, device number 18 [ 154.788809][ T6967] mount: server 127.0.0.1 not responding, timed out [ 154.926591][ T6993] overlayfs: failed to clone upperpath [ 154.974863][ T6984] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 155.187457][ T5715] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.342164][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 155.344503][ T5715] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.362712][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.362738][ T5715] usb 1-1: Product: syz [ 155.362753][ T5715] usb 1-1: Manufacturer: syz [ 155.362768][ T5715] usb 1-1: SerialNumber: syz [ 155.388633][ T5715] usb 1-1: config 0 descriptor?? [ 155.403597][ T5715] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 155.468430][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 155.618132][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 155.619202][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 155.619229][ T10] usb 3-1: config 0 has no interface number 0 [ 155.619282][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.621447][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.621473][ T10] usb 3-1: Product: syz [ 155.621490][ T10] usb 3-1: Manufacturer: syz [ 155.621506][ T10] usb 3-1: SerialNumber: syz [ 155.625192][ T10] usb 3-1: config 0 descriptor?? [ 155.696561][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 156.127276][ T7019] overlayfs: failed to clone upperpath [ 157.624131][ T5715] gspca_ov534_9: reg_r err -71 [ 157.877506][ T5715] gspca_ov534_9: Unknown sensor 0000 [ 157.877623][ T5715] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 157.881951][ T5715] usb 1-1: USB disconnect, device number 19 [ 157.912698][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 157.914292][ T25] usb 3-1: USB disconnect, device number 17 [ 157.943617][ T25] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 158.427438][ T5347] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.580595][ T5347] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.581565][ T5347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.581617][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.623886][ T5347] usb 1-1: config 0 descriptor?? [ 158.643859][ T5347] pwc: Askey VC010 type 2 USB webcam detected. [ 158.749153][ T7049] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 158.750772][ T7049] syz_tun: entered promiscuous mode [ 158.790134][ T7049] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 159.037915][ T5347] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.039100][ T5347] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.064223][ T5347] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.065409][ T5347] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.066229][ T5347] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.067157][ T5347] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.098554][ T5347] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.099321][ T5347] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.100235][ T5347] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.303876][ T5347] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.305945][ T5347] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.306391][ T5347] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.306820][ T5347] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.313967][ T5347] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.327542][ T5347] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.350295][ T5347] pwc: Registered as video103. [ 159.352799][ T5347] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 159.379167][ T5347] usb 1-1: USB disconnect, device number 20 [ 160.021880][ T7065] fuse: fd is not a fuse device [ 160.467479][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 160.618284][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 160.619276][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.619307][ T25] usb 1-1: config 0 has no interfaces? [ 160.619341][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.623315][ T25] usb 1-1: config 0 descriptor?? [ 162.948105][ T5714] usb 1-1: USB disconnect, device number 21 [ 163.417475][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 163.568031][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 163.569171][ T25] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 163.569197][ T25] usb 1-1: config 0 has no interface number 0 [ 163.569225][ T25] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.570891][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.570909][ T25] usb 1-1: Product: syz [ 163.570920][ T25] usb 1-1: Manufacturer: syz [ 163.570930][ T25] usb 1-1: SerialNumber: syz [ 163.573127][ T25] usb 1-1: config 0 descriptor?? [ 163.614686][ T25] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 165.819325][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 165.823066][ T5714] usb 1-1: USB disconnect, device number 22 [ 165.840949][ T5714] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 166.647598][ T7116] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 166.647638][ T7116] netlink: 'syz.1.372': attribute type 2 has an invalid length. [ 167.366518][ T7137] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 1200 [ 167.387885][ T7139] overlayfs: failed to clone upperpath [ 168.145735][ T7169] netlink: 80 bytes leftover after parsing attributes in process `syz.4.391'. [ 169.824861][ T7220] overlayfs: failed to clone upperpath [ 170.117754][ T7232] fuse: fd is not a fuse device [ 170.952864][ T7267] bridge0: port 3(netdevsim0) entered blocking state [ 170.953306][ T7267] bridge0: port 3(netdevsim0) entered disabled state [ 170.953630][ T7267] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 170.956941][ T7267] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 170.957682][ T7267] bridge0: port 3(netdevsim0) entered blocking state [ 170.957759][ T7267] bridge0: port 3(netdevsim0) entered forwarding state [ 171.533117][ T7290] FAULT_INJECTION: forcing a failure. [ 171.533117][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 171.533155][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(full) [ 171.533185][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.533199][ T7290] Call Trace: [ 171.533208][ T7290] [ 171.533218][ T7290] dump_stack_lvl+0xe8/0x150 [ 171.533256][ T7290] should_fail_ex+0x3eb/0x540 [ 171.533289][ T7290] should_failslab+0xa8/0x100 [ 171.533317][ T7290] __kmalloc_cache_node_noprof+0xa5/0x620 [ 171.533355][ T7290] ? bdi_alloc+0x51/0x110 [ 171.533389][ T7290] ? bdi_alloc+0x51/0x110 [ 171.533424][ T7290] ? __alloc_disk_node+0x5e/0x600 [ 171.533460][ T7290] bdi_alloc+0x51/0x110 [ 171.533517][ T7290] __alloc_disk_node+0xab/0x600 [ 171.533553][ T7290] __blk_alloc_disk+0x105/0x1d0 [ 171.533589][ T7290] ? __pfx___blk_alloc_disk+0x10/0x10 [ 171.533648][ T7290] ? __raw_spin_lock_init+0x45/0x100 [ 171.533678][ T7290] dm_create+0x476/0xf70 [ 171.533708][ T7290] dev_create+0x1f7/0x400 [ 171.533746][ T7290] ? __pfx_dev_create+0x10/0x10 [ 171.533781][ T7290] ? __might_fault+0xaf/0x130 [ 171.533816][ T7290] dm_ctl_ioctl+0x9ec/0xe10 [ 171.533860][ T7290] ? __pfx_dev_create+0x10/0x10 [ 171.533895][ T7290] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 171.533957][ T7290] ? __fget_files+0x2a/0x420 [ 171.533986][ T7290] ? __fget_files+0x3a2/0x420 [ 171.534013][ T7290] ? __fget_files+0x2a/0x420 [ 171.534045][ T7290] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.534083][ T7290] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 171.534118][ T7290] __se_sys_ioctl+0xfc/0x170 [ 171.534155][ T7290] do_syscall_64+0x166/0x520 [ 171.534177][ T7290] ? trace_irq_disable+0x3b/0x140 [ 171.534209][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.534230][ T7290] ? clear_bhb_loop+0x70/0xc0 [ 171.534253][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.534296][ T7290] RIP: 0033:0x7fe33859e159 [ 171.534314][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.534330][ T7290] RSP: 002b:00007fe339496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.534352][ T7290] RAX: ffffffffffffffda RBX: 00007fe338825fa0 RCX: 00007fe33859e159 [ 171.534366][ T7290] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 171.534378][ T7290] RBP: 00007fe33863506b R08: 0000000000000000 R09: 0000000000000000 [ 171.534390][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.534401][ T7290] R13: 00007fe338826038 R14: 00007fe338825fa0 R15: 00007ffe3249a3c8 [ 171.534429][ T7290] [ 172.223558][ T7306] syz.2.430: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.223642][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT(full) [ 172.223668][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.223683][ T7306] Call Trace: [ 172.223692][ T7306] [ 172.223701][ T7306] dump_stack_lvl+0xe8/0x150 [ 172.223741][ T7306] warn_alloc+0x24d/0x270 [ 172.223783][ T7306] ? __pfx_warn_alloc+0x10/0x10 [ 172.223813][ T7306] ? policy_nodemask+0x2cc/0x8e0 [ 172.223846][ T7306] ? alloc_pages_mpol+0x256/0x390 [ 172.223882][ T7306] __vmalloc_node_range_noprof+0x12c8/0x1690 [ 172.223951][ T7306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.223982][ T7306] ? kvm_dev_ioctl+0x12b/0x1770 [ 172.224014][ T7306] ? rcu_is_watching+0x16/0xb0 [ 172.224038][ T7306] ? kvm_dev_ioctl+0x12b/0x1770 [ 172.224070][ T7306] ? rcu_is_watching+0x16/0xb0 [ 172.224095][ T7306] ? kvm_dev_ioctl+0x12b/0x1770 [ 172.224126][ T7306] __kvmalloc_node_noprof+0x59c/0x820 [ 172.224163][ T7306] ? kvm_dev_ioctl+0x12b/0x1770 [ 172.224199][ T7306] ? kvm_dev_ioctl+0x12b/0x1770 [ 172.224238][ T7306] kvm_dev_ioctl+0x12b/0x1770 [ 172.224272][ T7306] ? __fget_files+0x2a/0x420 [ 172.224304][ T7306] ? __fget_files+0x2a/0x420 [ 172.224333][ T7306] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 172.224364][ T7306] ? __fget_files+0x2a/0x420 [ 172.224397][ T7306] ? bpf_lsm_file_ioctl+0x9/0x20 [ 172.224427][ T7306] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 172.224459][ T7306] __se_sys_ioctl+0xfc/0x170 [ 172.224509][ T7306] do_syscall_64+0x166/0x520 [ 172.224531][ T7306] ? trace_irq_disable+0x3b/0x140 [ 172.224564][ T7306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.224589][ T7306] ? clear_bhb_loop+0x70/0xc0 [ 172.224618][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.224641][ T7306] RIP: 0033:0x7fe33859e159 [ 172.224664][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.224683][ T7306] RSP: 002b:00007fe339496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.224708][ T7306] RAX: ffffffffffffffda RBX: 00007fe338825fa0 RCX: 00007fe33859e159 [ 172.224726][ T7306] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 172.224741][ T7306] RBP: 00007fe33863506b R08: 0000000000000000 R09: 0000000000000000 [ 172.224756][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.224771][ T7306] R13: 00007fe338826038 R14: 00007fe338825fa0 R15: 00007ffe3249a3c8 [ 172.224807][ T7306] [ 172.244688][ T7306] Mem-Info: [ 172.244705][ T7306] active_anon:40253 inactive_anon:6 isolated_anon:0 [ 172.244705][ T7306] active_file:2 inactive_file:54869 isolated_file:0 [ 172.244705][ T7306] unevictable:0 dirty:63 writeback:4 [ 172.244705][ T7306] slab_reclaimable:10268 slab_unreclaimable:92147 [ 172.244705][ T7306] mapped:25063 shmem:34489 pagetables:1442 [ 172.244705][ T7306] sec_pagetables:0 bounce:0 [ 172.244705][ T7306] kernel_misc_reclaimable:0 [ 172.244705][ T7306] free:1294906 free_pcp:11977 free_cma:0 [ 172.244767][ T7306] Node 0 active_anon:161012kB inactive_anon:24kB active_file:8kB inactive_file:219276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100252kB dirty:252kB writeback:8kB shmem:137956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12464kB pagetables:5656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.244829][ T7306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:8kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.244891][ T7306] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.244960][ T7306] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 172.245002][ T7306] Node 0 DMA32 free:1226780kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:161012kB inactive_anon:24kB active_file:8kB inactive_file:219276kB unevictable:0kB writepending:260kB zspages:624kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:47908kB local_pcp:26700kB free_cma:0kB [ 172.245085][ T7306] lowmem_reserve[]: 0 0 1 1 1 [ 172.245122][ T7306] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.245185][ T7306] lowmem_reserve[]: 0 0 0 0 0 [ 172.245223][ T7306] Node 1 Normal free:3937484kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.245289][ T7306] lowmem_reserve[]: 0 0 0 0 0 [ 172.245327][ T7306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.245456][ T7306] Node 0 DMA32: 630*4kB (UME) 138*8kB (UME) 57*16kB (UME) 124*32kB (UME) 81*64kB (UME) 23*128kB (UM) 3*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 294*4096kB (UM) = 1226744kB [ 172.245644][ T7306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.245772][ T7306] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3937484kB [ 172.245946][ T7306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.245965][ T7306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.245984][ T7306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.246003][ T7306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.246021][ T7306] 89368 total pagecache pages [ 172.246030][ T7306] 12 pages in swap cache [ 172.246038][ T7306] Free swap = 124648kB [ 172.246047][ T7306] Total swap = 124996kB [ 172.246056][ T7306] 2097051 pages RAM [ 172.246064][ T7306] 0 pages HighMem/MovableOnly [ 172.246072][ T7306] 429554 pages reserved [ 172.246080][ T7306] 0 pages cma reserved [ 172.270340][ T5714] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 172.478579][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 172.478618][ T5714] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 172.586086][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.780241][ T5714] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 172.780271][ T5714] usb 1-1: Product: syz [ 172.780287][ T5714] usb 1-1: Manufacturer: syz [ 172.964982][ T5714] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 173.151001][ T5714] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 173.156538][ T5714] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 173.156602][ T5714] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 173.189527][ T5714] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 173.239124][ T5714] usb 1-1: USB disconnect, device number 23 [ 173.354352][ T7329] input: syz0 as /devices/virtual/input/input21 [ 173.495988][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 174.134373][ T7359] fuse: fd is not a fuse device [ 174.236437][ T7363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.451'. [ 174.348074][ T6560] IPVS: starting estimator thread 0... [ 174.438597][ T7366] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.480500][ T30] audit: type=1400 audit(1790202302.550:6): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=7360 comm="syz.0.450" [ 174.713791][ T7377] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 175.125795][ T7392] fuse: fd is not a fuse device [ 175.667480][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 175.827525][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 175.828316][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 175.831853][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.831879][ T10] usb 1-1: Product: syz [ 175.831896][ T10] usb 1-1: Manufacturer: syz [ 175.831913][ T10] usb 1-1: SerialNumber: syz [ 175.876884][ T10] usb 1-1: config 0 descriptor?? [ 175.890271][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 176.782024][ T30] audit: type=1326 audit(1790202304.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.478" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c1179e159 code=0x0 [ 176.814188][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 176.857882][ T7431] fuse: fd is not a fuse device [ 176.861521][ T7431] overlayfs: failed to clone upperpath [ 176.893946][ T30] audit: type=1326 audit(1790202304.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.478" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c1179e159 code=0x0 [ 176.967858][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 176.968655][ T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 176.970055][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.972868][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.972894][ T9] usb 3-1: Product: syz [ 176.972911][ T9] usb 3-1: Manufacturer: syz [ 176.972926][ T9] usb 3-1: SerialNumber: syz [ 177.031671][ T9] usb 3-1: config 0 descriptor?? [ 177.065403][ T7438] fuse: fd is not a fuse device [ 177.636023][ T7448] FAULT_INJECTION: forcing a failure. [ 177.636023][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 177.636058][ T7448] CPU: 1 UID: 0 PID: 7448 Comm: syz.2.475 Not tainted syzkaller #0 PREEMPT(full) [ 177.636084][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.636098][ T7448] Call Trace: [ 177.636108][ T7448] [ 177.636118][ T7448] dump_stack_lvl+0xe8/0x150 [ 177.636156][ T7448] should_fail_ex+0x3eb/0x540 [ 177.636188][ T7448] ? __alloc_skb+0x1db/0x7a0 [ 177.636218][ T7448] should_failslab+0xa8/0x100 [ 177.636245][ T7448] ? __alloc_skb+0x1db/0x7a0 [ 177.636265][ T7448] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 177.636300][ T7448] ? __alloc_skb+0x18d/0x7a0 [ 177.636322][ T7448] ? __alloc_skb+0x1db/0x7a0 [ 177.636351][ T7448] __alloc_skb+0x1db/0x7a0 [ 177.636378][ T7448] alloc_skb_with_frags+0xc6/0x760 [ 177.636416][ T7448] sock_alloc_send_pskb+0x95e/0xa70 [ 177.636450][ T7448] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.636506][ T7448] ? kasan_save_track+0x4f/0x80 [ 177.636542][ T7448] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.636572][ T7448] ? ip6_make_skb+0x1c8/0x320 [ 177.636594][ T7448] ? udpv6_sendmsg+0x1dfb/0x2610 [ 177.636627][ T7448] ? sock_sendmsg_nosec+0x90/0x180 [ 177.636656][ T7448] ? ____sys_sendmsg+0x54e/0x850 [ 177.636680][ T7448] ? ___sys_sendmsg+0x2a5/0x360 [ 177.636702][ T7448] ? __x64_sys_sendmsg+0x1b1/0x290 [ 177.636728][ T7448] ? do_syscall_64+0x166/0x520 [ 177.636749][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.636786][ T7448] __ip6_append_data+0x2de9/0x40c0 [ 177.636809][ T7448] ? __lock_acquire+0x747/0x2de0 [ 177.636861][ T7448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 177.636913][ T7448] ? ip6_mtu+0x7d/0x490 [ 177.636949][ T7448] ? __pfx___ip6_append_data+0x10/0x10 [ 177.636973][ T7448] ? __pfx_ip6_mtu+0x10/0x10 [ 177.637016][ T7448] ip6_make_skb+0x2af/0x320 [ 177.637041][ T7448] ? sk_dst_check+0x25/0x480 [ 177.637073][ T7448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 177.637108][ T7448] ? __pfx_ip6_make_skb+0x10/0x10 [ 177.637142][ T7448] ? ip6_sk_dst_lookup_flow+0x856/0xa50 [ 177.637169][ T7448] ? udpv6_sendmsg+0x1898/0x2610 [ 177.637205][ T7448] udpv6_sendmsg+0x1dfb/0x2610 [ 177.637259][ T7448] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 177.637296][ T7448] ? udp_lib_get_port+0x1776/0x1c50 [ 177.637354][ T7448] ? inet_send_prepare+0x1b4/0x260 [ 177.637390][ T7448] ? lockdep_hardirqs_on+0x7b/0x110 [ 177.637425][ T7448] ? inet_send_prepare+0x1b4/0x260 [ 177.637463][ T7448] ? __local_bh_enable_ip+0xd6/0x140 [ 177.637491][ T7448] ? inet_send_prepare+0x1b4/0x260 [ 177.637523][ T7448] ? inet6_sendmsg+0xe4/0x120 [ 177.637553][ T7448] ? __pfx_inet6_sendmsg+0x10/0x10 [ 177.637581][ T7448] sock_sendmsg_nosec+0x90/0x180 [ 177.637616][ T7448] ____sys_sendmsg+0x54e/0x850 [ 177.637648][ T7448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.637685][ T7448] ? import_iovec+0x73/0xa0 [ 177.637719][ T7448] ___sys_sendmsg+0x2a5/0x360 [ 177.637744][ T7448] ? __lock_acquire+0x747/0x2de0 [ 177.637783][ T7448] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.637814][ T7448] ? futex_wait+0x2a2/0x390 [ 177.637881][ T7448] ? __fget_files+0x2a/0x420 [ 177.637911][ T7448] ? __fget_files+0x3a2/0x420 [ 177.637952][ T7448] __x64_sys_sendmsg+0x1b1/0x290 [ 177.637981][ T7448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.638030][ T7448] do_syscall_64+0x166/0x520 [ 177.638051][ T7448] ? trace_irq_disable+0x3b/0x140 [ 177.638085][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.638109][ T7448] ? clear_bhb_loop+0x70/0xc0 [ 177.638138][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.638162][ T7448] RIP: 0033:0x7fe33859e159 [ 177.638184][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.638205][ T7448] RSP: 002b:00007fe339475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.638231][ T7448] RAX: ffffffffffffffda RBX: 00007fe338826090 RCX: 00007fe33859e159 [ 177.638249][ T7448] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 177.638265][ T7448] RBP: 00007fe33863506b R08: 0000000000000000 R09: 0000000000000000 [ 177.638280][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.638294][ T7448] R13: 00007fe338826128 R14: 00007fe338826090 R15: 00007ffe3249a3c8 [ 177.638330][ T7448] [ 178.554928][ T7465] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 178.576161][ T10] gspca_sonixj: reg_w1 err -71 [ 178.618608][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 178.622657][ T10] usb 1-1: USB disconnect, device number 24 [ 179.417467][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 179.567451][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 179.568970][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 179.571846][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 179.571873][ T10] usb 1-1: config 0 has no interface number 0 [ 179.571924][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 179.575488][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.575515][ T10] usb 1-1: Product: syz [ 179.575532][ T10] usb 1-1: Manufacturer: syz [ 179.575549][ T10] usb 1-1: SerialNumber: syz [ 179.651673][ T10] usb 1-1: config 0 descriptor?? [ 179.654400][ T7481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.694375][ T9] usb 3-1: USB disconnect, device number 18 [ 179.869891][ T7481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.704435][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 180.704476][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 181.019042][ T7506] tipc: Started in network mode [ 181.019069][ T7506] tipc: Node identity 2000004, cluster identity 4711 [ 181.019087][ T7506] tipc: Node number set to 33554436 [ 181.401301][ T7514] jffs2: notice: (7514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.486907][ T7517] fuse: fd is not a fuse device [ 181.841265][ T7527] fuse: fd is not a fuse device [ 182.151400][ T7531] tipc: Started in network mode [ 182.151426][ T7531] tipc: Node identity ac1414aa, cluster identity 4711 [ 182.152026][ T7531] tipc: Enabling of bearer rejected, failed to enable media [ 182.183234][ T7531] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 182.184324][ T7531] tipc: Enabled bearer , priority 10 [ 182.303500][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 182.303769][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 182.340389][ T10] usb 1-1: USB disconnect, device number 25 [ 182.361494][ T7537] fuse: fd is not a fuse device [ 183.300488][ T10] tipc: Node number set to 2886997162 [ 184.571283][ T7604] CIFS: Attempting to mount //127.0.0.1/share [ 184.589240][ T7604] CIFS: VFS: Error connecting to socket. Aborting operation. [ 184.589332][ T7604] CIFS: VFS: cifs_mount failed w/return code = -111 [ 184.917810][ T30] audit: type=1800 audit(1790202312.980:9): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.548" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 185.128599][ T7613] fuse: fd is not a fuse device [ 185.461715][ T7617] fuse: fd is not a fuse device [ 185.887534][ T5347] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.037979][ T5347] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 186.039073][ T5347] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.039096][ T5347] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.039115][ T5347] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.039145][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.042973][ T7621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.172122][ T7625] netlink: 300 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.172141][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.646078][ T7637] fuse: fd is not a fuse device [ 187.906333][ T7655] fuse: fd is not a fuse device [ 188.238830][ T7662] fuse: fd is not a fuse device [ 189.673006][ T7683] fuse: fd is not a fuse device [ 189.707962][ T7686] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 190.188306][ T5347] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 190.188536][ T5347] aiptek 3-1:17.0: probe with driver aiptek failed with error -22 [ 190.217129][ T5347] usb 3-1: USB disconnect, device number 19 [ 190.795861][ T7730] netlink: 550 bytes leftover after parsing attributes in process `syz.1.591'. [ 192.157663][ T7765] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 192.394864][ T30] audit: type=1326 audit(1790202320.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.611" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc4e59e159 code=0x0 [ 193.611778][ T30] audit: type=1804 audit(1790202321.680:11): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/98/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 194.391931][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392002][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.563428][ T7815] fuse: fd is not a fuse device [ 195.858316][ T7823] fuse: fd is not a fuse device [ 196.184888][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 196.664874][ T7843] jffs2: notice: (7843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.844913][ T7900] fuse: fd is not a fuse device [ 203.861742][ T7970] overlayfs: failed to clone upperpath [ 205.458844][ T8003] CIFS: Attempting to mount //127.0.0.1/share [ 205.459420][ T8003] CIFS: VFS: Error connecting to socket. Aborting operation. [ 205.461195][ T8003] CIFS: VFS: cifs_mount failed w/return code = -22 [ 205.497212][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 205.525231][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 205.548401][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.016688][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 206.018883][ T8010] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 206.018912][ T8010] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 206.074233][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.226247][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.545378][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.647441][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.656082][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.685771][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.699063][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 206.699903][ T5624] Bluetooth: hci1: command 0x0c24 tx timeout [ 206.701183][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.724311][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.739278][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.742161][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.805311][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 206.835075][ T4981] udevd[4981]: could not touch /run/udev/queue: No such file or directory [ 207.415816][ T5803] bond0: (slave syz_tun): Releasing backup interface [ 207.661240][ T6555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.849894][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.879698][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.884730][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.895748][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.916373][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.931153][ T6555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.185516][ T6555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.326473][ T6555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.683783][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 208.705753][ T6555] bridge_slave_1: left allmulticast mode [ 208.705792][ T6555] bridge_slave_1: left promiscuous mode [ 208.706025][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.730673][ T6555] bridge_slave_0: left allmulticast mode [ 208.730701][ T6555] bridge_slave_0: left promiscuous mode [ 208.730939][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.772740][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.786943][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.796831][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.804900][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.809483][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.239948][ T6555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.242902][ T6555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.244665][ T6555] bond0 (unregistering): Released all slaves [ 209.310021][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 209.441561][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 209.482065][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 209.565924][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.579198][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.581598][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.585043][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.604598][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.930759][ T6555] hsr_slave_0: left promiscuous mode [ 209.933406][ T6555] hsr_slave_1: left promiscuous mode [ 209.934483][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.934507][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.968697][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.968724][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.013052][ T6555] veth1_macvtap: left promiscuous mode [ 210.013116][ T6555] veth0_macvtap: left promiscuous mode [ 210.013225][ T6555] veth1_vlan: left promiscuous mode [ 210.013297][ T6555] veth0_vlan: left promiscuous mode [ 210.519578][ T6555] team0 (unregistering): Port device team_slave_1 removed [ 210.539179][ T6555] team0 (unregistering): Port device team_slave_0 removed [ 210.891030][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.894111][ T4931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.911970][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.915470][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.929488][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.066765][ T4943] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 211.078767][ T4943] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 211.087211][ T4943] CPU: 0 UID: 0 PID: 4943 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 211.096607][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.106700][ T4943] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 211.111936][ T4943] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 211.131571][ T4943] RSP: 0018:ffffc90004da7868 EFLAGS: 00010202 [ 211.137671][ T4943] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 211.145942][ T4943] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888075bf33e0 [ 211.153952][ T4943] RBP: 0000000000009801 R08: ffff888075bf343f R09: 1ffff1100eb7e687 [ 211.161966][ T4943] R10: dffffc0000000000 R11: ffffed100eb7e688 R12: dffffc0000000000 [ 211.170019][ T4943] R13: ffff888075bf33c0 R14: ffff888059e4ae00 R15: 0000000000000008 [ 211.178023][ T4943] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 211.187001][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.193657][ T4943] CR2: 00007f4615c4e177 CR3: 000000007ec5a000 CR4: 00000000003526f0 [ 211.201687][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.209682][ T4943] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 211.217684][ T4943] Call Trace: [ 211.220994][ T4943] [ 211.223978][ T4943] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 211.230266][ T4943] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 211.236641][ T4943] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 211.243354][ T4943] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.248851][ T4943] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.254689][ T4943] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.260521][ T4943] ? __timer_delete_sync+0x4a7/0x520 [ 211.265837][ T4943] kjournald2+0x3bc/0x740 [ 211.270209][ T4943] ? __pfx_kjournald2+0x10/0x10 [ 211.275102][ T4943] ? __pfx_autoremove_wake_function+0x10/0x10 [ 211.281198][ T4943] ? __kthread_parkme+0x71/0x1f0 [ 211.286161][ T4943] ? __kthread_parkme+0x199/0x1f0 [ 211.291217][ T4943] kthread+0x38b/0x480 [ 211.295323][ T4943] ? __pfx_kjournald2+0x10/0x10 [ 211.300197][ T4943] ? __pfx_kthread+0x10/0x10 [ 211.304815][ T4943] ret_from_fork+0x514/0xb70 [ 211.309441][ T4943] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.314591][ T4943] ? __switch_to+0xc89/0x1420 [ 211.319294][ T4943] ? __pfx_kthread+0x10/0x10 [ 211.323934][ T4943] ret_from_fork_asm+0x1a/0x30 [ 211.328743][ T4943] [ 211.331784][ T4943] Modules linked in: [ 211.336511][ T4943] ---[ end trace 0000000000000000 ]--- Sep 23 22:25:39 syzkaller kern.alert kernel: [ 211.078767][ T4943] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 211.544457][ T4943] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 211.544499][ T4943] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 211.544520][ T4943] RSP: 0018:ffffc90004da7868 EFLAGS: 00010202 [ 211.544542][ T4943] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 211.544558][ T4943] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888075bf33e0 [ 211.544572][ T4943] RBP: 0000000000009801 R08: ffff888075bf343f R09: 1ffff1100eb7e687 [ 211.544589][ T4943] R10: dffffc0000000000 R11: ffffed100eb7e688 R12: dffffc0000000000 [ 211.544606][ T4943] R13: ffff888075bf33c0 R14: ffff888059e4ae00 R15: 0000000000000008 [ 211.544622][ T4943] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 211.544641][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.544657][ T4943] CR2: 00007ffdfb0fb630 CR3: 0000000021732000 CR4: 00000000003526f0 [ 211.544677][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.544691][ T4943] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 211.544709][ T4943] Kernel panic - not syncing: Fatal exception [ 211.661237][ T4943] Kernel Offset: disabled [ 211.665577][ T4943] Rebooting in 86400 seconds..