last executing test programs: 5.150243925s ago: executing program 2 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) 4.898195051s ago: executing program 2 (id=164): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="3c00ff8d00"}) r3 = syz_usb_connect$uac3(0x0, 0xca, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x8, 0x0, 0xd, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x33, 0x8}, [@cluster_info_segment={0x6, 0x20, 0x4, 0xba, 0xcc}, @cluster_info_segment={0x6, 0x20, 0xff, 0x3, 0xa}, @source_unit={0xc, 0x24, 0xb, 0x80, 0x0, 0x6, 0xe, 0x200}, @extension_unit={0x11, 0x24, 0xa, 0x2, 0x3, [0x0, 0x1, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0xb6a3, 0xf, 0x0, 0x3, 0x81, 0x1, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x3, 0xfe, {0xa, 0x25, 0x25, 0xc63, 0x4, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xff, 0xe, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xf7, 0x0, {0xa, 0x25, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x1e, 0xb, 0x9, 0x20, 0x5}, 0x3f, &(0x7f0000000200)={0x5, 0xf, 0x3f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x2, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xe, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ae8aa06564ace7c4cf349bf9ae079576"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x7f, 0x8, 0xfff, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x7, 0xa64}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x1b66, 0x200, 0x3, 0x5f}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4a4, 0x4, 0x1, 0x13a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9da5, 0x2000, 0x3, 0x1ea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1703, 0x2000, 0x1, 0x287}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd472, 0x0, 0x0, 0x375}}], 0x4, &(0x7f0000001b80)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, '\x00', {0x3, 0xfb2, 0x0, &(0x7f0000000b80)=@buf_512="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"}}, &(0x7f0000001c00)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000001c80)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c40)=@any_dev={0x2, 0x42, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000001d00)=0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='common_pid > 0|', 0xf) r8 = syz_ublk_setup_io_uring(0x2f3a, &(0x7f0000001dc0)={0x0, 0xf9ec, 0x0, 0x2, 0x2ea}, &(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) r9 = syz_ublk_setup_io_uring(0x1574, &(0x7f0000001f00)={0x0, 0x2290, 0x40, 0x2, 0x321}, &(0x7f0000001f80)=0x0, &(0x7f0000001fc0), &(0x7f0000002000)) r11 = syz_open_dev$vcsu(&(0x7f00000022c0), 0x33c, 0x2000) syz_ublk_setup_queues(r4, r5, &(0x7f0000001d40)={0x0, 0x5367, 0x1, 0x1, 0x271, 0x0, r6}, &(0x7f0000002040)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e37, 0x0, 0x2, 0x23, 0x0, r7}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb79, 0x80, 0x2, 0x383}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6b0, 0x40000, 0x3, 0x327, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd7d7, 0x1000, 0x2, 0x260, 0x0, r9}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000003300)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7f}, 0x0, 0x0, '\x00', {0x1, 0x7e6, 0x0, &(0x7f0000002300)=@buf_max_buf="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"}}, &(0x7f0000003380)) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r15, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r16 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r17 = dup3(r16, r15, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r18 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r18}, &(0x7f0000000140)) syz_ublk_add_dev(r6, r10, r13, r12, &(0x7f0000000a00)={0x2e, 0x6, 0x0, r17, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, r14, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x1, 0x43c, 0x0, 0x0, 0x1000, 0x0, r18, 0x0, 0x10}}}, &(0x7f0000000a80)) syz_usb_control_io$uac3(r3, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0xe, 0x3e, {0x3e, 0x23, "20c407226b881111d31d262805ec9c6b62154e5b3a55c36e7942de38ea8421ee1c78bff54c3d3e23442f3b4cc852b2c556dc075d8dde6bb3c26a500b"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x0, 0xc, 0x19, "a661331b62a1fdaa60402fab98e25a751e633361c1b9668227"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x81, 0x3, "fef5d7"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, 'v'}, &(0x7f0000000600)={0x20, 0x83, 0x3, "7a44dd"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "42ae"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "7139b9"}}) 4.579833303s ago: executing program 3 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) 4.371773225s ago: executing program 3 (id=173): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x8, 0x4, 0x3, 0x0, 0x1}, 0x8) listen(r1, 0x100) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xffe0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000000ac"], 0x18, 0x48d5}, 0x8050) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @private=0xa010100}, 'ip_vti0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0x5207, 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) lseek(r4, 0x0, 0x4) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 3.933612721s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x10, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = syz_clone3(&(0x7f0000001940)={0x80000000, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0), {0x3}, &(0x7f0000000800)=""/235, 0xeb, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r0}}, 0x58) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, r4, r5) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000019c0)={0x9, 0x4, {0xffffffffffffffff}, {0xee01}, 0x7, 0x7}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) (async) r8 = getpgid(0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7f, 0xa000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, r10, {0x7, 0x27, 0x0, 0x1001a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x90, 0x0, 0xfffffffffffffffd, {0x3, 0x0, 0x8, 0x81, 0x0, 0x0, {0x2000000000000005, 0x800000000000046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa000, 0x9, r11, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r13) (async) sendmmsg$unix(r0, &(0x7f0000001b80)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)="b4ee6cc18efc25c7ddfd0f5e76331eed060b9d973606545964814058a053fd745714b86423a9b42dc5437950bd2eff44780c11b3e4fa89d7d2e0101164910bc1768004bedc3bbed697ff395fad56c95a3f4e014129f68c5faefe0c5f39df40cfeb9b75cdd474c76eb7194cbccceb2fc22db69ecd0b41582ca3c93c426cec2992", 0x80}], 0x1, &(0x7f0000001a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r13}}}], 0xc8, 0x4000090}}], 0x1, 0x44000001) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) umount2(&(0x7f0000000180)='./proc\x00', 0x8) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10800002}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0xc4, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) accept4$alg(r14, 0x0, 0x0, 0x80800) 3.819587203s ago: executing program 3 (id=177): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/intel_ish_ipc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000000c0)=0x5469, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\/\xfc\xe3\xb8\xc7\x0f\xaa\\\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x9, 0xc25, 0x1, 0x695, 0xe, "50e4d8009df7b84e9799b09a0400", 0xe9}) statfs(&(0x7f0000000100)='./sys/file0\x00', &(0x7f0000000140)=""/243) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x255}, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000140)) 3.400505534s ago: executing program 2 (id=178): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (fail_nth: 2) 2.445949064s ago: executing program 2 (id=188): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0x15, 0x6d, "02582535c890245509a235474fe23449778758435b04436a5ce6fac6e744bc3e6811d856e6b94beea0c62808ef3063a6cb12d735dc1d6b7c353e4419dfa9986ff887d4f2cad244ef8cbfc35c181d05d6694c7d1db68a7462cfcc15339ed042a841c97b99ff44228f0fc1c6ffdd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xa6, "d76b77c1b707a9b96f93024c2ebd5b9ee0b58fdf9ba57386594c49bd3c72114015847acaad3d035273a0c383ea218c3e71e168b86998ee4f0923877697ea2a1c439e3ee2c266921cf76e2924e8fed2045a05745792fe2321dfbf00fa92125980895a3128e993fdef18a406c7fc3fd44324ae408fd5b334852508a2784b0b28a1736b05cf55cc72fd63b45daca5b1ea1a290358f40fe32ec3e8c89ba0cfe4582e1681e363419e"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.327774802s ago: executing program 3 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r1) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4a}, 0x69a}], 0x2, 0x0, 0x0) 2.191248094s ago: executing program 3 (id=190): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003f30c101087360102030109021200017f04500009047c0b00a4cad400fc44a5ef68efe16c"], &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@void, @val={0x1, 0x0, 0x7ff, 0x99, 0x8, 0x3}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x0, 0x4000, 0x84, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e20, 0x17be, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x3c) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0x24, 0x0, &(0x7f00000007c0)=[@register_looper, @enter_looper, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r12 = socket$kcm(0x23, 0x5, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r12, 0x800) accept4(r12, 0x0, 0x0, 0x80000) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r13, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) syz_ublk_setup_queues(r11, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000002, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x0, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x1, 0x35c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r15, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x120c2) setsockopt$inet_group_source_req(r11, 0x0, 0x2c, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 1.879009045s ago: executing program 1 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) 1.584538901s ago: executing program 1 (id=193): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (fail_nth: 2) 1.501615311s ago: executing program 1 (id=194): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251000000005000f000900000008000100", @ANYRES32=0x0, @ANYBLOB="060011006f44"], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x400c000) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, r0, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251000000005000f000900000008000100", @ANYRES32=0x0, @ANYBLOB="060011006f44"], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x400c000) (async) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) close_range(r0, r0, 0x0) (async) 1.074548458s ago: executing program 1 (id=197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 635.483434ms ago: executing program 0 (id=199): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) write$rfkill(r1, &(0x7f0000000140)={0x8, 0x4, 0x3, 0x0, 0x1}, 0x8) listen(r0, 0x100) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xffe0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000000ac"], 0x18, 0x48d5}, 0x8050) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @private=0xa010100}, 'ip_vti0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0x5207, 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 473.406224ms ago: executing program 2 (id=200): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x40, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xf0e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100f1ffffff0000000008000100657473000c0002800500010010000000", 0x38) 371.758908ms ago: executing program 0 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) 299.27254ms ago: executing program 2 (id=202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x5) setsockopt$inet_buf(r1, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock']) r2 = accept$inet(r1, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x4) read(r2, &(0x7f0000000304), 0x4) write(r2, &(0x7f0000000300), 0x100) socket(0x1, 0x5, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x1000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) 299.01537ms ago: executing program 0 (id=203): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f07000fff0000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 259.800353ms ago: executing program 0 (id=204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) utime(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x2aba, 0x204080) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, 0x0, 0x0, 0x0) 174.13472ms ago: executing program 1 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x20, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0xac6}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x20, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0xac6}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) sendto$unix(r3, &(0x7f0000000300)="19d44dcae6df5c9a8378cfb239a1412ea3115771cc64b5e4e0ac679d8a38bf4cb64b87c49d3353ae917a1e4c989405123a53e8855ccdce5e1c596eacb06dd190e5692501", 0x44, 0x40000, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) (async) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) close(0x3) recvmsg(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='adfs\x00', 0x110080, 0x0) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='adfs\x00', 0x110080, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000000400)='3\x00', 0x2) write(r6, &(0x7f0000000280)='+ 1 0 2 1 0', 0xb) (async) write(r6, &(0x7f0000000280)='+ 1 0 2 1 0', 0xb) 119.402684ms ago: executing program 0 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x8010, 0x0) (fail_nth: 3) 68.879254ms ago: executing program 0 (id=207): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=', 0xaf) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x13f) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000e00)={0x48, 0x5, 0x0, 0x0, 0x0, 0xc256ba9169434d8f}) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x80c000, 0x0) 0s ago: executing program 1 (id=208): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0x15, 0x37, "02582535c890245509a235474fe23449778758435b04436a5ce6fac6e744bc3e6811d856e6b94beea0c62808ef3063a6cb12d735dc1d6b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0xa6, "d76b77c1b707a9b96f93024c2ebd5b9ee0b58fdf9ba57386594c49bd3c72114015847acaad3d035273a0c383ea218c3e71e168b86998ee4f0923877697ea2a1c439e3ee2c266921cf76e2924e8fed2045a05745792fe2321dfbf00fa92125980895a3128e993fdef18a406c7fc3fd44324ae408fd5b334852508a2784b0b28a1736b05cf55cc72fd63b45daca5b1ea1a290358f40fe32ec3e8c89ba0cfe4582e1681e363419e"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): etdevsim3 netdevsim2: renamed from eth2 [ 70.821971][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.823972][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.835104][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.935616][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.939463][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.957283][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.961284][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.975090][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.978775][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.998038][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.003251][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.066589][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.079717][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.089025][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.102801][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.105177][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.113911][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.123013][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.123874][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.132907][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.167631][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.186512][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.216674][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.216933][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.223772][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.247612][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.247695][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.281852][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.281941][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.325600][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.325684][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.356829][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.381558][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.434742][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434808][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.454402][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.494126][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.494228][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.512332][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.512516][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.569489][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.662993][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.712434][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.712511][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.715478][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.715577][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.070237][ T4924] Bluetooth: hci0: command tx timeout [ 72.150330][ T4924] Bluetooth: hci1: command tx timeout [ 72.234322][ T4924] Bluetooth: hci3: command tx timeout [ 72.267643][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.310185][ T4924] Bluetooth: hci2: command tx timeout [ 72.333778][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.429716][ T5609] veth0_vlan: entered promiscuous mode [ 72.463934][ T5609] veth1_vlan: entered promiscuous mode [ 72.491910][ T5602] veth0_vlan: entered promiscuous mode [ 72.520701][ T5602] veth1_vlan: entered promiscuous mode [ 72.569491][ T5609] veth0_macvtap: entered promiscuous mode [ 72.583004][ T5609] veth1_macvtap: entered promiscuous mode [ 72.614718][ T5602] veth0_macvtap: entered promiscuous mode [ 72.629854][ T5602] veth1_macvtap: entered promiscuous mode [ 72.638616][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.656640][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.698289][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.717547][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.747961][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.761740][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848381][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.869535][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.869563][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.950595][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.952991][ T5611] veth0_vlan: entered promiscuous mode [ 72.964050][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.964069][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.971123][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971166][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971200][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971233][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971265][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971298][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.007046][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.007064][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.065618][ T5611] veth1_vlan: entered promiscuous mode [ 73.113268][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.144882][ T5610] veth0_vlan: entered promiscuous mode [ 73.147663][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.147681][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.188378][ T5610] veth1_vlan: entered promiscuous mode [ 73.239739][ T5611] veth0_macvtap: entered promiscuous mode [ 73.261845][ T5611] veth1_macvtap: entered promiscuous mode [ 73.333602][ T5610] veth0_macvtap: entered promiscuous mode [ 73.342756][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.383283][ T5610] veth1_macvtap: entered promiscuous mode [ 73.393519][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.408866][ T5747] FAULT_INJECTION: forcing a failure. [ 73.408866][ T5747] name failslab, interval 1, probability 0, space 0, times 1 [ 73.408909][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 73.408932][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.408953][ T5747] Call Trace: [ 73.408964][ T5747] [ 73.408973][ T5747] dump_stack_lvl+0xe8/0x150 [ 73.409012][ T5747] should_fail_ex+0x3eb/0x540 [ 73.409040][ T5747] should_failslab+0xa8/0x100 [ 73.409067][ T5747] __kmalloc_cache_noprof+0x9e/0x600 [ 73.409091][ T5747] ? __pfx___mutex_lock+0x10/0x10 [ 73.409116][ T5747] ? genl_start+0x1c9/0x6d0 [ 73.409136][ T5747] ? genl_start+0x1c9/0x6d0 [ 73.409161][ T5747] genl_start+0x1c9/0x6d0 [ 73.409185][ T5747] __netlink_dump_start+0x442/0x7b0 [ 73.409218][ T5747] genl_family_rcv_msg_dumpit+0x213/0x310 [ 73.409241][ T5747] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 73.409260][ T5747] ? genl_get_cmd+0x82f/0x960 [ 73.409282][ T5747] ? __pfx_genl_start+0x10/0x10 [ 73.409300][ T5747] ? __pfx_genl_dumpit+0x10/0x10 [ 73.409318][ T5747] ? __pfx_genl_done+0x10/0x10 [ 73.409341][ T5747] ? __dev_queue_xmit+0x29b/0x3820 [ 73.409372][ T5747] genl_rcv_msg+0x5e1/0x7a0 [ 73.409399][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.409419][ T5747] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 73.409443][ T5747] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 73.409472][ T5747] ? __asan_memcpy+0x40/0x70 [ 73.409499][ T5747] netlink_rcv_skb+0x226/0x4a0 [ 73.409527][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.409549][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.409591][ T5747] ? down_read+0x2b9/0x320 [ 73.409620][ T5747] genl_rcv+0x28/0x40 [ 73.409637][ T5747] netlink_unicast+0x7bd/0x940 [ 73.409671][ T5747] netlink_sendmsg+0x7c3/0xae0 [ 73.409704][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.409738][ T5747] ? apparmor_socket_sendmsg+0x98/0x360 [ 73.409770][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.409797][ T5747] sock_sendmsg_nosec+0x13a/0x180 [ 73.409828][ T5747] ____sys_sendmsg+0x54e/0x850 [ 73.409866][ T5747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.409898][ T5747] ? import_iovec+0x73/0xa0 [ 73.409925][ T5747] ___sys_sendmsg+0x2a5/0x360 [ 73.409946][ T5747] ? __lock_acquire+0x747/0x2de0 [ 73.409972][ T5747] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.409996][ T5747] ? futex_wait+0x2a2/0x390 [ 73.410042][ T5747] ? __fget_files+0x3a2/0x420 [ 73.410063][ T5747] ? __fget_files+0x2a/0x420 [ 73.410092][ T5747] __x64_sys_sendmsg+0x1b1/0x290 [ 73.410116][ T5747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 73.410158][ T5747] do_syscall_64+0x166/0x520 [ 73.410180][ T5747] ? trace_irq_disable+0x3b/0x140 [ 73.410202][ T5747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.410223][ T5747] ? clear_bhb_loop+0x70/0xc0 [ 73.410246][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.410267][ T5747] RIP: 0033:0x7fc80539e159 [ 73.410295][ T5747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.410312][ T5747] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.410339][ T5747] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 73.410355][ T5747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 73.410367][ T5747] RBP: 00007fc80543506b R08: 0000000000000000 R09: 0000000000000000 [ 73.410379][ T5747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.410391][ T5747] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 73.410423][ T5747] [ 73.421020][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.421982][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.441729][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442818][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.473781][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.513080][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.770963][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771761][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771796][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771828][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.851808][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.851830][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.924050][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.924069][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.956316][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.956331][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.998662][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.998684][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.033530][ T5751] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.140960][ T5756] ======================================================= [ 74.140960][ T5756] WARNING: The mand mount option has been deprecated and [ 74.140960][ T5756] and is ignored by this kernel. Remove the mand [ 74.140960][ T5756] option from the mount to silence this warning. [ 74.140960][ T5756] ======================================================= [ 74.142037][ T5756] jffs2: notice: (5756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.151572][ T4924] Bluetooth: hci0: command tx timeout [ 74.215891][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 74.217781][ T5751] usb 4-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 74.235162][ T4924] Bluetooth: hci1: command tx timeout [ 74.241788][ T5751] usb 4-1: config 0 has no interfaces? [ 74.263860][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.263887][ T5751] usb 4-1: Product: syz [ 74.263908][ T5751] usb 4-1: Manufacturer: syz [ 74.263923][ T5751] usb 4-1: SerialNumber: syz [ 74.290781][ T5756] FAULT_INJECTION: forcing a failure. [ 74.290781][ T5756] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.290812][ T5756] CPU: 0 UID: 0 PID: 5756 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 74.290834][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.290847][ T5756] Call Trace: [ 74.290854][ T5756] [ 74.290863][ T5756] dump_stack_lvl+0xe8/0x150 [ 74.290896][ T5756] should_fail_ex+0x3eb/0x540 [ 74.290921][ T5756] get_futex_key+0x1b4/0x1580 [ 74.290959][ T5756] ? __pfx_get_futex_key+0x10/0x10 [ 74.290995][ T5756] futex_wake+0x119/0x5f0 [ 74.291022][ T5756] ? __pfx_futex_wake+0x10/0x10 [ 74.291046][ T5756] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.291069][ T5756] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.291087][ T5756] ? do_timer_create+0xd6d/0x1140 [ 74.291109][ T5756] do_futex+0x458/0x4e0 [ 74.291142][ T5756] ? __pfx_do_futex+0x10/0x10 [ 74.291178][ T5756] __se_sys_futex+0x3a8/0x450 [ 74.291211][ T5756] ? __pfx___se_sys_futex+0x10/0x10 [ 74.291239][ T5756] ? rcu_is_watching+0x16/0xb0 [ 74.291273][ T5756] ? __x64_sys_futex+0x21/0xf0 [ 74.291303][ T5756] do_syscall_64+0x166/0x520 [ 74.291326][ T5756] ? trace_irq_disable+0x3b/0x140 [ 74.291348][ T5756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.291368][ T5756] ? clear_bhb_loop+0x70/0xc0 [ 74.291392][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.291411][ T5756] RIP: 0033:0x7f5552d9e159 [ 74.291430][ T5756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.291447][ T5756] RSP: 002b:00007f5550ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.291467][ T5756] RAX: ffffffffffffffda RBX: 00007f5553025fa8 RCX: 00007f5552d9e159 [ 74.291482][ T5756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5553025fac [ 74.291495][ T5756] RBP: 00007f5553025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 74.291509][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.291520][ T5756] R13: 00007f5553026038 R14: 00007ffec4e7dda0 R15: 00007ffec4e7de88 [ 74.291550][ T5756] [ 74.306380][ T5751] usb 4-1: config 0 descriptor?? [ 74.316552][ T4924] Bluetooth: hci3: command tx timeout [ 74.393899][ T4924] Bluetooth: hci2: command tx timeout [ 74.534173][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.539775][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.681428][ T5751] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.837203][ T5751] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 74.845680][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.845714][ T5751] usb 2-1: Product: syz [ 74.845728][ T5751] usb 2-1: Manufacturer: syz [ 74.845742][ T5751] usb 2-1: SerialNumber: syz [ 74.889311][ T5769] FAULT_INJECTION: forcing a failure. [ 74.889311][ T5769] name failslab, interval 1, probability 0, space 0, times 0 [ 74.889345][ T5769] CPU: 1 UID: 0 PID: 5769 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 74.889369][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.889381][ T5769] Call Trace: [ 74.889390][ T5769] [ 74.889399][ T5769] dump_stack_lvl+0xe8/0x150 [ 74.889430][ T5769] should_fail_ex+0x3eb/0x540 [ 74.889456][ T5769] should_failslab+0xa8/0x100 [ 74.889487][ T5769] __kmalloc_cache_noprof+0x9e/0x600 [ 74.889514][ T5769] ? fcloop_alloc_nport+0x56/0x860 [ 74.889537][ T5769] ? fcloop_alloc_nport+0x56/0x860 [ 74.889568][ T5769] fcloop_alloc_nport+0x56/0x860 [ 74.889608][ T5769] fcloop_create_remote_port+0x9e/0x600 [ 74.889638][ T5769] ? __pfx_fcloop_create_remote_port+0x10/0x10 [ 74.889664][ T5769] ? sysfs_file_kobj+0x1a/0x230 [ 74.889687][ T5769] ? sysfs_file_kobj+0x1a/0x230 [ 74.889705][ T5769] ? sysfs_file_kobj+0x1a/0x230 [ 74.889729][ T5769] ? sysfs_file_kobj+0x1e4/0x230 [ 74.889752][ T5769] ? sysfs_kf_write+0x166/0x260 [ 74.889780][ T5769] ? __pfx_sysfs_kf_write+0x10/0x10 [ 74.889801][ T5769] kernfs_fop_write_iter+0x3a4/0x540 [ 74.889840][ T5769] vfs_write+0x612/0xba0 [ 74.889875][ T5769] ? __pfx_vfs_write+0x10/0x10 [ 74.889903][ T5769] ? __fget_files+0x3a2/0x420 [ 74.889925][ T5769] ? __fget_files+0x2a/0x420 [ 74.889952][ T5769] ? fdget+0x1ac/0x250 [ 74.889982][ T5769] ksys_write+0x150/0x270 [ 74.890008][ T5769] ? __pfx_ksys_write+0x10/0x10 [ 74.890037][ T5769] do_syscall_64+0x166/0x520 [ 74.890059][ T5769] ? trace_irq_disable+0x3b/0x140 [ 74.890083][ T5769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.890102][ T5769] ? clear_bhb_loop+0x70/0xc0 [ 74.890125][ T5769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.890146][ T5769] RIP: 0033:0x7fbde799e159 [ 74.890164][ T5769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.890181][ T5769] RSP: 002b:00007fbde8951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.890210][ T5769] RAX: ffffffffffffffda RBX: 00007fbde7c25fa0 RCX: 00007fbde799e159 [ 74.890225][ T5769] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 74.890238][ T5769] RBP: 00007fbde7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.890250][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.890262][ T5769] R13: 00007fbde7c26038 R14: 00007fbde7c25fa0 R15: 00007ffd345727e8 [ 74.890294][ T5769] [ 75.037478][ T5752] usb usb8: usbfs: process 5752 (syz.3.5) did not claim interface 0 before use [ 75.131584][ T5749] usb 4-1: USB disconnect, device number 2 [ 75.293580][ T5756] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.293887][ T5756] CIFS: Attempting to mount //127.0.0.1/share [ 75.345780][ T5756] CIFS: VFS: Error connecting to socket. Aborting operation. [ 75.345952][ T5756] CIFS: VFS: cifs_mount failed w/return code = -111 [ 75.462269][ T5751] rtl8150 2-1:1.0: couldn't reset the device [ 75.462866][ T5751] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 75.475116][ T5751] usb 2-1: USB disconnect, device number 2 [ 75.650150][ T5749] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.802010][ T5749] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 75.803815][ T5749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.803852][ T5749] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 75.806249][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.806281][ T5749] usb 1-1: Product: syz [ 75.806296][ T5749] usb 1-1: Manufacturer: syz [ 75.806310][ T5749] usb 1-1: SerialNumber: syz [ 75.860169][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.930306][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.973565][ T5788] FAULT_INJECTION: forcing a failure. [ 75.973565][ T5788] name failslab, interval 1, probability 0, space 0, times 0 [ 75.973586][ T5788] CPU: 0 UID: 0 PID: 5788 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 75.973597][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.973604][ T5788] Call Trace: [ 75.973608][ T5788] [ 75.973613][ T5788] dump_stack_lvl+0xe8/0x150 [ 75.973634][ T5788] should_fail_ex+0x3eb/0x540 [ 75.973648][ T5788] should_failslab+0xa8/0x100 [ 75.973663][ T5788] __kmalloc_cache_noprof+0x9e/0x600 [ 75.973675][ T5788] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 75.973686][ T5788] ? __request_module+0x2d0/0x630 [ 75.973700][ T5788] ? __request_module+0x2d0/0x630 [ 75.973723][ T5788] __request_module+0x2d0/0x630 [ 75.973740][ T5788] ? __pfx___request_module+0x10/0x10 [ 75.973760][ T5788] ? security_capable+0x7e/0x2c0 [ 75.973778][ T5788] ? dev_load+0x21/0x1f0 [ 75.973788][ T5788] dev_load+0x190/0x1f0 [ 75.973798][ T5788] dev_ioctl+0x837/0x1150 [ 75.973810][ T5788] sock_ioctl+0x753/0x7e0 [ 75.973825][ T5788] ? __pfx_sock_ioctl+0x10/0x10 [ 75.973839][ T5788] ? __fget_files+0x2a/0x420 [ 75.973852][ T5788] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.973866][ T5788] ? __pfx_sock_ioctl+0x10/0x10 [ 75.973879][ T5788] __se_sys_ioctl+0xfc/0x170 [ 75.973894][ T5788] do_syscall_64+0x166/0x520 [ 75.973906][ T5788] ? trace_irq_disable+0x3b/0x140 [ 75.973918][ T5788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.973928][ T5788] ? clear_bhb_loop+0x70/0xc0 [ 75.973941][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.973951][ T5788] RIP: 0033:0x7f5552d9e159 [ 75.973961][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.973969][ T5788] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.973981][ T5788] RAX: ffffffffffffffda RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 75.973989][ T5788] RDX: 00002000000001c0 RSI: 00000000000089f5 RDI: 0000000000000003 [ 75.973996][ T5788] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.974002][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.974008][ T5788] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 75.974023][ T5788] [ 76.016816][ T5703] usb 3-1: device descriptor read/64, error -71 [ 76.080513][ T5771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.085734][ T5771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.129271][ T32] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 76.130727][ T32] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 76.130751][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 76.133831][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.133854][ T32] usb 4-1: Product: syz [ 76.133867][ T32] usb 4-1: Manufacturer: syz [ 76.133881][ T32] usb 4-1: SerialNumber: syz [ 76.143548][ T32] usb 4-1: config 0 descriptor?? [ 76.154210][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 76.158267][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.163732][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.240387][ T4924] Bluetooth: hci0: command tx timeout [ 76.320123][ T4924] Bluetooth: hci1: command tx timeout [ 76.352914][ T5785] mmap: syz.3.12 (5785) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.353267][ T5749] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 76.358492][ T5749] usb 1-1: USB disconnect, device number 2 [ 76.358552][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.359875][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.401000][ T4924] Bluetooth: hci3: command tx timeout [ 76.401150][ T5690] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.418843][ T5703] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.480370][ T4924] Bluetooth: hci2: command tx timeout [ 76.498129][ T5771] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 76.551353][ T5703] usb 3-1: device descriptor read/64, error -71 [ 76.552638][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 76.553246][ T5690] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 76.554064][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.555807][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.555829][ T5690] usb 2-1: Product: syz [ 76.555843][ T5690] usb 2-1: Manufacturer: syz [ 76.555851][ T5690] usb 2-1: SerialNumber: syz [ 76.558021][ T5690] usb 2-1: config 0 descriptor?? [ 76.566643][ T5690] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 76.566674][ T5690] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 76.660537][ T5703] usb usb3-port1: attempt power cycle [ 76.901068][ T32] gspca_sunplus: reg_r err -110 [ 76.901195][ T32] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 77.000108][ T5703] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.020605][ T5703] usb 3-1: device descriptor read/8, error -71 [ 77.175233][ T5690] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 77.261012][ T5703] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.281433][ T5703] usb 3-1: device descriptor read/8, error -71 [ 77.390482][ T5703] usb usb3-port1: unable to enumerate USB device [ 77.510328][ T32] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 77.681096][ T32] usb 1-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 77.682196][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 77.682231][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 77.682252][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.998813][ T5690] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 77.998849][ T5690] em28xx 2-1:0.0: board has no eeprom [ 78.070271][ T5690] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 78.070336][ T5690] em28xx 2-1:0.0: dvb set to bulk mode. [ 78.071374][ T1015] em28xx 2-1:0.0: Binding DVB extension [ 78.100122][ T5690] usb 2-1: USB disconnect, device number 3 [ 78.112814][ T5690] em28xx 2-1:0.0: Disconnecting em28xx [ 78.148790][ T1015] em28xx 2-1:0.0: Registering input extension [ 78.150871][ T5690] em28xx 2-1:0.0: Closing input extension [ 78.179346][ T5690] em28xx: Freeing device [ 78.844252][ T5690] usb 4-1: USB disconnect, device number 3 [ 78.915842][ T32] pegasus 1-1:1.0: can't reset MAC [ 78.916143][ T32] pegasus 1-1:1.0: probe with driver pegasus failed with error -5 [ 78.937782][ T32] usb 1-1: USB disconnect, device number 3 [ 78.962688][ T5703] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.068000][ T5815] jffs2: notice: (5815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.097120][ T5815] FAULT_INJECTION: forcing a failure. [ 79.097120][ T5815] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.097150][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(full) [ 79.097163][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.097170][ T5815] Call Trace: [ 79.097175][ T5815] [ 79.097180][ T5815] dump_stack_lvl+0xe8/0x150 [ 79.097200][ T5815] should_fail_ex+0x3eb/0x540 [ 79.097215][ T5815] _copy_from_user+0x2d/0xb0 [ 79.097229][ T5815] restore_altstack+0xae/0x4f0 [ 79.097248][ T5815] ? __pfx___set_task_blocked+0x10/0x10 [ 79.097261][ T5815] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.097277][ T5815] ? __pfx_restore_altstack+0x10/0x10 [ 79.097297][ T5815] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.097310][ T5815] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 79.097325][ T5815] ? __lock_acquire+0x747/0x2de0 [ 79.097340][ T5815] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 79.097353][ T5815] ? fpu__clear_user_states+0x7e/0x400 [ 79.097366][ T5815] ? __local_bh_enable_ip+0xd6/0x140 [ 79.097382][ T5815] ? arch_do_signal_or_restart+0x4f4/0x860 [ 79.097398][ T5815] ? lock_acquire+0x115/0x350 [ 79.097414][ T5815] ? __task_pid_nr_ns+0x28/0x470 [ 79.097430][ T5815] do_syscall_64+0x166/0x520 [ 79.097442][ T5815] ? trace_irq_disable+0x3b/0x140 [ 79.097454][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.097465][ T5815] ? clear_bhb_loop+0x70/0xc0 [ 79.097478][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.097488][ T5815] RIP: 0033:0x7fc01ff3f4d9 [ 79.097499][ T5815] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 79.097515][ T5815] RSP: 002b:00007fc020da2a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 79.097527][ T5815] RAX: ffffffffffffffda RBX: 00007fc020225fa0 RCX: 00007fc01ff3f4d9 [ 79.097536][ T5815] RDX: 00007fc020da2a80 RSI: 00007fc020da2bb0 RDI: 0000000000000021 [ 79.097543][ T5815] RBP: 00007fc02003506b R08: 0000000000000000 R09: 0000000000000000 [ 79.097550][ T5815] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.097556][ T5815] R13: 00007fc020226038 R14: 00007fc020225fa0 R15: 00007fffb6a07518 [ 79.097573][ T5815] [ 79.190081][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 79.203833][ T5703] usb 3-1: New USB device found: idVendor=056a, idProduct=032a, bcdDevice=0.00 [ 79.205004][ T5703] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 79.205034][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.205064][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.208672][ T5703] usb 3-1: config 0 descriptor?? [ 79.322876][ T5690] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.390122][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.480271][ T5690] usb 2-1: Using ep0 maxpacket: 32 [ 79.481351][ T5690] usb 2-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 79.481891][ T5690] usb 2-1: config 0 has no interfaces? [ 79.485886][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.485908][ T5690] usb 2-1: Product: syz [ 79.485924][ T5690] usb 2-1: Manufacturer: syz [ 79.485939][ T5690] usb 2-1: SerialNumber: syz [ 79.534839][ T5690] usb 2-1: config 0 descriptor?? [ 79.552993][ T27] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 79.557729][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.557763][ T27] usb 4-1: Product: syz [ 79.557775][ T27] usb 4-1: Manufacturer: syz [ 79.557787][ T27] usb 4-1: SerialNumber: syz [ 79.624243][ T5703] usbhid 3-1:0.0: can't add hid device: -71 [ 79.624348][ T5703] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.635625][ T5703] usb 3-1: USB disconnect, device number 6 [ 79.754856][ T5818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.757891][ T5818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.006049][ T5815] CIFS: Attempting to mount //127.0.0.1/share [ 80.034799][ T5815] CIFS: VFS: Error connecting to socket. Aborting operation. [ 80.034849][ T5815] CIFS: VFS: cifs_mount failed w/return code = -111 [ 80.104632][ T5818] usb usb8: usbfs: process 5818 (syz.1.21) did not claim interface 0 before use [ 80.107375][ T5703] usb 2-1: USB disconnect, device number 4 [ 80.146826][ T27] rtl8150 4-1:1.0: couldn't reset the device [ 80.147123][ T27] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.174582][ T27] usb 4-1: USB disconnect, device number 4 [ 80.273921][ T5832] XFS (nbd0): SB validate failed with error -5. [ 80.353730][ T5839] ipvlan1: entered promiscuous mode [ 80.353792][ T5839] ipvlan1: entered allmulticast mode [ 80.353806][ T5839] veth0_vlan: entered allmulticast mode [ 80.435924][ T5832] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 80.439064][ T5832] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 80.700712][ T5847] comedi comedi1: comedi_config --init_data is deprecated [ 80.848726][ T5845] ovs-dp0: entered promiscuous mode [ 80.876533][ T5854] netlink: 236 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.910125][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.110248][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.240213][ T27] usb 4-1: device descriptor read/64, error -71 [ 81.259372][ T4924] Bluetooth: hci2: ACL packet for unknown connection handle 1481 [ 81.480618][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.610139][ T27] usb 4-1: device descriptor read/64, error -71 [ 81.696151][ T5874] capability: warning: `syz.0.36' uses deprecated v2 capabilities in a way that may be insecure [ 81.697360][ T5876] loop8: detected capacity change from 0 to 16384 [ 81.721164][ T27] usb usb4-port1: attempt power cycle [ 82.006307][ T5876] I/O error, dev loop8, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 82.009519][ T5876] I/O error, dev loop8, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 82.009746][ T5876] I/O error, dev loop8, sector 8960 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.009892][ T5876] Buffer I/O error on dev loop8, logical block 1120, async page read [ 82.009944][ T5876] I/O error, dev loop8, sector 8968 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.009991][ T5876] Buffer I/O error on dev loop8, logical block 1121, async page read [ 82.013285][ T5876] I/O error, dev loop8, sector 8976 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.013314][ T5876] Buffer I/O error on dev loop8, logical block 1122, async page read [ 82.013346][ T5876] I/O error, dev loop8, sector 8984 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.013369][ T5876] Buffer I/O error on dev loop8, logical block 1123, async page read [ 82.044856][ T5877] I/O error, dev loop8, sector 2304 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 82.044892][ T5877] Buffer I/O error on dev loop8, logical block 288, lost async page write [ 82.044916][ T5877] Buffer I/O error on dev loop8, logical block 289, lost async page write [ 82.044933][ T5877] Buffer I/O error on dev loop8, logical block 290, lost async page write [ 82.044948][ T5877] Buffer I/O error on dev loop8, logical block 291, lost async page write [ 82.044963][ T5877] Buffer I/O error on dev loop8, logical block 292, lost async page write [ 82.051433][ T5877] Buffer I/O error on dev loop8, logical block 293, lost async page write [ 82.061385][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 82.071437][ T5877] I/O error, dev loop8, sector 3328 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 82.081940][ T27] usb 4-1: device descriptor read/8, error -71 [ 82.087322][ T5877] I/O error, dev loop8, sector 4352 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 82.093831][ T5877] I/O error, dev loop8, sector 5376 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 82.192144][ T5877] ldm_validate_partition_table(): Disk read failed. [ 82.192255][ T5877] Dev loop8: unable to read RDB block 0 [ 82.192462][ T5877] loop8: unable to read partition table [ 82.192723][ T5877] loop_reread_partitions: partition scan of loop8 (() failed (rc=-5) [ 82.330138][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 82.351885][ T27] usb 4-1: device descriptor read/8, error -71 [ 82.461766][ T27] usb usb4-port1: unable to enumerate USB device [ 82.490923][ T5892] FAULT_INJECTION: forcing a failure. [ 82.490923][ T5892] name failslab, interval 1, probability 0, space 0, times 0 [ 82.490942][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT(full) [ 82.490954][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.490960][ T5892] Call Trace: [ 82.490964][ T5892] [ 82.490969][ T5892] dump_stack_lvl+0xe8/0x150 [ 82.490988][ T5892] should_fail_ex+0x3eb/0x540 [ 82.491001][ T5892] should_failslab+0xa8/0x100 [ 82.491017][ T5892] __kmalloc_cache_noprof+0x9e/0x600 [ 82.491029][ T5892] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 82.491040][ T5892] ? __request_module+0x2d0/0x630 [ 82.491053][ T5892] ? __request_module+0x2d0/0x630 [ 82.491070][ T5892] __request_module+0x2d0/0x630 [ 82.491086][ T5892] ? __pfx___request_module+0x10/0x10 [ 82.491107][ T5892] ? security_capable+0x7e/0x2c0 [ 82.491132][ T5892] ? dev_load+0x21/0x1f0 [ 82.491141][ T5892] dev_load+0x190/0x1f0 [ 82.491152][ T5892] dev_ioctl+0x837/0x1150 [ 82.491164][ T5892] sock_ioctl+0x753/0x7e0 [ 82.491182][ T5892] ? __pfx_sock_ioctl+0x10/0x10 [ 82.491196][ T5892] ? __fget_files+0x2a/0x420 [ 82.491210][ T5892] ? bpf_lsm_file_ioctl+0x9/0x20 [ 82.491224][ T5892] ? __pfx_sock_ioctl+0x10/0x10 [ 82.491237][ T5892] __se_sys_ioctl+0xfc/0x170 [ 82.491252][ T5892] do_syscall_64+0x166/0x520 [ 82.491263][ T5892] ? trace_irq_disable+0x3b/0x140 [ 82.491276][ T5892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.491286][ T5892] ? clear_bhb_loop+0x70/0xc0 [ 82.491298][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.491309][ T5892] RIP: 0033:0x7fbde799e159 [ 82.491319][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.491327][ T5892] RSP: 002b:00007fbde8951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.491340][ T5892] RAX: ffffffffffffffda RBX: 00007fbde7c25fa0 RCX: 00007fbde799e159 [ 82.491354][ T5892] RDX: 00002000000001c0 RSI: 00000000000089f6 RDI: 0000000000000003 [ 82.491361][ T5892] RBP: 00007fbde8951090 R08: 0000000000000000 R09: 0000000000000000 [ 82.491367][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.491373][ T5892] R13: 00007fbde7c26038 R14: 00007fbde7c25fa0 R15: 00007ffd345727e8 [ 82.491388][ T5892] [ 82.593189][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.621899][ T5751] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.750858][ T32] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 82.752084][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.752118][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 82.754359][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.754381][ T32] usb 2-1: Product: syz [ 82.754394][ T32] usb 2-1: Manufacturer: syz [ 82.754408][ T32] usb 2-1: SerialNumber: syz [ 82.820113][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 82.820837][ T5751] usb 1-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 82.821350][ T5751] usb 1-1: config 0 has no interfaces? [ 82.823590][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.823613][ T5751] usb 1-1: Product: syz [ 82.823627][ T5751] usb 1-1: Manufacturer: syz [ 82.823641][ T5751] usb 1-1: SerialNumber: syz [ 82.825896][ T5751] usb 1-1: config 0 descriptor?? [ 82.968960][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.969551][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.028427][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.034345][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.045461][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.045877][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.067304][ T32] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 83.085828][ T32] usb 2-1: USB disconnect, device number 5 [ 83.423741][ T5887] usb usb8: usbfs: process 5887 (syz.0.39) did not claim interface 0 before use [ 83.428596][ T5690] usb 1-1: USB disconnect, device number 4 [ 83.580218][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.731149][ T32] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 83.732103][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.732152][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.735906][ T32] usb 3-1: config 0 descriptor?? [ 83.773750][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 83.994306][ T33] audit: type=1800 audit(1790937389.243:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="syzkaller1" dev="sda1" ino=2043 res=0 errno=-22 [ 84.147170][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 84.148550][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 84.149337][ T32] pwc: recv_control_msg error -32 req 02 val 2c00 [ 84.158420][ T32] pwc: recv_control_msg error -32 req 04 val 1000 [ 84.183875][ T32] pwc: recv_control_msg error -32 req 04 val 1300 [ 84.188320][ T32] pwc: recv_control_msg error -32 req 04 val 1400 [ 84.199778][ T32] pwc: recv_control_msg error -32 req 02 val 2000 [ 84.246892][ T5916] dvmrp16: entered allmulticast mode [ 84.281392][ T5916] dvmrp16: left allmulticast mode [ 84.311397][ T5901] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 84.338697][ T32] pwc: recv_control_msg error -32 req 02 val 2100 [ 84.347174][ T32] pwc: recv_control_msg error -32 req 04 val 1500 [ 84.348361][ T32] pwc: recv_control_msg error -32 req 02 val 2500 [ 84.349316][ T5901] process 'syz.2.44' launched './file2' with NULL argv: empty string added [ 84.356036][ T32] pwc: recv_control_msg error -32 req 02 val 2400 [ 84.641088][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 84.641558][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 84.642924][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 84.644995][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 84.684583][ T32] pwc: Registered as video103. [ 84.707344][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 84.775245][ T32] usb 3-1: USB disconnect, device number 7 [ 85.084704][ T5932] tipc: Started in network mode [ 85.084742][ T5932] tipc: Node identity 7f000001, cluster identity 4711 [ 85.102256][ T5932] tipc: Enabled bearer , priority 10 [ 85.105237][ T5932] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 85.105839][ T5932] tipc: Enabled bearer , priority 10 [ 85.255133][ T5935] netlink: 'syz.1.57': attribute type 21 has an invalid length. [ 85.255156][ T5935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.255217][ T5935] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 85.255230][ T5935] netlink: 'syz.1.57': attribute type 5 has an invalid length. [ 85.255242][ T5935] netlink: 3 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.500986][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.651757][ T32] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 85.652874][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.652902][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 85.652926][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.653158][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.666051][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.666192][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.676290][ T32] pl2303 2-1:1.0: pl2303 converter detected [ 85.708850][ T32] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 85.756157][ T5929] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 85.957196][ T5940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57'. [ 86.038843][ T5935] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 86.039887][ T5935] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 86.042736][ T5935] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 86.067790][ T5935] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 86.110770][ T5935] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 86.211998][ T5703] tipc: Node number set to 2130706433 [ 86.782183][ T5933] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 86.788115][ T5933] pl2303 ttyUSB0: error sending break = -32 [ 86.818007][ T27] usb 2-1: USB disconnect, device number 6 [ 86.841653][ T1218] cfg80211: failed to load regulatory.db [ 86.871480][ T27] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 86.872563][ T27] pl2303 2-1:1.0: device disconnected [ 86.938592][ T5952] FAULT_INJECTION: forcing a failure. [ 86.938592][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 86.938621][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 86.938641][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.938653][ T5952] Call Trace: [ 86.938660][ T5952] [ 86.938668][ T5952] dump_stack_lvl+0xe8/0x150 [ 86.938698][ T5952] should_fail_ex+0x3eb/0x540 [ 86.938723][ T5952] should_failslab+0xa8/0x100 [ 86.938749][ T5952] ? skb_clone+0x212/0x3a0 [ 86.938771][ T5952] kmem_cache_alloc_noprof+0x9c/0x600 [ 86.938794][ T5952] ? skb_clone+0x212/0x3a0 [ 86.938821][ T5952] skb_clone+0x212/0x3a0 [ 86.938847][ T5952] __netlink_deliver_tap+0x355/0x6e0 [ 86.938880][ T5952] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.938906][ T5952] netlink_deliver_tap+0x19c/0x1b0 [ 86.938933][ T5952] netlink_unicast+0x781/0x940 [ 86.938965][ T5952] netlink_sendmsg+0x7c3/0xae0 [ 86.938996][ T5952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.939028][ T5952] ? apparmor_socket_sendmsg+0x98/0x360 [ 86.939054][ T5952] ? lock_acquire+0x115/0x350 [ 86.939076][ T5952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.939104][ T5952] sock_sendmsg_nosec+0x13a/0x180 [ 86.939132][ T5952] sock_write_iter+0x2de/0x3e0 [ 86.939159][ T5952] ? __pfx_sock_write_iter+0x10/0x10 [ 86.939190][ T5952] ? bpf_lsm_file_permission+0x9/0x20 [ 86.939213][ T5952] ? security_file_permission+0x75/0x260 [ 86.939245][ T5952] vfs_write+0x612/0xba0 [ 86.939274][ T5952] ? __pfx_vfs_write+0x10/0x10 [ 86.939298][ T5952] ? __fget_files+0x3a2/0x420 [ 86.939317][ T5952] ? __fget_files+0x2a/0x420 [ 86.939340][ T5952] ? fdget+0x1ac/0x250 [ 86.939366][ T5952] ksys_write+0x150/0x270 [ 86.939399][ T5952] ? __pfx_ksys_write+0x10/0x10 [ 86.939432][ T5952] do_syscall_64+0x166/0x520 [ 86.939453][ T5952] ? trace_irq_disable+0x3b/0x140 [ 86.939474][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.939494][ T5952] ? clear_bhb_loop+0x70/0xc0 [ 86.939517][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.939536][ T5952] RIP: 0033:0x7fbde799e159 [ 86.939554][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.939569][ T5952] RSP: 002b:00007fbde8951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.939590][ T5952] RAX: ffffffffffffffda RBX: 00007fbde7c25fa0 RCX: 00007fbde799e159 [ 86.939605][ T5952] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000003 [ 86.939617][ T5952] RBP: 00007fbde8951090 R08: 0000000000000000 R09: 0000000000000000 [ 86.939629][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.939640][ T5952] R13: 00007fbde7c26038 R14: 00007fbde7c25fa0 R15: 00007ffd345727e8 [ 86.939671][ T5952] [ 86.957517][ T5749] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.030148][ T4924] Bluetooth: hci0: command 0x080f tx timeout [ 87.361919][ T5749] usb 1-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40 [ 87.364791][ T5749] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 87.364876][ T5749] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 87.364903][ T5749] usb 1-1: config 1 interface 0 has no altsetting 0 [ 87.379956][ T5749] usb 1-1: string descriptor 0 read error: -22 [ 87.380135][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.500113][ T1218] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 87.547379][ T5961] veth0_vlan: entered allmulticast mode [ 87.650137][ T1218] usb 3-1: device descriptor read/64, error -71 [ 87.704401][ T5962] netlink: 14 bytes leftover after parsing attributes in process `syz.1.65'. [ 87.741490][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.779299][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.783919][ T5962] bond0 (unregistering): Released all slaves [ 87.871051][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.873359][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.900949][ T1218] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 88.040153][ T1218] usb 3-1: device descriptor read/64, error -71 [ 88.152960][ T1218] usb usb3-port1: attempt power cycle [ 88.186715][ T5749] usbhid 1-1:1.0: can't add hid device: -71 [ 88.186813][ T5749] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 88.210524][ T5749] usb 1-1: USB disconnect, device number 5 [ 88.451216][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.510310][ T1218] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 88.518824][ T5970] Bluetooth: MGMT ver 1.23 [ 88.540766][ T1218] usb 3-1: device descriptor read/8, error -71 [ 88.780092][ T1218] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 88.802411][ T1218] usb 3-1: device descriptor read/8, error -71 [ 88.818560][ T5974] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 88.818581][ T5974] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 88.818593][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 88.818605][ T5974] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 88.819459][ T5974] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 88.827438][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 88.827459][ T5974] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 88.910475][ T1218] usb usb3-port1: unable to enumerate USB device [ 89.288766][ T5984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 89.320496][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.397087][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.76'. [ 89.470118][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 89.473947][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.473998][ T32] usb 2-1: New USB device found: idVendor=2a39, idProduct=3f8c, bcdDevice=0.40 [ 89.479334][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.479361][ T32] usb 2-1: Product: syz [ 89.479376][ T32] usb 2-1: Manufacturer: syz [ 89.479390][ T32] usb 2-1: SerialNumber: syz [ 89.490699][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 89.734591][ T32] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.844540][ T27] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 89.846300][ T32] usb 2-1: USB disconnect, device number 7 [ 89.924902][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.79'. [ 89.933034][ T5994] FAULT_INJECTION: forcing a failure. [ 89.933034][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 89.933062][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 89.933083][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.933094][ T5994] Call Trace: [ 89.933101][ T5994] [ 89.933109][ T5994] dump_stack_lvl+0xe8/0x150 [ 89.933139][ T5994] should_fail_ex+0x3eb/0x540 [ 89.933164][ T5994] should_failslab+0xa8/0x100 [ 89.933191][ T5994] __kmalloc_noprof+0xf9/0x710 [ 89.933212][ T5994] ? nft_pipapo_init+0x85/0x660 [ 89.933234][ T5994] ? nft_pipapo_init+0x85/0x660 [ 89.933262][ T5994] nft_pipapo_init+0x85/0x660 [ 89.933284][ T5994] ? kfree+0x1c5/0x650 [ 89.933299][ T5994] ? nf_tables_newset+0x13b5/0x2570 [ 89.933325][ T5994] nf_tables_newset+0x1c1f/0x2570 [ 89.933357][ T5994] ? __pfx_nf_tables_newset+0x10/0x10 [ 89.933376][ T5994] ? nft_pernet+0x23/0x240 [ 89.933401][ T5994] ? lock_acquire+0x115/0x350 [ 89.933435][ T5994] ? __nla_parse+0x40/0x60 [ 89.933460][ T5994] nfnetlink_rcv+0x1288/0x28c0 [ 89.933515][ T5994] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 89.933575][ T5994] ? skb_clone+0x246/0x3a0 [ 89.933615][ T5994] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.933639][ T5994] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.933667][ T5994] netlink_unicast+0x7bd/0x940 [ 89.933699][ T5994] netlink_sendmsg+0x7c3/0xae0 [ 89.933730][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.933761][ T5994] ? apparmor_socket_sendmsg+0x98/0x360 [ 89.933790][ T5994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.933814][ T5994] sock_sendmsg_nosec+0x13a/0x180 [ 89.933842][ T5994] ____sys_sendmsg+0x54e/0x850 [ 89.933871][ T5994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.933900][ T5994] ? import_iovec+0x73/0xa0 [ 89.933925][ T5994] ___sys_sendmsg+0x2a5/0x360 [ 89.933944][ T5994] ? __lock_acquire+0x747/0x2de0 [ 89.933968][ T5994] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.934021][ T5994] ? __fget_files+0x3a2/0x420 [ 89.934041][ T5994] ? __fget_files+0x2a/0x420 [ 89.934068][ T5994] __x64_sys_sendmsg+0x1b1/0x290 [ 89.934091][ T5994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.934131][ T5994] do_syscall_64+0x166/0x520 [ 89.934153][ T5994] ? trace_irq_disable+0x3b/0x140 [ 89.934174][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.934193][ T5994] ? clear_bhb_loop+0x70/0xc0 [ 89.934215][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.934234][ T5994] RIP: 0033:0x7fc80539e159 [ 89.934251][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.934265][ T5994] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.934285][ T5994] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 89.934299][ T5994] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 89.934311][ T5994] RBP: 00007fc8061b3090 R08: 0000000000000000 R09: 0000000000000000 [ 89.934323][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.934334][ T5994] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 89.934362][ T5994] [ 89.993447][ T27] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 89.997059][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.997089][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.997111][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.997149][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.033216][ T27] usb 4-1: config 0 descriptor?? [ 90.389059][ T5999] overlayfs: failed to resolve './file1/file0': -2 [ 90.416766][ T6003] netlink: '&e': attribute type 2 has an invalid length. [ 90.416832][ T6003] FAULT_INJECTION: forcing a failure. [ 90.416832][ T6003] name failslab, interval 1, probability 0, space 0, times 0 [ 90.416854][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: &e Not tainted syzkaller #0 PREEMPT(full) [ 90.416875][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.416887][ T6003] Call Trace: [ 90.416894][ T6003] [ 90.416902][ T6003] dump_stack_lvl+0xe8/0x150 [ 90.416932][ T6003] should_fail_ex+0x3eb/0x540 [ 90.416958][ T6003] should_failslab+0xa8/0x100 [ 90.416996][ T6003] __kmalloc_cache_noprof+0x9e/0x600 [ 90.417018][ T6003] ? rcu_is_watching+0x16/0xb0 [ 90.417042][ T6003] ? ovs_flow_tbl_init+0x57/0x840 [ 90.417067][ T6003] ? ovs_flow_tbl_init+0x57/0x840 [ 90.417100][ T6003] ovs_flow_tbl_init+0x57/0x840 [ 90.417124][ T6003] ? __kmalloc_cache_noprof+0x148/0x600 [ 90.417143][ T6003] ? ovs_dp_cmd_new+0x1c2/0xb00 [ 90.417160][ T6003] ? ovs_dp_cmd_new+0x1c2/0xb00 [ 90.417193][ T6003] ovs_dp_cmd_new+0x269/0xb00 [ 90.417227][ T6003] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 90.417252][ T6003] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 90.417273][ T6003] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 90.417304][ T6003] genl_family_rcv_msg_doit+0x233/0x340 [ 90.417331][ T6003] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 90.417364][ T6003] ? bpf_lsm_capable+0x9/0x20 [ 90.417390][ T6003] ? security_capable+0x7e/0x2c0 [ 90.417430][ T6003] genl_rcv_msg+0x614/0x7a0 [ 90.417456][ T6003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.417475][ T6003] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 90.417498][ T6003] ? __asan_memcpy+0x40/0x70 [ 90.417525][ T6003] netlink_rcv_skb+0x226/0x4a0 [ 90.417550][ T6003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.417571][ T6003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.417611][ T6003] ? down_read+0x2b9/0x320 [ 90.417640][ T6003] genl_rcv+0x28/0x40 [ 90.417657][ T6003] netlink_unicast+0x7bd/0x940 [ 90.417691][ T6003] netlink_sendmsg+0x7c3/0xae0 [ 90.417723][ T6003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.417756][ T6003] ? apparmor_socket_sendmsg+0x98/0x360 [ 90.417793][ T6003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.417818][ T6003] sock_sendmsg_nosec+0x13a/0x180 [ 90.417847][ T6003] ____sys_sendmsg+0x54e/0x850 [ 90.417875][ T6003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.417906][ T6003] ? import_iovec+0x73/0xa0 [ 90.417933][ T6003] ___sys_sendmsg+0x2a5/0x360 [ 90.417953][ T6003] ? __lock_acquire+0x747/0x2de0 [ 90.417979][ T6003] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.418036][ T6003] ? __fget_files+0x3a2/0x420 [ 90.418057][ T6003] ? __fget_files+0x2a/0x420 [ 90.418086][ T6003] __x64_sys_sendmsg+0x1b1/0x290 [ 90.418111][ T6003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.418154][ T6003] do_syscall_64+0x166/0x520 [ 90.418176][ T6003] ? trace_irq_disable+0x3b/0x140 [ 90.418198][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.418218][ T6003] ? clear_bhb_loop+0x70/0xc0 [ 90.418242][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.418261][ T6003] RIP: 0033:0x7f5552d9e159 [ 90.418280][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.418295][ T6003] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.418316][ T6003] RAX: ffffffffffffffda RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 90.418331][ T6003] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000008 [ 90.418344][ T6003] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.418356][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.418366][ T6003] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 90.418396][ T6003] [ 90.461321][ T5690] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.654317][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.84'. [ 90.654367][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'. [ 90.773293][ T6008] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 90.773316][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 90.773339][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.773351][ T6008] Call Trace: [ 90.773359][ T6008] [ 90.773367][ T6008] dump_stack_lvl+0xe8/0x150 [ 90.773399][ T6008] sysfs_create_dir_ns+0x271/0x2a0 [ 90.773428][ T6008] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.773460][ T6008] ? do_raw_spin_unlock+0xf5/0x200 [ 90.773493][ T6008] kobject_add_internal+0x622/0xcd0 [ 90.773529][ T6008] kobject_add+0x163/0x240 [ 90.773555][ T6008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.773583][ T6008] ? __pfx_kobject_add+0x10/0x10 [ 90.773615][ T6008] ? get_device_parent+0x366/0x3a0 [ 90.773647][ T6008] device_add+0x3fa/0xb80 [ 90.773674][ T6008] tty_register_device_attr+0x425/0x990 [ 90.773705][ T6008] ? __pfx_tty_register_device_attr+0x10/0x10 [ 90.773737][ T6008] ? tty_port_init+0x136/0x1a0 [ 90.773760][ T6008] ? gsm_dlci_alloc+0x330/0x640 [ 90.773787][ T6008] gsm_activate_mux+0x110/0x2a0 [ 90.773817][ T6008] gsmld_ioctl+0x12d3/0x1930 [ 90.773847][ T6008] ? __pfx_gsmld_ioctl+0x10/0x10 [ 90.773888][ T6008] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 90.773926][ T6008] ? ldsem_down_read+0x12/0x40 [ 90.773949][ T6008] ? __pfx_gsmld_ioctl+0x10/0x10 [ 90.773971][ T6008] tty_ioctl+0x9bd/0xde0 [ 90.773992][ T6008] ? __pfx_tty_ioctl+0x10/0x10 [ 90.774013][ T6008] __se_sys_ioctl+0xfc/0x170 [ 90.774042][ T6008] do_syscall_64+0x166/0x520 [ 90.774065][ T6008] ? trace_irq_disable+0x3b/0x140 [ 90.774087][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.774107][ T6008] ? clear_bhb_loop+0x70/0xc0 [ 90.774132][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.774151][ T6008] RIP: 0033:0x7fbde799e159 [ 90.774170][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.774187][ T6008] RSP: 002b:00007fbde8930028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.774207][ T6008] RAX: ffffffffffffffda RBX: 00007fbde7c26090 RCX: 00007fbde799e159 [ 90.774222][ T6008] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 90.774235][ T6008] RBP: 00007fbde7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 90.774248][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.774259][ T6008] R13: 00007fbde7c26128 R14: 00007fbde7c26090 R15: 00007ffd345727e8 [ 90.774289][ T6008] [ 90.789290][ T5690] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.793135][ T6008] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.809807][ T5690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.809858][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.045573][ T5690] usb 1-1: config 0 descriptor?? [ 91.151711][ T5690] pwc: Askey VC010 type 2 USB webcam detected. [ 91.175082][ T27] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 91.388306][ T6009] syzkaller1: entered promiscuous mode [ 91.388332][ T6009] syzkaller1: entered allmulticast mode [ 91.498404][ T5690] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.499757][ T5690] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.501266][ T5690] pwc: recv_control_msg error -32 req 02 val 2c00 [ 91.515986][ T5690] pwc: recv_control_msg error -32 req 04 val 1000 [ 91.517822][ T5690] pwc: recv_control_msg error -32 req 04 val 1300 [ 91.518439][ T5690] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.519132][ T5690] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.519722][ T5690] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.525299][ T5690] pwc: recv_control_msg error -32 req 04 val 1500 [ 91.546477][ T5690] pwc: recv_control_msg error -32 req 02 val 2500 [ 91.555411][ T5690] pwc: recv_control_msg error -32 req 02 val 2400 [ 91.558687][ T5690] pwc: recv_control_msg error -32 req 02 val 2600 [ 91.565945][ T5690] pwc: recv_control_msg error -32 req 02 val 2900 [ 91.642182][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.768199][ T5690] pwc: recv_control_msg error -71 req 04 val 1100 [ 91.769872][ T5690] pwc: recv_control_msg error -71 req 04 val 1200 [ 91.777019][ T5690] pwc: Registered as video103. [ 91.792325][ T32] usb 2-1: New USB device found: idVendor=05e1, idProduct=0893, bcdDevice=0.00 [ 91.801833][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.804362][ T5690] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 91.821035][ T5690] usb 1-1: USB disconnect, device number 6 [ 91.825253][ T32] usb 2-1: config 0 descriptor?? [ 91.854026][ T32] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 91.854079][ T32] usb 2-1: selecting invalid altsetting 1 [ 92.031024][ T32] gspca_stk014: init reg: 0x00 [ 92.031080][ T32] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 92.073605][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.074693][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.078703][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.079240][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.083475][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.083882][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.084745][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.085179][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.086073][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.086455][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.232790][ T5690] usb 2-1: USB disconnect, device number 8 [ 92.310969][ T32] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 92.460159][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 92.460981][ T32] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 92.461893][ T32] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 92.461935][ T32] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 92.461962][ T32] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.461987][ T32] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 92.463942][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.463965][ T32] usb 3-1: Product: syz [ 92.463979][ T32] usb 3-1: Manufacturer: syz [ 92.463994][ T32] usb 3-1: SerialNumber: syz [ 92.550087][ T1218] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 92.564125][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 92.568890][ T32] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input8 [ 92.669566][ T5690] usb 4-1: USB disconnect, device number 9 [ 92.671026][ T1218] usb 1-1: device descriptor read/64, error -71 [ 92.721813][ T32] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 92.721833][ T32] (id 0x00) [ 92.788855][ T6035] FAULT_INJECTION: forcing a failure. [ 92.788855][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 92.788874][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(full) [ 92.788886][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.788893][ T6035] Call Trace: [ 92.788897][ T6035] [ 92.788902][ T6035] dump_stack_lvl+0xe8/0x150 [ 92.788921][ T6035] should_fail_ex+0x3eb/0x540 [ 92.788936][ T6035] should_failslab+0xa8/0x100 [ 92.788951][ T6035] __kmalloc_cache_noprof+0x9e/0x600 [ 92.788963][ T6035] ? pcpu_alloc+0x10/0x310 [ 92.788976][ T6035] ? tty_register_device_attr+0x2f2/0x990 [ 92.788988][ T6035] ? tty_register_device_attr+0x2f2/0x990 [ 92.789003][ T6035] tty_register_device_attr+0x2f2/0x990 [ 92.789018][ T6035] ? __pfx_tty_register_device_attr+0x10/0x10 [ 92.789035][ T6035] ? tty_port_init+0x136/0x1a0 [ 92.789046][ T6035] ? gsm_dlci_alloc+0x330/0x640 [ 92.789060][ T6035] gsm_activate_mux+0x110/0x2a0 [ 92.789075][ T6035] gsmld_ioctl+0xcf5/0x1930 [ 92.789091][ T6035] ? __pfx_gsmld_ioctl+0x10/0x10 [ 92.789108][ T6035] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 92.789126][ T6035] ? ldsem_down_read+0x12/0x40 [ 92.789139][ T6035] ? __pfx_gsmld_ioctl+0x10/0x10 [ 92.789150][ T6035] tty_ioctl+0x9bd/0xde0 [ 92.789161][ T6035] ? __pfx_tty_ioctl+0x10/0x10 [ 92.789171][ T6035] __se_sys_ioctl+0xfc/0x170 [ 92.789187][ T6035] do_syscall_64+0x166/0x520 [ 92.789199][ T6035] ? trace_irq_disable+0x3b/0x140 [ 92.789211][ T6035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.789225][ T6035] ? clear_bhb_loop+0x70/0xc0 [ 92.789245][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.789262][ T6035] RIP: 0033:0x7fc01ff9e159 [ 92.789278][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.789293][ T6035] RSP: 002b:00007fc020da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.789314][ T6035] RAX: ffffffffffffffda RBX: 00007fc020225fa0 RCX: 00007fc01ff9e159 [ 92.789327][ T6035] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 92.789339][ T6035] RBP: 00007fc020da3090 R08: 0000000000000000 R09: 0000000000000000 [ 92.789349][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.789360][ T6035] R13: 00007fc020226038 R14: 00007fc020225fa0 R15: 00007fffb6a07518 [ 92.789387][ T6035] [ 92.843669][ T32] rc_core: IR keymap rc-imon-pad not found [ 92.843685][ T32] Registered IR keymap rc-empty [ 92.844010][ T32] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 92.844030][ T32] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 92.931051][ T1218] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 93.080086][ T1218] usb 1-1: device descriptor read/64, error -71 [ 93.098603][ T32] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 93.100705][ T32] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input9 [ 93.121201][ T32] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:12> initialized [ 93.181330][ T1218] usb usb1-port1: attempt power cycle [ 93.520393][ T1218] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 93.542569][ T1218] usb 1-1: device descriptor read/8, error -71 [ 93.707030][ T6053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.775167][ T6057] FAULT_INJECTION: forcing a failure. [ 93.775167][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 93.775186][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT(full) [ 93.775198][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.775204][ T6057] Call Trace: [ 93.775208][ T6057] [ 93.775213][ T6057] dump_stack_lvl+0xe8/0x150 [ 93.775232][ T6057] should_fail_ex+0x3eb/0x540 [ 93.775246][ T6057] ? __alloc_skb+0x1db/0x7a0 [ 93.775256][ T6057] should_failslab+0xa8/0x100 [ 93.775271][ T6057] ? __alloc_skb+0x1db/0x7a0 [ 93.775284][ T6057] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 93.775295][ T6057] ? __alloc_skb+0x18d/0x7a0 [ 93.775305][ T6057] ? __alloc_skb+0x1db/0x7a0 [ 93.775317][ T6057] __alloc_skb+0x1db/0x7a0 [ 93.775329][ T6057] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 93.775348][ T6057] rtnetlink_event+0x1b7/0x270 [ 93.775361][ T6057] notifier_call_chain+0x1a5/0x3d0 [ 93.775376][ T6057] netif_change_tx_queue_len+0x134/0x290 [ 93.775390][ T6057] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 93.775403][ T6057] ? __dev_get_by_name+0xe5/0x130 [ 93.775419][ T6057] dev_change_tx_queue_len+0x101/0x220 [ 93.775432][ T6057] dev_ioctl+0x7b4/0x1150 [ 93.775445][ T6057] sock_do_ioctl+0x23e/0x320 [ 93.775464][ T6057] ? __pfx_sock_do_ioctl+0x10/0x10 [ 93.775503][ T6057] sock_ioctl+0x57a/0x7e0 [ 93.775527][ T6057] ? __fget_files+0x2a/0x420 [ 93.775547][ T6057] ? __pfx_sock_ioctl+0x10/0x10 [ 93.775571][ T6057] ? __fget_files+0x2a/0x420 [ 93.775588][ T6057] ? __fget_files+0x2a/0x420 [ 93.775601][ T6057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.775615][ T6057] ? __pfx_sock_ioctl+0x10/0x10 [ 93.775628][ T6057] __se_sys_ioctl+0xfc/0x170 [ 93.775643][ T6057] do_syscall_64+0x166/0x520 [ 93.775655][ T6057] ? trace_irq_disable+0x3b/0x140 [ 93.775668][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.775678][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 93.775691][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.775701][ T6057] RIP: 0033:0x7f5552d9e159 [ 93.775712][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.775720][ T6057] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.775732][ T6057] RAX: ffffffffffffffda RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 93.775740][ T6057] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000004 [ 93.775746][ T6057] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.775753][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.775759][ T6057] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 93.775780][ T6057] [ 93.819106][ T6058] tipc: Started in network mode [ 93.819136][ T6058] tipc: Node identity a6feedfa935e, cluster identity 4711 [ 93.819344][ T6058] tipc: Enabled bearer , priority 0 [ 93.832237][ T1218] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 93.884754][ T1218] usb 1-1: device descriptor read/8, error -71 [ 93.903234][ T6058] syzkaller0: entered promiscuous mode [ 93.903258][ T6058] syzkaller0: entered allmulticast mode [ 93.905611][ T6058] tipc: Resetting bearer [ 93.973021][ T33] audit: type=1326 audit(1790937399.223:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.99" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5552d9e159 code=0x0 [ 94.013312][ T1218] usb usb1-port1: unable to enumerate USB device [ 94.240136][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.410157][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 94.412579][ T32] usb 2-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 94.413560][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 94.413585][ T32] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.413609][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.413632][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.413657][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.416518][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.416540][ T32] usb 2-1: Product: syz [ 94.416553][ T32] usb 2-1: Manufacturer: syz [ 94.416567][ T32] usb 2-1: SerialNumber: syz [ 94.419985][ T32] usb 2-1: config 0 descriptor?? [ 94.422299][ T6065] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 94.581635][ T6055] tipc: Resetting bearer [ 94.624895][ T6061] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 94.649266][ T32] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 95.114612][ T32] usb 3-1: USB disconnect, device number 12 [ 95.531020][ T32] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 95.680914][ T32] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 95.682458][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.715665][ T32] usb 3-1: config 0 descriptor?? [ 95.923963][ T32] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 96.207023][ T32] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 96.207050][ T32] [drm] Initialized udl on minor 1 [ 96.267727][ T6055] tipc: Disabling bearer [ 96.275858][ T4924] Bluetooth: hci0: unexpected event for opcode 0x203c [ 96.283160][ T1218] tipc: Node number set to 899739130 [ 96.897894][ T6088] netlink: 14 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.979788][ T5751] usb 2-1: USB disconnect, device number 9 [ 97.090931][ T6098] sg_write: data in/out 24540/136 bytes for SCSI command 0x0-- guessing data in; [ 97.090931][ T6098] program syz.1.111 not setting count and/or reply_len properly [ 97.170118][ T1218] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.209040][ T6103] jffs2: notice: (6103) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.323282][ T1218] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.325214][ T1218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.325263][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.330257][ T1218] usb 4-1: config 0 descriptor?? [ 97.368845][ T1218] pwc: Askey VC010 type 2 USB webcam detected. [ 97.478119][ T33] audit: type=1326 audit(1790937402.723:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc80539e159 code=0x0 [ 97.593658][ T6113] FAULT_INJECTION: forcing a failure. [ 97.593658][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.593690][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.1.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.593717][ T6113] Tainted: [L]=SOFTLOCKUP [ 97.593726][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.593738][ T6113] Call Trace: [ 97.593745][ T6113] [ 97.593754][ T6113] dump_stack_lvl+0xe8/0x150 [ 97.593784][ T6113] should_fail_ex+0x3eb/0x540 [ 97.593809][ T6113] _copy_to_user+0x31/0xb0 [ 97.593835][ T6113] simple_read_from_buffer+0xe1/0x170 [ 97.593862][ T6113] proc_fail_nth_read+0x1bb/0x230 [ 97.593890][ T6113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.593918][ T6113] ? rw_verify_area+0x24a/0x4c0 [ 97.593942][ T6113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.593966][ T6113] vfs_read+0x213/0xa80 [ 97.594008][ T6113] ? __pfx___mutex_lock+0x10/0x10 [ 97.594073][ T6113] ? __pfx_vfs_read+0x10/0x10 [ 97.594104][ T6113] ? __fget_files+0x2a/0x420 [ 97.594124][ T6113] ? __fget_files+0x3a2/0x420 [ 97.594143][ T6113] ? __fget_files+0x2a/0x420 [ 97.594178][ T6113] ? fdget+0x1ac/0x250 [ 97.594240][ T6113] ksys_read+0x150/0x270 [ 97.594313][ T6113] ? __pfx_ksys_read+0x10/0x10 [ 97.594364][ T6113] do_syscall_64+0x166/0x520 [ 97.594393][ T6113] ? trace_irq_disable+0x3b/0x140 [ 97.594416][ T6113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.594436][ T6113] ? clear_bhb_loop+0x70/0xc0 [ 97.594460][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.594479][ T6113] RIP: 0033:0x7f5552d5e98e [ 97.594496][ T6113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.594517][ T6113] RSP: 002b:00007f5550ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.594546][ T6113] RAX: ffffffffffffffda RBX: 00007f5550ff66c0 RCX: 00007f5552d5e98e [ 97.594563][ T6113] RDX: 000000000000000f RSI: 00007f5550ff60a0 RDI: 0000000000000004 [ 97.594575][ T6113] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.594585][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.594596][ T6113] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 97.594626][ T6113] [ 97.800849][ T1218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.801573][ T1218] pwc: recv_control_msg error -32 req 02 val 2700 [ 97.809585][ T1218] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.817514][ T1218] pwc: recv_control_msg error -32 req 04 val 1000 [ 97.819908][ T1218] pwc: recv_control_msg error -32 req 04 val 1300 [ 97.822064][ T1218] pwc: recv_control_msg error -32 req 04 val 1400 [ 97.822682][ T1218] pwc: recv_control_msg error -32 req 02 val 2000 [ 97.823457][ T1218] pwc: recv_control_msg error -32 req 02 val 2100 [ 98.026557][ T1218] pwc: recv_control_msg error -32 req 02 val 2500 [ 98.035828][ T1218] pwc: recv_control_msg error -32 req 02 val 2400 [ 98.036427][ T1218] pwc: recv_control_msg error -32 req 02 val 2600 [ 98.039524][ T1218] pwc: recv_control_msg error -32 req 02 val 2900 [ 98.244455][ T1218] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.246220][ T1218] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.259724][ T1218] pwc: Registered as video103. [ 98.266664][ T1218] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 98.281855][ T1218] usb 4-1: USB disconnect, device number 10 [ 99.310179][ T5751] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 99.350594][ T5749] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.461468][ T5751] usb 4-1: not running at top speed; connect to a high speed hub [ 99.461505][ T5751] usb 4-1: New USB device found: idVendor=18b1, idProduct=0037, bcdDevice=1.00 [ 99.463110][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.463141][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.463177][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.500539][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 99.502998][ T5749] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.504077][ T5749] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 99.513330][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.513355][ T5749] usb 2-1: Product: syz [ 99.513369][ T5749] usb 2-1: Manufacturer: syz [ 99.513383][ T5749] usb 2-1: SerialNumber: syz [ 99.525680][ T5749] usb 2-1: config 0 descriptor?? [ 99.526556][ T6148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.539191][ T5749] hub 2-1:0.0: bad descriptor, ignoring hub [ 99.539237][ T5749] hub 2-1:0.0: probe with driver hub failed with error -5 [ 99.892503][ T5751] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 99.892545][ T5751] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 99.892572][ T5751] petalynx 0003:18B1:0037.0002: unexpected long global item [ 99.893287][ T5751] petalynx 0003:18B1:0037.0002: parse failed [ 99.893364][ T5751] petalynx 0003:18B1:0037.0002: probe with driver petalynx failed with error -22 [ 100.093743][ T5749] usb 4-1: USB disconnect, device number 11 [ 100.211345][ T6148] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 100.363870][ T6148] usb 2-1: device firmware changed [ 100.365128][ T5682] usb 2-1: USB disconnect, device number 10 [ 100.510163][ T5682] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.671099][ T5682] usb 2-1: Using ep0 maxpacket: 32 [ 100.671818][ T5682] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.672993][ T5682] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.676457][ T5682] usb 2-1: string descriptor 0 read error: -22 [ 100.676605][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.706677][ T5682] usb 2-1: config 0 descriptor?? [ 100.728800][ T6164] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 100.740129][ T5682] hub 2-1:0.0: bad descriptor, ignoring hub [ 100.740155][ T5682] hub 2-1:0.0: probe with driver hub failed with error -5 [ 100.994226][ T6175] kvm: Disabled LAPIC found during irq injection [ 101.050610][ T5682] usb 2-1: USB disconnect, device number 11 [ 101.197763][ T6182] kvm: Disabled LAPIC found during irq injection [ 101.207344][ T5682] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 101.282590][ T32] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 101.286705][ T6184] jffs2: notice: (6184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.286800][ T32] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 101.329286][ T32] usb 3-1: USB disconnect, device number 13 [ 101.365352][ T5682] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.366965][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.367028][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.415099][ T5682] usb 4-1: config 0 descriptor?? [ 101.435262][ T5682] pwc: Askey VC010 type 2 USB webcam detected. [ 101.466468][ T6189] FAULT_INJECTION: forcing a failure. [ 101.466468][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 101.466514][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.0.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.466543][ T6189] Tainted: [L]=SOFTLOCKUP [ 101.466551][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.466563][ T6189] Call Trace: [ 101.466571][ T6189] [ 101.466580][ T6189] dump_stack_lvl+0xe8/0x150 [ 101.466613][ T6189] should_fail_ex+0x3eb/0x540 [ 101.466641][ T6189] should_failslab+0xa8/0x100 [ 101.466671][ T6189] __kmalloc_cache_noprof+0x9e/0x600 [ 101.466696][ T6189] ? __se_sys_fspick+0x203/0x3c0 [ 101.466725][ T6189] ? __se_sys_fspick+0x203/0x3c0 [ 101.466758][ T6189] __se_sys_fspick+0x203/0x3c0 [ 101.466789][ T6189] ? __pfx___se_sys_fspick+0x10/0x10 [ 101.466830][ T6189] do_syscall_64+0x166/0x520 [ 101.466854][ T6189] ? trace_irq_disable+0x3b/0x140 [ 101.466878][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.466898][ T6189] ? clear_bhb_loop+0x70/0xc0 [ 101.466923][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.466944][ T6189] RIP: 0033:0x7fc80539e159 [ 101.466964][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.466981][ T6189] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 101.467002][ T6189] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 101.467016][ T6189] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.467030][ T6189] RBP: 00007fc80543506b R08: 0000000000000000 R09: 0000000000000000 [ 101.467042][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.467053][ T6189] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 101.467084][ T6189] [ 101.649914][ T6194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.139'. [ 101.678848][ T6191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 101.848906][ T5682] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.856648][ T5682] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.866390][ T5682] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.869791][ T5682] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.884998][ T5682] pwc: recv_control_msg error -32 req 04 val 1300 [ 101.885766][ T5682] pwc: recv_control_msg error -32 req 04 val 1400 [ 101.890188][ T5682] pwc: recv_control_msg error -32 req 02 val 2000 [ 101.903520][ T5682] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.924355][ T6205] FAULT_INJECTION: forcing a failure. [ 101.924355][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 101.924394][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.1.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.924428][ T6205] Tainted: [L]=SOFTLOCKUP [ 101.924436][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.924459][ T6205] Call Trace: [ 101.924467][ T6205] [ 101.924478][ T6205] dump_stack_lvl+0xe8/0x150 [ 101.924516][ T6205] should_fail_ex+0x3eb/0x540 [ 101.924546][ T6205] should_failslab+0xa8/0x100 [ 101.924578][ T6205] __kmalloc_cache_noprof+0x9e/0x600 [ 101.924606][ T6205] ? __se_sys_fspick+0x203/0x3c0 [ 101.924637][ T6205] ? __se_sys_fspick+0x203/0x3c0 [ 101.924674][ T6205] __se_sys_fspick+0x203/0x3c0 [ 101.924708][ T6205] ? __pfx___se_sys_fspick+0x10/0x10 [ 101.924751][ T6205] do_syscall_64+0x166/0x520 [ 101.924777][ T6205] ? trace_irq_disable+0x3b/0x140 [ 101.924804][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.924828][ T6205] ? clear_bhb_loop+0x70/0xc0 [ 101.924855][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.924879][ T6205] RIP: 0033:0x7f5552d9e159 [ 101.924901][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.924920][ T6205] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 101.924945][ T6205] RAX: ffffffffffffffda RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 101.924960][ T6205] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.924976][ T6205] RBP: 00007f5552e3506b R08: 0000000000000000 R09: 0000000000000000 [ 101.924990][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.925004][ T6205] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 101.925037][ T6205] [ 102.121126][ T5682] pwc: recv_control_msg error -32 req 02 val 2500 [ 102.131854][ T5682] pwc: recv_control_msg error -32 req 02 val 2400 [ 102.133155][ T5682] pwc: recv_control_msg error -32 req 02 val 2600 [ 102.137003][ T5682] pwc: recv_control_msg error -32 req 02 val 2900 [ 102.140340][ T5751] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 102.228019][ T6216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 102.290838][ T5751] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.292872][ T5751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.292929][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.296854][ T5751] usb 3-1: config 0 descriptor?? [ 102.349841][ T5751] pwc: Askey VC010 type 2 USB webcam detected. [ 102.351983][ T5682] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.353711][ T5682] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.364209][ T6220] FAULT_INJECTION: forcing a failure. [ 102.364209][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 102.364239][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz.0.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.364263][ T6220] Tainted: [L]=SOFTLOCKUP [ 102.364270][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.364281][ T6220] Call Trace: [ 102.364288][ T6220] [ 102.364296][ T6220] dump_stack_lvl+0xe8/0x150 [ 102.364327][ T6220] should_fail_ex+0x3eb/0x540 [ 102.364351][ T6220] should_failslab+0xa8/0x100 [ 102.364377][ T6220] __kmalloc_noprof+0xf9/0x710 [ 102.364399][ T6220] ? tomoyo_encode+0x2ad/0x570 [ 102.364418][ T6220] ? tomoyo_encode+0x2ad/0x570 [ 102.364443][ T6220] tomoyo_encode+0x2ad/0x570 [ 102.364467][ T6220] tomoyo_realpath_from_path+0x5fa/0x640 [ 102.364497][ T6220] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.364525][ T6220] tomoyo_path_number_perm+0x246/0x5f0 [ 102.364553][ T6220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.364578][ T6220] ? __lock_acquire+0x747/0x2de0 [ 102.364633][ T6220] ? __fget_files+0x2a/0x420 [ 102.364656][ T6220] ? __fget_files+0x2a/0x420 [ 102.364675][ T6220] ? __fget_files+0x2a/0x420 [ 102.364699][ T6220] security_file_ioctl+0xc3/0x2a0 [ 102.364726][ T6220] __se_sys_ioctl+0x47/0x170 [ 102.364753][ T6220] do_syscall_64+0x166/0x520 [ 102.364774][ T6220] ? trace_irq_disable+0x3b/0x140 [ 102.364795][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.364814][ T6220] ? clear_bhb_loop+0x70/0xc0 [ 102.364837][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.364855][ T6220] RIP: 0033:0x7fc80539e159 [ 102.364872][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.364887][ T6220] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.364907][ T6220] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 102.364922][ T6220] RDX: 00002000000002c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 102.364934][ T6220] RBP: 00007fc8061b3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.364946][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.364957][ T6220] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 102.364985][ T6220] [ 102.365003][ T6220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.367132][ T5682] pwc: Registered as video103. [ 102.397966][ T5682] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 102.425898][ T5682] usb 4-1: USB disconnect, device number 12 [ 102.791023][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 102.810701][ T5751] pwc: recv_control_msg error -32 req 02 val 2b00 [ 102.940158][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 102.940848][ T32] usb 2-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 102.943841][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 102.943873][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.943912][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.947819][ T32] usb 2-1: config 0 descriptor?? [ 102.990871][ T6237] FAULT_INJECTION: forcing a failure. [ 102.990871][ T6237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.990903][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.3.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.990929][ T6237] Tainted: [L]=SOFTLOCKUP [ 102.990936][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.990947][ T6237] Call Trace: [ 102.990955][ T6237] [ 102.990963][ T6237] dump_stack_lvl+0xe8/0x150 [ 102.990992][ T6237] should_fail_ex+0x3eb/0x540 [ 102.991016][ T6237] strncpy_from_user+0x36/0x2c0 [ 102.991038][ T6237] do_getname+0x77/0x250 [ 102.991069][ T6237] __se_sys_rmdir+0x1e/0x140 [ 102.991096][ T6237] do_syscall_64+0x166/0x520 [ 102.991118][ T6237] ? trace_irq_disable+0x3b/0x140 [ 102.991149][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.991168][ T6237] ? clear_bhb_loop+0x70/0xc0 [ 102.991190][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.991209][ T6237] RIP: 0033:0x7fc01ff9e159 [ 102.991225][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.991241][ T6237] RSP: 002b:00007fc020da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.991261][ T6237] RAX: ffffffffffffffda RBX: 00007fc020225fa0 RCX: 00007fc01ff9e159 [ 102.991275][ T6237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 102.991286][ T6237] RBP: 00007fc020da3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.991298][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.991309][ T6237] R13: 00007fc020226038 R14: 00007fc020225fa0 R15: 00007fffb6a07518 [ 102.991337][ T6237] [ 103.044455][ T6239] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 103.048762][ T5751] pwc: recv_control_msg error -32 req 02 val 2c00 [ 103.067340][ T5751] pwc: recv_control_msg error -32 req 04 val 1000 [ 103.092039][ T5751] pwc: recv_control_msg error -32 req 04 val 1300 [ 103.135181][ T5751] pwc: recv_control_msg error -32 req 04 val 1400 [ 103.161647][ T5751] pwc: recv_control_msg error -32 req 02 val 2000 [ 103.170927][ T6243] FAULT_INJECTION: forcing a failure. [ 103.170927][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 103.170955][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.170983][ T6243] Tainted: [L]=SOFTLOCKUP [ 103.170989][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.171000][ T6243] Call Trace: [ 103.171008][ T6243] [ 103.171015][ T6243] dump_stack_lvl+0xe8/0x150 [ 103.171046][ T6243] should_fail_ex+0x3eb/0x540 [ 103.171071][ T6243] should_failslab+0xa8/0x100 [ 103.171097][ T6243] __kmalloc_noprof+0xf9/0x710 [ 103.171118][ T6243] ? tomoyo_encode+0x2ad/0x570 [ 103.171137][ T6243] ? tomoyo_encode+0x2ad/0x570 [ 103.171162][ T6243] tomoyo_encode+0x2ad/0x570 [ 103.171187][ T6243] tomoyo_realpath_from_path+0x5fa/0x640 [ 103.171217][ T6243] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.171242][ T6243] tomoyo_path_number_perm+0x246/0x5f0 [ 103.171272][ T6243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.171297][ T6243] ? __lock_acquire+0x747/0x2de0 [ 103.171350][ T6243] ? __fget_files+0x2a/0x420 [ 103.171373][ T6243] ? __fget_files+0x2a/0x420 [ 103.171393][ T6243] ? __fget_files+0x2a/0x420 [ 103.171425][ T6243] security_file_ioctl+0xc3/0x2a0 [ 103.171453][ T6243] __se_sys_ioctl+0x47/0x170 [ 103.171487][ T6243] do_syscall_64+0x166/0x520 [ 103.171508][ T6243] ? trace_irq_disable+0x3b/0x140 [ 103.171529][ T6243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.171549][ T6243] ? clear_bhb_loop+0x70/0xc0 [ 103.171571][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.171589][ T6243] RIP: 0033:0x7fc01ff9e159 [ 103.171607][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.171622][ T6243] RSP: 002b:00007fc020da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.171641][ T6243] RAX: ffffffffffffffda RBX: 00007fc020225fa0 RCX: 00007fc01ff9e159 [ 103.171656][ T6243] RDX: 0000200000000000 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 103.171668][ T6243] RBP: 00007fc020da3090 R08: 0000000000000000 R09: 0000000000000000 [ 103.171680][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.171691][ T6243] R13: 00007fc020226038 R14: 00007fc020225fa0 R15: 00007fffb6a07518 [ 103.171720][ T6243] [ 103.171776][ T6243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.178210][ T5751] pwc: recv_control_msg error -32 req 02 val 2100 [ 103.197723][ T5751] pwc: recv_control_msg error -32 req 04 val 1500 [ 103.211128][ T5751] pwc: recv_control_msg error -32 req 02 val 2500 [ 103.271920][ T5751] pwc: recv_control_msg error -32 req 02 val 2400 [ 103.278664][ T5751] pwc: recv_control_msg error -32 req 02 val 2600 [ 103.303009][ T5751] pwc: recv_control_msg error -32 req 02 val 2900 [ 103.448750][ T6223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.448952][ T6223] block device autoloading is deprecated and will be removed. [ 103.507211][ T6248] netlink: 56 bytes leftover after parsing attributes in process `syz.3.158'. [ 103.527787][ T5751] pwc: recv_control_msg error -71 req 04 val 1100 [ 103.545292][ T5751] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.564772][ T5751] pwc: Registered as video103. [ 103.569137][ T5751] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 103.574941][ T5751] usb 3-1: USB disconnect, device number 14 [ 103.596915][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 103.597018][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.622458][ T32] usb 2-1: USB disconnect, device number 12 [ 104.265519][ T6259] FAULT_INJECTION: forcing a failure. [ 104.265519][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.265550][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.3.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.265577][ T6259] Tainted: [L]=SOFTLOCKUP [ 104.265583][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.265594][ T6259] Call Trace: [ 104.265601][ T6259] [ 104.265609][ T6259] dump_stack_lvl+0xe8/0x150 [ 104.265639][ T6259] should_fail_ex+0x3eb/0x540 [ 104.265664][ T6259] _copy_to_user+0x31/0xb0 [ 104.265690][ T6259] simple_read_from_buffer+0xe1/0x170 [ 104.265716][ T6259] proc_fail_nth_read+0x1bb/0x230 [ 104.265744][ T6259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.265783][ T6259] ? rw_verify_area+0x24a/0x4c0 [ 104.265807][ T6259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.265830][ T6259] vfs_read+0x213/0xa80 [ 104.265857][ T6259] ? __pfx___mutex_lock+0x10/0x10 [ 104.265885][ T6259] ? __pfx_vfs_read+0x10/0x10 [ 104.265908][ T6259] ? __fget_files+0x2a/0x420 [ 104.265928][ T6259] ? __fget_files+0x3a2/0x420 [ 104.265947][ T6259] ? __fget_files+0x2a/0x420 [ 104.265971][ T6259] ? fdget+0x1ac/0x250 [ 104.265998][ T6259] ksys_read+0x150/0x270 [ 104.266023][ T6259] ? __pfx_ksys_read+0x10/0x10 [ 104.266056][ T6259] do_syscall_64+0x166/0x520 [ 104.266077][ T6259] ? trace_irq_disable+0x3b/0x140 [ 104.266099][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.266119][ T6259] ? clear_bhb_loop+0x70/0xc0 [ 104.266142][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.266161][ T6259] RIP: 0033:0x7fc01ff5e98e [ 104.266179][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.266194][ T6259] RSP: 002b:00007fc020da2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.266214][ T6259] RAX: ffffffffffffffda RBX: 00007fc020da36c0 RCX: 00007fc01ff5e98e [ 104.266228][ T6259] RDX: 000000000000000f RSI: 00007fc020da30a0 RDI: 0000000000000006 [ 104.266241][ T6259] RBP: 00007fc020da3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.266252][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.266263][ T6259] R13: 00007fc020226038 R14: 00007fc020225fa0 R15: 00007fffb6a07518 [ 104.266293][ T6259] [ 104.506113][ T6265] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.580204][ T5751] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.734074][ T5751] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.735214][ T5751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.735261][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.739263][ T5751] usb 2-1: config 0 descriptor?? [ 104.745536][ T5751] pwc: Askey VC010 type 2 USB webcam detected. [ 104.770205][ T5614] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 104.921172][ T5614] usb 3-1: Using ep0 maxpacket: 8 [ 104.921926][ T5614] usb 3-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 104.927847][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.927871][ T5614] usb 3-1: Product: ఊ [ 104.927886][ T5614] usb 3-1: Manufacturer: ␁ [ 104.927925][ T5614] usb 3-1: SerialNumber: П [ 105.106184][ T6292] FAULT_INJECTION: forcing a failure. [ 105.106184][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.106216][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.0.174 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.106243][ T6292] Tainted: [L]=SOFTLOCKUP [ 105.106250][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.106262][ T6292] Call Trace: [ 105.106269][ T6292] [ 105.106278][ T6292] dump_stack_lvl+0xe8/0x150 [ 105.106307][ T6292] should_fail_ex+0x3eb/0x540 [ 105.106333][ T6292] _copy_from_user+0x2d/0xb0 [ 105.106358][ T6292] ___sys_sendmsg+0x1c6/0x360 [ 105.106379][ T6292] ? __lock_acquire+0x747/0x2de0 [ 105.106406][ T6292] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.106426][ T6292] ? __lock_acquire+0x747/0x2de0 [ 105.106451][ T6292] ? kstrtouint+0x6e/0xe0 [ 105.106515][ T6292] __sys_sendmmsg+0x273/0x4d0 [ 105.106543][ T6292] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.106573][ T6292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.106610][ T6292] ? ksys_write+0x242/0x270 [ 105.106635][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 105.106663][ T6292] __x64_sys_sendmmsg+0xa0/0xc0 [ 105.106687][ T6292] do_syscall_64+0x166/0x520 [ 105.106709][ T6292] ? trace_irq_disable+0x3b/0x140 [ 105.106731][ T6292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.106751][ T6292] ? clear_bhb_loop+0x70/0xc0 [ 105.106774][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.106793][ T6292] RIP: 0033:0x7fc80539e159 [ 105.106819][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.106835][ T6292] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.106856][ T6292] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 105.106870][ T6292] RDX: 0000000000000002 RSI: 0000200000004000 RDI: 0000000000000003 [ 105.106882][ T6292] RBP: 00007fc8061b3090 R08: 0000000000000000 R09: 0000000000000000 [ 105.106894][ T6292] R10: 0000000000044840 R11: 0000000000000246 R12: 0000000000000001 [ 105.106906][ T6292] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 105.106936][ T6292] [ 105.190884][ T5751] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.193726][ T5751] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.199727][ T5751] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.208034][ T5751] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.212300][ T5751] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.215105][ T5751] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.215876][ T5751] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.219924][ T5751] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.236781][ T6265] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 105.249221][ T5614] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 105.423864][ T5751] pwc: recv_control_msg error -32 req 02 val 2500 [ 105.424642][ T5751] pwc: recv_control_msg error -32 req 02 val 2400 [ 105.425417][ T5751] pwc: recv_control_msg error -32 req 02 val 2600 [ 105.429080][ T5751] pwc: recv_control_msg error -32 req 02 val 2900 [ 105.634377][ T5751] pwc: recv_control_msg error -71 req 04 val 1100 [ 105.634841][ T5751] pwc: recv_control_msg error -71 req 04 val 1200 [ 105.642952][ T5751] pwc: Registered as video103. [ 105.645477][ T5751] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 105.655122][ T5751] usb 2-1: USB disconnect, device number 13 [ 105.820205][ T5690] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 105.968202][ T5614] usb 3-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 105.984000][ T5690] usb 4-1: not running at top speed; connect to a high speed hub [ 105.984032][ T5690] usb 4-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 105.985036][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 105.988157][ T6265] syz.2.164 (6265) used greatest stack depth: 19248 bytes left [ 105.988493][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.988516][ T5690] usb 4-1: Product: syz [ 105.988530][ T5690] usb 4-1: Manufacturer: syz [ 105.988545][ T5690] usb 4-1: SerialNumber: syz [ 106.058182][ T6302] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.067804][ T5690] oti6858 4-1:1.0: oti6858 converter detected [ 106.086723][ T5690] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 106.111070][ T5614] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.119415][ T5614] usb 3-1: USB disconnect, device number 15 [ 106.147921][ T6306] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.178'. [ 106.174864][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.427965][ T5614] usb 4-1: USB disconnect, device number 13 [ 106.453306][ T5614] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 106.456962][ T5614] oti6858 4-1:1.0: device disconnected [ 106.510378][ T6314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.511166][ T6314] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 106.562414][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.583357][ T6314] team0: Device gre0 is of different type [ 106.613453][ T6320] FAULT_INJECTION: forcing a failure. [ 106.613453][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.613502][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.1.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.613528][ T6320] Tainted: [L]=SOFTLOCKUP [ 106.613535][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.613546][ T6320] Call Trace: [ 106.613554][ T6320] [ 106.613563][ T6320] dump_stack_lvl+0xe8/0x150 [ 106.613592][ T6320] should_fail_ex+0x3eb/0x540 [ 106.613617][ T6320] _copy_to_user+0x31/0xb0 [ 106.613643][ T6320] copy_siginfo_to_user+0x22/0xc0 [ 106.613668][ T6320] x64_setup_rt_frame+0x764/0xc50 [ 106.613714][ T6320] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 106.613748][ T6320] arch_do_signal_or_restart+0x456/0x860 [ 106.613772][ T6320] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.613803][ T6320] ? ksys_read+0x242/0x270 [ 106.613833][ T6320] exit_to_user_mode_loop+0x10e/0x770 [ 106.613855][ T6320] ? rcu_is_watching+0x16/0xb0 [ 106.613883][ T6320] do_syscall_64+0x328/0x520 [ 106.613905][ T6320] ? trace_irq_disable+0x3b/0x140 [ 106.613927][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.613946][ T6320] ? clear_bhb_loop+0x70/0xc0 [ 106.613969][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.613987][ T6320] RIP: 0033:0x7f5552d9e157 [ 106.614005][ T6320] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 106.614021][ T6320] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.614042][ T6320] RAX: 0000000000000000 RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 106.614056][ T6320] RDX: 0000000000000ffc RSI: 0000200000000740 RDI: 0000000000000003 [ 106.614068][ T6320] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.614080][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.614092][ T6320] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 106.614122][ T6320] [ 106.829677][ T6325] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.186'. [ 107.290131][ T1015] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 107.440813][ T1015] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.443307][ T1015] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.443358][ T1015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.480416][ T5614] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 107.512573][ T1015] usb 3-1: config 0 descriptor?? [ 107.517104][ T1015] pwc: Askey VC010 type 2 USB webcam detected. [ 107.630132][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 107.632195][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.632241][ T5614] usb 4-1: New USB device found: idVendor=3687, idProduct=0201, bcdDevice=1.03 [ 107.632276][ T5614] usb 4-1: no configurations [ 107.632288][ T5614] usb 4-1: can't read configurations, error -22 [ 107.770219][ T5614] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 107.813305][ T6350] FAULT_INJECTION: forcing a failure. [ 107.813305][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.813333][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.1.193 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.813359][ T6350] Tainted: [L]=SOFTLOCKUP [ 107.813365][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.813376][ T6350] Call Trace: [ 107.813384][ T6350] [ 107.813392][ T6350] dump_stack_lvl+0xe8/0x150 [ 107.813421][ T6350] should_fail_ex+0x3eb/0x540 [ 107.813446][ T6350] strncpy_from_user+0x36/0x2c0 [ 107.813470][ T6350] do_getname+0x77/0x250 [ 107.813500][ T6350] __x64_sys_execve+0x7a/0xc0 [ 107.813524][ T6350] do_syscall_64+0x166/0x520 [ 107.813545][ T6350] ? trace_irq_disable+0x3b/0x140 [ 107.813568][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.813587][ T6350] ? clear_bhb_loop+0x70/0xc0 [ 107.813610][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.813629][ T6350] RIP: 0033:0x7f5552d9e159 [ 107.813647][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.813663][ T6350] RSP: 002b:00007f5550ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 107.813683][ T6350] RAX: ffffffffffffffda RBX: 00007f5553025fa0 RCX: 00007f5552d9e159 [ 107.813698][ T6350] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 107.813711][ T6350] RBP: 00007f5550ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.813723][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.813733][ T6350] R13: 00007f5553026038 R14: 00007f5553025fa0 R15: 00007ffec4e7de88 [ 107.813761][ T6350] [ 107.930508][ T1015] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.931218][ T1015] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.931824][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 107.935855][ T1015] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.938305][ T1015] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.938911][ T1015] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.941013][ T1015] pwc: recv_control_msg error -32 req 04 val 1400 [ 107.944564][ T1015] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.946849][ T1015] pwc: recv_control_msg error -32 req 02 val 2100 [ 107.989187][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.989239][ T5614] usb 4-1: New USB device found: idVendor=3687, idProduct=0201, bcdDevice=1.03 [ 107.989273][ T5614] usb 4-1: no configurations [ 107.989292][ T5614] usb 4-1: can't read configurations, error -22 [ 107.989806][ T5614] usb usb4-port1: attempt power cycle [ 108.151511][ T1015] pwc: recv_control_msg error -32 req 02 val 2500 [ 108.152157][ T1015] pwc: recv_control_msg error -32 req 02 val 2400 [ 108.152781][ T1015] pwc: recv_control_msg error -32 req 02 val 2600 [ 108.153403][ T1015] pwc: recv_control_msg error -32 req 02 val 2900 [ 108.304868][ T6362] tipc: Started in network mode [ 108.304899][ T6362] tipc: Node identity 7f000001, cluster identity 4711 [ 108.305392][ T6362] tipc: Enabling of bearer rejected, failed to enable media [ 108.333057][ T5614] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 108.350882][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 108.354655][ T1015] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.355063][ T1015] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.363857][ T1015] pwc: Registered as video103. [ 108.377006][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.377061][ T5614] usb 4-1: New USB device found: idVendor=3687, idProduct=0201, bcdDevice=1.03 [ 108.377095][ T5614] usb 4-1: no configurations [ 108.377107][ T5614] usb 4-1: can't read configurations, error -22 [ 108.378396][ T1015] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 108.394695][ T1015] usb 3-1: USB disconnect, device number 16 [ 108.500468][ T5614] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 108.520932][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 108.528159][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.528207][ T5614] usb 4-1: New USB device found: idVendor=3687, idProduct=0201, bcdDevice=1.03 [ 108.528237][ T5614] usb 4-1: no configurations [ 108.528244][ T5614] usb 4-1: can't read configurations, error -22 [ 108.528474][ T5614] usb usb4-port1: unable to enumerate USB device [ 108.728539][ T6372] FAULT_INJECTION: forcing a failure. [ 108.728539][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 108.728561][ T6372] CPU: 0 UID: 0 PID: 6372 Comm: syz.0.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.728576][ T6372] Tainted: [L]=SOFTLOCKUP [ 108.728580][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.728587][ T6372] Call Trace: [ 108.728592][ T6372] [ 108.728597][ T6372] dump_stack_lvl+0xe8/0x150 [ 108.728615][ T6372] should_fail_ex+0x3eb/0x540 [ 108.728629][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 108.728639][ T6372] should_failslab+0xa8/0x100 [ 108.728655][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 108.728664][ T6372] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 108.728675][ T6372] ? __alloc_skb+0x18d/0x7a0 [ 108.728685][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 108.728697][ T6372] __alloc_skb+0x1db/0x7a0 [ 108.728709][ T6372] netlink_sendmsg+0x577/0xae0 [ 108.728726][ T6372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.728744][ T6372] ? apparmor_socket_sendmsg+0x98/0x360 [ 108.728760][ T6372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.728773][ T6372] sock_sendmsg_nosec+0x13a/0x180 [ 108.728790][ T6372] ____sys_sendmsg+0x54e/0x850 [ 108.728805][ T6372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.728820][ T6372] ? import_iovec+0x73/0xa0 [ 108.728834][ T6372] ___sys_sendmsg+0x2a5/0x360 [ 108.728845][ T6372] ? __lock_acquire+0x747/0x2de0 [ 108.728859][ T6372] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.728887][ T6372] ? __fget_files+0x3a2/0x420 [ 108.728899][ T6372] ? __fget_files+0x2a/0x420 [ 108.728916][ T6372] __x64_sys_sendmsg+0x1b1/0x290 [ 108.728929][ T6372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.728950][ T6372] do_syscall_64+0x166/0x520 [ 108.728962][ T6372] ? trace_irq_disable+0x3b/0x140 [ 108.728974][ T6372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.728985][ T6372] ? clear_bhb_loop+0x70/0xc0 [ 108.728998][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.729008][ T6372] RIP: 0033:0x7fc80539e159 [ 108.729018][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.729028][ T6372] RSP: 002b:00007fc8061b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.729042][ T6372] RAX: ffffffffffffffda RBX: 00007fc805625fa0 RCX: 00007fc80539e159 [ 108.729050][ T6372] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 108.729057][ T6372] RBP: 00007fc8061b3090 R08: 0000000000000000 R09: 0000000000000000 [ 108.729064][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.729070][ T6372] R13: 00007fc805626038 R14: 00007fc805625fa0 R15: 00007ffdd8a182e8 [ 108.729086][ T6372] [ 109.150829][ T6386] FAULT_INJECTION: forcing a failure. [ 109.150829][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 109.150850][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.0.204 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.150866][ T6386] Tainted: [L]=SOFTLOCKUP [ 109.150870][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.150877][ T6386] Call Trace: [ 109.150881][ T6386] [ 109.150889][ T6386] dump_stack_lvl+0xe8/0x150 [ 109.150909][ T6386] should_fail_ex+0x3eb/0x540 [ 109.150924][ T6386] should_failslab+0xa8/0x100 [ 109.150949][ T6386] __kvmalloc_node_noprof+0x171/0x820 [ 109.150965][ T6386] ? __kvmalloc_node_noprof+0x340/0x820 [ 109.150977][ T6386] ? io_alloc_cache_init+0x42/0x140 [ 109.150991][ T6386] ? io_alloc_cache_init+0x42/0x140 [ 109.151008][ T6386] io_alloc_cache_init+0x42/0x140 [ 109.151023][ T6386] io_ring_ctx_alloc+0x57d/0xb80 [ 109.151039][ T6386] io_uring_create+0x50/0x980 [ 109.151052][ T6386] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 109.151069][ T6386] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 109.151098][ T6386] do_syscall_64+0x166/0x520 [ 109.151110][ T6386] ? trace_irq_disable+0x3b/0x140 [ 109.151123][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.151134][ T6386] ? clear_bhb_loop+0x70/0xc0 [ 109.151147][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.151157][ T6386] RIP: 0033:0x7fc80539e159 [ 109.151168][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.151177][ T6386] RSP: 002b:00007fc8061b2fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 109.151190][ T6386] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fc80539e159 [ 109.151198][ T6386] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000020 [ 109.151205][ T6386] RBP: 00007fc80543506b R08: 0000000000000000 R09: 0000000000000000 [ 109.151212][ T6386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.151218][ T6386] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd8a182e8 [ 109.151233][ T6386] [ 109.395111][ T6394] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 109.396762][ T6394] CIFS: Attempting to mount //127.0.0.1/share [ 109.421207][ T6394] CIFS: VFS: Error connecting to socket. Aborting operation. [ 109.510421][ T1218] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 109.660164][ T1218] usb 3-1: Using ep0 maxpacket: 8 [ 109.660311][ T5614] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 109.661205][ T1218] usb 3-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 109.662248][ T1218] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 109.664212][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.664235][ T1218] usb 3-1: Product: syz [ 109.664249][ T1218] usb 3-1: Manufacturer: syz [ 109.664264][ T1218] usb 3-1: SerialNumber: syz [ 109.668878][ T1218] ch9200 3-1:2.0: probe with driver ch9200 failed with error -22 [ 109.810773][ T5614] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.811727][ T5614] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.811759][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.814851][ T5614] usb 2-1: config 0 descriptor?? [ 109.854357][ T5614] pwc: Askey VC010 type 2 USB webcam detected. [ 109.956172][ T6382] evm: overlay not supported [ 109.972254][ T6382] [ 109.974629][ T6382] ====================================================== [ 109.981654][ T6382] WARNING: possible circular locking dependency detected [ 109.988881][ T6382] syzkaller #0 Tainted: G L [ 109.995209][ T6382] ------------------------------------------------------ [ 110.002225][ T6382] syz.2.202/6382 is trying to acquire lock: [ 110.008293][ T6382] ffff88804cc56408 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 110.017999][ T6382] [ 110.017999][ T6382] but task is already holding lock: [ 110.025373][ T6382] ffff888076887480 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 110.035288][ T6382] [ 110.035288][ T6382] which lock already depends on the new lock. [ 110.035288][ T6382] [ 110.045710][ T6382] [ 110.045710][ T6382] the existing dependency chain (in reverse order) is: [ 110.054823][ T6382] [ 110.054823][ T6382] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 110.062650][ T6382] __d_alloc_parallel+0xc32/0x1700 [ 110.068379][ T6382] __lookup_slow+0x82/0x2f0 [ 110.073401][ T6382] lookup_slow+0x59/0x80 [ 110.078163][ T6382] link_path_walk+0xd22/0x1910 [ 110.083448][ T6382] path_openat+0x1c4/0x1da0 [ 110.088485][ T6382] do_file_open+0x23e/0x4a0 [ 110.093520][ T6382] do_sys_openat2+0x115/0x200 [ 110.098726][ T6382] __x64_sys_openat+0x138/0x170 [ 110.104137][ T6382] do_syscall_64+0x166/0x520 [ 110.109353][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.115866][ T6382] [ 110.115866][ T6382] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 110.124308][ T6382] __lock_acquire+0x164c/0x2de0 [ 110.129718][ T6382] lock_acquire+0x115/0x350 [ 110.134745][ T6382] down_read+0x45/0x320 [ 110.139611][ T6382] lookup_slow+0x46/0x80 [ 110.144490][ T6382] ovl_lookup_single+0x323/0xe90 [ 110.149979][ T6382] ovl_lookup_layer+0x377/0x440 [ 110.155369][ T6382] ovl_lookup+0x5e5/0x1c80 [ 110.160344][ T6382] lookup_open+0x94b/0x1970 [ 110.165384][ T6382] path_openat+0x673/0x1da0 [ 110.170429][ T6382] do_file_open+0x23e/0x4a0 [ 110.175463][ T6382] do_sys_openat2+0x115/0x200 [ 110.180672][ T6382] __x64_sys_openat+0x138/0x170 [ 110.186051][ T6382] do_syscall_64+0x166/0x520 [ 110.191165][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.197578][ T6382] [ 110.197578][ T6382] other info that might help us debug this: [ 110.197578][ T6382] [ 110.207797][ T6382] Possible unsafe locking scenario: [ 110.207797][ T6382] [ 110.215242][ T6382] CPU0 CPU1 [ 110.220694][ T6382] ---- ---- [ 110.226318][ T6382] lock(DCACHE_PAR_LOOKUP); [ 110.230912][ T6382] lock(&type->i_mutex_dir_key#5); [ 110.238739][ T6382] lock(DCACHE_PAR_LOOKUP); [ 110.245862][ T6382] rlock(&type->i_mutex_dir_key#5); [ 110.251153][ T6382] [ 110.251153][ T6382] *** DEADLOCK *** [ 110.251153][ T6382] [ 110.259323][ T6382] locks held by syz.2.202/6382: 3, last CPU#1: [ 110.265465][ T6382] #0: ffff888067608460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 110.274800][ T6382] #1: ffff888079072230 (&ovl_i_mutex_dir_key[depth]){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 110.285249][ T6382] #2: ffff888076887480 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 110.295449][ T6382] [ 110.295449][ T6382] stack backtrace: [ 110.301335][ T6382] CPU: 1 UID: 60928 PID: 6382 Comm: syz.2.202 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.312925][ T6382] Tainted: [L]=SOFTLOCKUP [ 110.317240][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.327287][ T6382] Call Trace: [ 110.330577][ T6382] [ 110.333512][ T6382] dump_stack_lvl+0xe8/0x150 [ 110.338112][ T6382] print_circular_bug+0x2e2/0x300 [ 110.343134][ T6382] check_noncircular+0x12f/0x150 [ 110.348074][ T6382] __lock_acquire+0x164c/0x2de0 [ 110.352928][ T6382] ? lock_acquire+0x115/0x350 [ 110.357603][ T6382] lock_acquire+0x115/0x350 [ 110.362101][ T6382] ? lookup_slow+0x46/0x80 [ 110.366528][ T6382] down_read+0x45/0x320 [ 110.370699][ T6382] ? lookup_slow+0x46/0x80 [ 110.375110][ T6382] ? d_lookup+0x8a/0xa0 [ 110.379261][ T6382] lookup_slow+0x46/0x80 [ 110.383502][ T6382] ovl_lookup_single+0x323/0xe90 [ 110.388441][ T6382] ? __pfx_ovl_lookup_single+0x10/0x10 [ 110.393898][ T6382] ? get_cached_acl+0xe4/0x550 [ 110.398663][ T6382] ovl_lookup_layer+0x377/0x440 [ 110.403515][ T6382] ovl_lookup+0x5e5/0x1c80 [ 110.407935][ T6382] ? __pfx_from_kgid+0x10/0x10 [ 110.412708][ T6382] ? apparmor_capable+0x126/0x170 [ 110.417823][ T6382] ? bpf_lsm_capable+0x9/0x20 [ 110.422650][ T6382] ? security_capable+0x7e/0x2c0 [ 110.427684][ T6382] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 110.433416][ T6382] ? __pfx_ovl_lookup+0x10/0x10 [ 110.438359][ T6382] ? ovl_permission+0x187/0x300 [ 110.443216][ T6382] ? __pfx_ovl_permission+0x10/0x10 [ 110.448493][ T6382] ? from_kgid+0x1c6/0x660 [ 110.452909][ T6382] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 110.458361][ T6382] ? __pfx_from_kgid+0x10/0x10 [ 110.463120][ T6382] ? inode_permission+0x2b8/0x600 [ 110.468137][ T6382] ? bpf_lsm_inode_create+0x9/0x20 [ 110.473247][ T6382] ? security_inode_create+0xc3/0x340 [ 110.478613][ T6382] lookup_open+0x94b/0x1970 [ 110.483213][ T6382] path_openat+0x673/0x1da0 [ 110.487716][ T6382] do_file_open+0x23e/0x4a0 [ 110.492304][ T6382] ? __pfx_do_file_open+0x10/0x10 [ 110.497331][ T6382] ? _raw_spin_unlock+0x28/0x50 [ 110.502183][ T6382] ? alloc_fd+0x6af/0x760 [ 110.506511][ T6382] do_sys_openat2+0x115/0x200 [ 110.511185][ T6382] ? __se_sys_futex+0x3a8/0x450 [ 110.516064][ T6382] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.521260][ T6382] ? rcu_is_watching+0x16/0xb0 [ 110.526021][ T6382] __x64_sys_openat+0x138/0x170 [ 110.530878][ T6382] do_syscall_64+0x166/0x520 [ 110.535476][ T6382] ? trace_irq_disable+0x3b/0x140 [ 110.540501][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.546560][ T6382] ? clear_bhb_loop+0x70/0xc0 [ 110.551231][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.557122][ T6382] RIP: 0033:0x7fbde799e159 [ 110.561527][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.581300][ T6382] RSP: 002b:00007fbde8951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.589705][ T6382] RAX: ffffffffffffffda RBX: 00007fbde7c25fa0 RCX: 00007fbde799e159 [ 110.597665][ T6382] RDX: 000000000000275a RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 110.605624][ T6382] RBP: 00007fbde7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 110.613586][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.621548][ T6382] R13: 00007fbde7c26038 R14: 00007fbde7c25fa0 R15: 00007ffd345727e8 [ 110.629605][ T6382] [ 110.649296][ T5614] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.652760][ T5614] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.655249][ T5614] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.657671][ T5614] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.659367][ T5749] usb 3-1: USB disconnect, device number 17 [ 110.661334][ T5614] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.664094][ T5614] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.680595][ T5614] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.681483][ T5614] pwc: recv_control_msg error -32 req 02 val 2100 [ 110.883177][ T5614] pwc: recv_control_msg error -32 req 02 val 2500 [ 110.883622][ T5614] pwc: recv_control_msg error -32 req 02 val 2400 [ 110.884087][ T5614] pwc: recv_control_msg error -32 req 02 val 2600 [ 110.884532][ T5614] pwc: recv_control_msg error -32 req 02 val 2900 [ 111.086292][ T5614] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.086593][ T5614] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.087394][ T5614] pwc: Registered as video103. [ 111.087958][ T5614] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 111.101125][ T5614] usb 2-1: USB disconnect, device number 14