last executing test programs: 6m10.113826861s ago: executing program 4 (id=5): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000300)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) r4 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x141102) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./trace/set_event\x00', 0x2, 0x0) r5 = memfd_create(&(0x7f0000000900)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x2) r6 = syz_open_dev$loop(&(0x7f0000000980), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000009c0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000b00)) fcntl$lock(r5, 0x24, &(0x7f0000000c00)={0x0, 0x5, 0x7fffffffffffffff, 0xfffffffd}) 6m8.385769123s ago: executing program 4 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001380)=[@text64={0x40, &(0x7f00000013c0)="f2f0450fbb3364410f01c9363e0f955c8600400f01c53e4c0fc75e0a66ba2100ed660f3a161f3366baf80cb81218428aef66bafc0cb000eec4e3c96bc90ec744240017010000c74424027cbeb742ff2c24", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)=0x4) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) 6m3.92768357s ago: executing program 4 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x400, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 6m3.717967087s ago: executing program 4 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001380)=[@text64={0x40, &(0x7f00000013c0)="f2f0450fbb3364410f01c9363e0f955c8600400f01c53e4c0fc75e0a66ba2100ed660f3a161f3366baf80cb81218428aef66bafc0cb000eec4e3c96bc90ec744240017010000c74424027cbeb742ff2c24", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) 5m48.130597801s ago: executing program 32 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001380)=[@text64={0x40, &(0x7f00000013c0)="f2f0450fbb3364410f01c9363e0f955c8600400f01c53e4c0fc75e0a66ba2100ed660f3a161f3366baf80cb81218428aef66bafc0cb000eec4e3c96bc90ec744240017010000c74424027cbeb742ff2c24", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) 5m23.843034045s ago: executing program 2 (id=89): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x181842) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r5) r6 = open(&(0x7f0000000700)='./file0\x00', 0x181c42, 0x81) ftruncate(r6, 0x200004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r7}) 5m22.125401741s ago: executing program 2 (id=91): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0xe) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0xc0001, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047454, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000004c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000500), 0x0, 0x640400d9) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl(r3, 0x3b8e, &(0x7f0000000700)="10") write$FUSE_IOCTL(r4, 0x0, 0x48) 5m20.827800787s ago: executing program 2 (id=93): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f00000001c0)) syslog(0x3, &(0x7f0000000200)=""/112, 0x70) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2b}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x2, &(0x7f0000000180)='as') 5m18.887377258s ago: executing program 2 (id=97): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118) get_robust_list(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019dc0)=ANY=[@ANYBLOB="20ff0f00000000"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000019e00)=""/127, 0x7f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/165, 0xa5}], 0x7, &(0x7f0000019e80)=""/175, 0xaf}, 0x40020000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000bc0)={0x0, 0x0, 0x2, 0x0, 0x4, 0x10, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000c80), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019cc0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019d00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005c0000/0xb000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) bind$netlink(0xffffffffffffffff, &(0x7f0000019d80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 5m16.73906937s ago: executing program 2 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x400, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m13.967792674s ago: executing program 2 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12}, 0x2000c040) 4m58.753713021s ago: executing program 33 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12}, 0x2000c040) 32.045296428s ago: executing program 1 (id=612): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019dc0)=ANY=[@ANYBLOB="20ff0f00000000"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000019e00)=""/127, 0x7f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/165, 0xa5}], 0x7}, 0x40020000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000c40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000c80), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019cc0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019d00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005c0000/0xb000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bind$netlink(0xffffffffffffffff, &(0x7f0000019d80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 27.39519655s ago: executing program 1 (id=616): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x181842) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r3) r4 = open(&(0x7f0000000700)='./file0\x00', 0x181c42, 0x81) ftruncate(r4, 0x200004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @loopback, 0x1}]}, &(0x7f0000000080)=0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r6}) 21.541814097s ago: executing program 1 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./proc\x00', &(0x7f00000023c0)='proc\x00', 0x40ce, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x722) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) r3 = msgget$private(0x0, 0x400) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000380)=[0xee01, 0x0, 0x0]) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/247, 0xffffff91}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/231, 0xffffff4e}], 0x154, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{0x3, r4, r5, 0xffffffffffffffff, r6, 0x0, 0x10}, 0x0, 0x0, 0x400, 0x3, 0x2, 0x2, 0x8, 0x4, 0xcd38, 0x6, 0x0, r7}) write(r0, &(0x7f0000002440)='27', 0x2) mount$9p_unix(&(0x7f0000002480)='./proc/thread-self/fail-nth\x00', &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500), 0x800000, &(0x7f0000002540)) 19.462864314s ago: executing program 1 (id=631): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) bind$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005380)='./dev\x00', 0x1c0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@remote, @empty}, &(0x7f0000000200)=0xc) mount(0x0, &(0x7f00000053c0)='./dev\x00', &(0x7f0000005400)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000005440)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000054c0)={0x18, &(0x7f0000005500)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000005540)='./dev/ttyUSB0\x00', 0x2, 0x0) 18.609087852s ago: executing program 0 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./proc\x00', &(0x7f00000023c0)='proc\x00', 0x40ce, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x722) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) r3 = msgget$private(0x0, 0x400) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000380)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() process_vm_writev(r7, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/231, 0xe7}], 0x1, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{0x3, r4, r5, 0xffffffffffffffff, r6, 0x0, 0x10}, 0x0, 0x0, 0x400, 0x3, 0x2, 0x2, 0x8, 0x4, 0xcd38, 0x6, 0x0, r7}) write(r0, &(0x7f0000002440)='27', 0x2) mount$9p_unix(&(0x7f0000002480)='./proc/thread-self/fail-nth\x00', &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500), 0x800000, &(0x7f0000002540)) 16.909198023s ago: executing program 0 (id=635): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 15.51125284s ago: executing program 0 (id=638): r0 = epoll_create1(0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cifs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000140)='cifs\x00', 0x0, &(0x7f00000003c0)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r3 = accept(r2, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/84, 0x54, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 14.501415722s ago: executing program 3 (id=639): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x18) 14.116077644s ago: executing program 5 (id=640): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x181842) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r5) open(0x0, 0x181c42, 0x81) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x383, @local, 0x4}, @in6={0xa, 0x4e21, 0x4, @loopback, 0x1}]}, &(0x7f0000000080)=0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc}) 13.958160502s ago: executing program 1 (id=641): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40844) r0 = io_uring_setup(0x899, &(0x7f00000002c0)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x5) r2 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3c}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)=']/\x00', 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019600)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) 12.038877948s ago: executing program 5 (id=643): r0 = epoll_create1(0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cifs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000140)='cifs\x00', 0x0, &(0x7f00000003c0)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/84, 0x54, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 11.408703336s ago: executing program 3 (id=644): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0xe) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0xc0001, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047454, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000004c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='o', 0x1}], 0x1}}], 0xa06aa2b7985d4e60, 0x640400d9) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl(r3, 0x3b8e, &(0x7f0000000700)="10") write$FUSE_IOCTL(r4, 0x0, 0x48) 10.494436778s ago: executing program 5 (id=646): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c00000000000700000100"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c001a8018000580140006bd9cdac1c3225c05124c5b311de62d0758cec002d7926ea13667ec4afca96074df3e256f580c7014e0d4cb140008074f314293c7e9c2430000eb1edad84af6004a4be7922e201207da24dd5071f3d2fe7e58750191163fb3a03ee992444f60187edfb33cfb25e018bce12688cb0d38aa7bff452f2bcea1075a6da43a7a3057250a1828b27612e48727055de7"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40080c0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r4 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) sched_setscheduler(r4, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000840), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) poll(&(0x7f00000005c0)=[{r6, 0x1021}, {r0, 0xc292}, {r1, 0x2142}, {r5, 0x200}, {r3, 0x680}, {0xffffffffffffffff, 0x1000}, {r5, 0x24c}, {r6, 0x20}], 0x8, 0x1000005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000900)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000a00)='bridge_slave_0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f0000000300)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) 9.24341145s ago: executing program 6 (id=647): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000940), 0x4042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000980), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000009c0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000b00)) 9.210211119s ago: executing program 3 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x181842) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r5) ftruncate(0xffffffffffffffff, 0x200004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @loopback, 0x1}]}, &(0x7f0000000080)=0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc}) 7.873727853s ago: executing program 1 (id=649): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40080c0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) poll(&(0x7f00000005c0)=[{r5, 0x1021}, {r0, 0xc292}, {r1, 0x2142}, {r4, 0x200}, {r3, 0x680}, {0xffffffffffffffff, 0x1000}, {r4, 0x24c}, {r5, 0x20}], 0x8, 0x1000005) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000900)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f0000000300)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @remote}, 0x10) 7.853479706s ago: executing program 6 (id=650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 7.692972567s ago: executing program 5 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100", 0x2}, {&(0x7f0000000040)="bff86c0c002176979aff010003000000001e", 0x12}], 0x3) 7.513134818s ago: executing program 3 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x18) 6.040929343s ago: executing program 6 (id=653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 6.002193519s ago: executing program 3 (id=654): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118) get_robust_list(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000019e00)=""/127, 0x7f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/165, 0xa5}], 0x6, &(0x7f0000019e80)=""/175, 0xaf}, 0x40020000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000bc0)={0x0, 0x0, 0x2, 0x0, 0x4, 0x10, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000c40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000c80), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019cc0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019d00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005c0000/0xb000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bind$netlink(0xffffffffffffffff, &(0x7f0000019d80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064"], 0x2c}}, 0x0) 5.90330867s ago: executing program 5 (id=655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 4.37913886s ago: executing program 3 (id=656): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000480)={0x40, 0xb}, 0x0, 0x0}) 4.197377245s ago: executing program 0 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r4, 0x5) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233"], 0x4a) 4.175434769s ago: executing program 6 (id=658): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40844) r0 = io_uring_setup(0x899, &(0x7f00000002c0)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3c}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']/\x00', 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019600)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) 3.21043653s ago: executing program 5 (id=659): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40080c0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) poll(&(0x7f00000005c0)=[{r5, 0x1021}, {r0, 0xc292}, {r1, 0x2142}, {r4, 0x200}, {r3, 0x680}, {0xffffffffffffffff, 0x1000}, {r4, 0x24c}, {r5, 0x20}], 0x8, 0x1000005) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000900)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f0000000300)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @remote}, 0x10) 2.451244405s ago: executing program 0 (id=660): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000940), 0x4042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000980), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000009c0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000b00)) 1.620700033s ago: executing program 0 (id=661): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x0, &(0x7f0000000300), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') 1.409462598s ago: executing program 6 (id=662): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c00000000000700000100"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c001a8018000580140006bd9cdac1c3225c05124c5b311de62d0758cec002d7926ea13667ec4afca96074df3e256f580c7014e0d4cb140008074f314293c7e9c2430000eb1edad84af6004a4be7922e201207da24dd5071f3d2fe7e58750191163fb3a03ee992444f60187edfb33cfb25e018bce12688cb0d38aa7bff452f2bcea1075a6da43a7a3057250a1828b27612e48727055de7"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40080c0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r4 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) sched_setscheduler(r4, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000840), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) poll(&(0x7f00000005c0)=[{r6, 0x1021}, {r0, 0xc292}, {r1, 0x2142}, {r5, 0x200}, {r3, 0x680}, {0xffffffffffffffff, 0x1000}, {r5, 0x24c}, {r6, 0x20}], 0x8, 0x1000005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000300)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @remote}, 0x10) 0s ago: executing program 6 (id=663): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) bind$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005380)='./dev\x00', 0x1c0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@remote, @empty}, &(0x7f0000000200)=0xc) mount(0x0, &(0x7f00000053c0)='./dev\x00', &(0x7f0000005400)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000005440)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000054c0)={0x18, &(0x7f0000005500)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000005540)='./dev/ttyUSB0\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): t 0 - interval might be too short [ 536.641690][ C1] usb 7-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 536.766979][ T5672] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 536.836243][ T5860] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 536.836411][ T2266] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 536.907772][ T5799] usb 7-1: USB disconnect, device number 7 [ 536.923677][ T5799] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 536.927006][ T5799] cypress_m8 7-1:142.251: device disconnected [ 536.937176][ T5672] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 536.939001][ T5672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.939043][ T5672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.939068][ T5672] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 536.940911][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 536.940935][ T5672] usb 4-1: Product: syz [ 536.940949][ T5672] usb 4-1: Manufacturer: syz [ 536.960017][ T5672] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 536.972438][ T5672] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 536.973123][ T5672] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 536.987887][ T5860] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 536.988068][ T2266] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 536.989219][ T2266] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.989272][ T2266] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.989307][ T2266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.991870][ T5860] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.991974][ T5860] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 536.997612][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.997639][ T5860] usb 1-1: Product: syz [ 536.997655][ T5860] usb 1-1: Manufacturer: syz [ 536.997670][ T5860] usb 1-1: SerialNumber: syz [ 537.388759][ T5860] usb 1-1: usb_control_msg returned -71 [ 537.388815][ T5860] usbtmc 1-1:1.0: can't read capabilities [ 537.388866][ T5860] usbtmc 1-1:1.0: Failed to submit iin_urb [ 537.388934][ T5860] usbtmc 1-1:1.0: probe with driver usbtmc failed with error -90 [ 537.390215][ T5860] usbtouchscreen 1-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 537.419868][ T5860] usb 1-1: USB disconnect, device number 22 [ 537.421653][ T5799] usb 4-1: USB disconnect, device number 23 [ 537.440959][ T5799] garmin_gps 4-1:1.0: device disconnected [ 538.043845][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.056579][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.063542][ T30] audit: type=1400 audit(1794013340.587:356): avc: denied { ioctl } for pid=7631 comm="syz.5.346" path="socket:[18440]" dev="sockfs" ino=18440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.107581][ T5672] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 538.149758][ T7648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7648 comm=syz.0.349 [ 538.257836][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 538.258631][ T5672] usb 2-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 538.262564][ T5672] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 538.262641][ T5672] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 538.262719][ T5672] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.262749][ T5672] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.262774][ T5672] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 538.266325][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.266358][ T5672] usb 2-1: Product: syz [ 538.266374][ T5672] usb 2-1: Manufacturer: syz [ 538.266391][ T5672] usb 2-1: SerialNumber: syz [ 538.993067][ T5672] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 538.993157][ T5672] imon 2-1:155.0: unable to initialize intf0, err -90 [ 539.211100][ T7661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7661 comm=syz.0.352 [ 540.998691][ T5782] usb 6-1: USB disconnect, device number 15 [ 542.794402][ T5860] usb 2-1: USB disconnect, device number 19 [ 542.875318][ T7679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7679 comm=syz.0.357 [ 543.768813][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.359'. [ 543.815070][ T7689] FAULT_INJECTION: forcing a failure. [ 543.815070][ T7689] name fail_futex, interval 1, probability 0, space 0, times 0 [ 543.815110][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 543.815139][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 543.815153][ T7689] Call Trace: [ 543.815162][ T7689] [ 543.815171][ T7689] dump_stack_lvl+0x100/0x190 [ 543.815218][ T7689] should_fail_ex.cold+0x5/0xa [ 543.815250][ T7689] get_futex_key+0x1c9/0x13e0 [ 543.815285][ T7689] ? __pfx_get_futex_key+0x10/0x10 [ 543.815307][ T7689] ? find_held_lock+0x2b/0x80 [ 543.815332][ T7689] ? get_pid_task+0xfc/0x250 [ 543.815352][ T7689] ? get_pid_task+0xfc/0x250 [ 543.815375][ T7689] futex_wake+0xf4/0x5e0 [ 543.815405][ T7689] ? find_held_lock+0x2b/0x80 [ 543.815428][ T7689] ? __pfx_futex_wake+0x10/0x10 [ 543.815459][ T7689] ? rcu_read_lock_any_held+0x6a/0x90 [ 543.815484][ T7689] ? find_held_lock+0x2b/0x80 [ 543.815506][ T7689] ? ksys_write+0x190/0x250 [ 543.815527][ T7689] ? ksys_write+0x190/0x250 [ 543.815551][ T7689] do_futex+0x2b2/0x440 [ 543.815575][ T7689] ? __pfx_do_futex+0x10/0x10 [ 543.815600][ T7689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.815633][ T7689] __x64_sys_futex+0x34f/0x4d0 [ 543.815659][ T7689] ? fput+0x7c/0x100 [ 543.815685][ T7689] ? __pfx___x64_sys_futex+0x10/0x10 [ 543.815710][ T7689] ? ksys_write+0x1ac/0x250 [ 543.815733][ T7689] ? __pfx_ksys_write+0x10/0x10 [ 543.815761][ T7689] do_syscall_64+0x123/0x790 [ 543.815788][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.815811][ T7689] RIP: 0033:0x7fc412b9fb19 [ 543.815830][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.815850][ T7689] RSP: 002b:00007fc413b380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 543.815872][ T7689] RAX: ffffffffffffffda RBX: 00007fc412e25fa8 RCX: 00007fc412b9fb19 [ 543.815885][ T7689] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc412e25fac [ 543.815897][ T7689] RBP: 00007fc412e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 543.815911][ T7689] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 543.815924][ T7689] R13: 00007fc412e26038 R14: 00007fffc841e1b0 R15: 00007fffc841e298 [ 543.815953][ T7689] [ 544.626287][ T5799] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 544.659834][ T7704] jffs2: notice: (7704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 544.937010][ T5799] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 544.938094][ T5799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.938147][ T5799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 544.940192][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.940219][ T5799] usb 2-1: Product: syz [ 544.940234][ T5799] usb 2-1: Manufacturer: syz [ 544.940249][ T5799] usb 2-1: SerialNumber: syz [ 545.086189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 545.786206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 546.256682][ T7715] 9pnet_fd: p9_fd_create_unix (7715): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 546.310408][ T5799] usb 2-1: usb_control_msg returned -71 [ 546.310461][ T5799] usbtmc 2-1:1.0: can't read capabilities [ 546.310500][ T5799] usbtmc 2-1:1.0: Failed to submit iin_urb [ 546.310560][ T5799] usbtmc 2-1:1.0: probe with driver usbtmc failed with error -90 [ 546.311773][ T5799] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 546.358915][ T5799] usb 2-1: USB disconnect, device number 20 [ 546.425082][ T7719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7719 comm=syz.1.366 [ 546.546394][ T5767] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 547.193250][ T5767] usb 7-1: device descriptor read/64, error -71 [ 547.686257][ T5767] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 547.982519][ T5767] usb 7-1: device descriptor read/64, error -71 [ 548.086497][ T5767] usb usb7-port1: attempt power cycle [ 548.239309][ T7728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7728 comm=syz.1.367 [ 548.699872][ T7736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7736 comm=syz.5.369 [ 549.818844][ T5646] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 550.048690][ T5646] usb 1-1: Using ep0 maxpacket: 32 [ 550.049396][ T5646] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 550.051712][ T5646] usb 1-1: config 0 has no interfaces? [ 550.054594][ T5646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.054622][ T5646] usb 1-1: Product: syz [ 550.054637][ T5646] usb 1-1: Manufacturer: syz [ 550.054652][ T5646] usb 1-1: SerialNumber: syz [ 550.059549][ T5646] usb 1-1: config 0 descriptor?? [ 551.689893][ T990] usb 1-1: USB disconnect, device number 23 [ 552.763294][ T7770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7770 comm=syz.5.378 [ 552.935060][ T7768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 554.187917][ T7768] FAULT_INJECTION: forcing a failure. [ 554.187917][ T7768] name fail_futex, interval 1, probability 0, space 0, times 0 [ 554.187954][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.1.376 Not tainted syzkaller #0 PREEMPT(full) [ 554.187970][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 554.187978][ T7768] Call Trace: [ 554.187983][ T7768] [ 554.187990][ T7768] dump_stack_lvl+0x100/0x190 [ 554.188021][ T7768] should_fail_ex.cold+0x5/0xa [ 554.188044][ T7768] get_futex_key+0x1c9/0x13e0 [ 554.188064][ T7768] ? __pfx_get_futex_key+0x10/0x10 [ 554.188075][ T7768] ? find_held_lock+0x2b/0x80 [ 554.188090][ T7768] ? get_pid_task+0xfc/0x250 [ 554.188105][ T7768] ? get_pid_task+0xfc/0x250 [ 554.188134][ T7768] futex_wake+0xf4/0x5e0 [ 554.188155][ T7768] ? find_held_lock+0x2b/0x80 [ 554.188169][ T7768] ? __pfx_futex_wake+0x10/0x10 [ 554.188191][ T7768] ? rcu_read_lock_any_held+0x6a/0x90 [ 554.188208][ T7768] ? find_held_lock+0x2b/0x80 [ 554.188223][ T7768] ? ksys_write+0x190/0x250 [ 554.188238][ T7768] ? ksys_write+0x190/0x250 [ 554.188253][ T7768] do_futex+0x2b2/0x440 [ 554.188268][ T7768] ? __pfx_do_futex+0x10/0x10 [ 554.188284][ T7768] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.188305][ T7768] __x64_sys_futex+0x34f/0x4d0 [ 554.188321][ T7768] ? fput+0x7c/0x100 [ 554.188338][ T7768] ? __pfx___x64_sys_futex+0x10/0x10 [ 554.188351][ T7768] ? ksys_write+0x1ac/0x250 [ 554.188363][ T7768] ? __pfx_ksys_write+0x10/0x10 [ 554.188380][ T7768] do_syscall_64+0x123/0x790 [ 554.188396][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.188409][ T7768] RIP: 0033:0x7fc412b9fb19 [ 554.188422][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.188434][ T7768] RSP: 002b:00007fc413b380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.188449][ T7768] RAX: ffffffffffffffda RBX: 00007fc412e25fa8 RCX: 00007fc412b9fb19 [ 554.188456][ T7768] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc412e25fac [ 554.188463][ T7768] RBP: 00007fc412e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 554.188471][ T7768] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 554.188478][ T7768] R13: 00007fc412e26038 R14: 00007fffc841e1b0 R15: 00007fffc841e298 [ 554.188494][ T7768] [ 554.307579][ T7782] FAULT_INJECTION: forcing a failure. [ 554.307579][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 554.307616][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.5.381 Not tainted syzkaller #0 PREEMPT(full) [ 554.307648][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 554.307661][ T7782] Call Trace: [ 554.307669][ T7782] [ 554.307677][ T7782] dump_stack_lvl+0x100/0x190 [ 554.307722][ T7782] should_fail_ex.cold+0x5/0xa [ 554.307761][ T7782] should_failslab+0xc2/0x120 [ 554.307786][ T7782] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 554.307821][ T7782] ? kvasprintf_const+0x66/0x1a0 [ 554.307851][ T7782] kvasprintf+0xbc/0x150 [ 554.307876][ T7782] ? __pfx_kvasprintf+0x10/0x10 [ 554.307899][ T7782] ? trace_contention_end+0x126/0x160 [ 554.307932][ T7782] ? __mutex_lock+0x267/0x1c10 [ 554.307959][ T7782] ? rfkill_register+0x3a/0xb30 [ 554.307988][ T7782] kvasprintf_const+0x66/0x1a0 [ 554.308018][ T7782] kobject_set_name_vargs+0x5a/0x140 [ 554.308058][ T7782] dev_set_name+0xc7/0x100 [ 554.308081][ T7782] ? __pfx_dev_set_name+0x10/0x10 [ 554.308101][ T7782] ? lockdep_init_map_type+0x5c/0x250 [ 554.308131][ T7782] ? __init_waitqueue_head+0xca/0x150 [ 554.308172][ T7782] rfkill_register+0xf6/0xb30 [ 554.308195][ T7782] nfc_register_device+0x11f/0x3e0 [ 554.308223][ T7782] nci_register_device+0x7f1/0xb80 [ 554.308243][ T7782] ? __pfx_nci_register_device+0x10/0x10 [ 554.308268][ T7782] ? lockdep_init_map_type+0x5c/0x250 [ 554.308304][ T7782] virtual_ncidev_open+0x141/0x220 [ 554.308338][ T7782] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 554.308364][ T7782] misc_open+0x26d/0x450 [ 554.308396][ T7782] ? __pfx_misc_open+0x10/0x10 [ 554.308422][ T7782] chrdev_open+0x234/0x6a0 [ 554.308446][ T7782] ? __pfx_chrdev_open+0x10/0x10 [ 554.308470][ T7782] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 554.308508][ T7782] do_dentry_open+0x674/0x1470 [ 554.308528][ T7782] ? __pfx_chrdev_open+0x10/0x10 [ 554.308554][ T7782] vfs_open_consume+0xcc/0x460 [ 554.308583][ T7782] path_openat+0x1547/0x23f0 [ 554.308611][ T7782] ? __pfx_path_openat+0x10/0x10 [ 554.308641][ T7782] do_file_open+0x20e/0x430 [ 554.308665][ T7782] ? __pfx_do_file_open+0x10/0x10 [ 554.308706][ T7782] ? _raw_spin_unlock+0x28/0x50 [ 554.308723][ T7782] ? alloc_fd+0x471/0x7a0 [ 554.308763][ T7782] do_sys_openat2+0x163/0x1d0 [ 554.308789][ T7782] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.308828][ T7782] __x64_sys_openat+0x12d/0x210 [ 554.308857][ T7782] ? __pfx___x64_sys_openat+0x10/0x10 [ 554.308896][ T7782] do_syscall_64+0x123/0x790 [ 554.308925][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.308945][ T7782] RIP: 0033:0x7f3c4219fb19 [ 554.308964][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.308981][ T7782] RSP: 002b:00007f3c403f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.309002][ T7782] RAX: ffffffffffffffda RBX: 00007f3c42425fa0 RCX: 00007f3c4219fb19 [ 554.309015][ T7782] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 554.309029][ T7782] RBP: 00007f3c42237b70 R08: 0000000000000000 R09: 0000000000000000 [ 554.309042][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.309055][ T7782] R13: 00007f3c42426038 R14: 00007f3c42425fa0 R15: 00007ffe79673bd8 [ 554.309080][ T7782] [ 554.610790][ T990] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 554.793706][ T990] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 554.823325][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.823352][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 554.851199][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.851235][ T990] usb 2-1: Product: syz [ 554.851252][ T990] usb 2-1: Manufacturer: syz [ 554.851268][ T990] usb 2-1: SerialNumber: syz [ 554.980186][ T7792] device-mapper: table: 248:1: snapshot: Cannot get origin device (-ENOENT) [ 554.980225][ T7792] device-mapper: ioctl: error adding target to table [ 556.557074][ T990] usb 2-1: usb_control_msg returned -71 [ 556.557140][ T990] usbtmc 2-1:1.0: can't read capabilities [ 556.557178][ T990] usbtmc 2-1:1.0: Failed to submit iin_urb [ 556.557239][ T990] usbtmc 2-1:1.0: probe with driver usbtmc failed with error -90 [ 556.558447][ T990] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 556.607794][ T990] usb 2-1: USB disconnect, device number 21 [ 556.700541][ T5799] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 556.705514][ T7809] CIFS: Attempting to mount //127.0.0.1/share [ 556.742227][ T7809] CIFS: VFS: Error connecting to socket. Aborting operation. [ 556.742309][ T7809] CIFS: VFS: cifs_mount failed w/return code = -111 [ 557.760005][ T5799] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 557.791493][ T7810] ceph: No mds server is up or the cluster is laggy [ 558.084298][ T7826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7826 comm=syz.1.391 [ 558.107485][ T7826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7826 comm=syz.1.391 [ 558.897575][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.517196][ T7825] loop6: detected capacity change from 0 to 2640 [ 559.517639][ T7825] buffer_io_error: 11 callbacks suppressed [ 559.517649][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517673][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517690][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517707][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517724][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517750][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517772][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517788][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517796][ T7825] ldm_validate_partition_table(): Disk read failed. [ 559.517811][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517827][ T7825] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.517851][ T7825] Dev loop6: unable to read RDB block 0 [ 559.517940][ T7825] loop6: unable to read partition table [ 559.518041][ T7825] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 560.117493][ T5799] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 560.902574][ T5799] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 560.916670][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.930258][ T5799] usb 1-1: config 0 descriptor?? [ 561.392554][ T5799] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 561.631839][ T5799] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 561.631871][ T5799] [drm] Initialized udl on minor 1 [ 562.021792][ T30] audit: type=1400 audit(1794013364.537:357): avc: denied { ioctl } for pid=7840 comm="syz.0.395" path="/dev/dri/card1" dev="devtmpfs" ino=3255 ioctlcmd=0x4010640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 562.554199][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7860 comm=syz.3.390 [ 565.159377][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.159474][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.318783][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.401'. [ 565.524357][ T7866] FAULT_INJECTION: forcing a failure. [ 565.524357][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 565.524400][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.3.401 Not tainted syzkaller #0 PREEMPT(full) [ 565.524427][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 565.524442][ T7866] Call Trace: [ 565.524465][ T7866] [ 565.524472][ T7866] dump_stack_lvl+0x100/0x190 [ 565.524509][ T7866] should_fail_ex.cold+0x5/0xa [ 565.524555][ T7866] should_failslab+0xc2/0x120 [ 565.524581][ T7866] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 565.524611][ T7866] ? find_held_lock+0x2b/0x80 [ 565.524629][ T7866] ? alloc_inode+0x183/0x250 [ 565.524645][ T7866] alloc_inode+0x183/0x250 [ 565.524660][ T7866] path_from_stashed+0x25b/0x760 [ 565.524691][ T7866] ? __pfx_create_new_namespace+0x10/0x10 [ 565.524726][ T7866] open_namespace_file+0x8f/0x130 [ 565.524752][ T7866] ? __pfx_open_namespace_file+0x10/0x10 [ 565.524774][ T7866] vfs_open_tree+0x94a/0xb60 [ 565.524793][ T7866] ? _raw_spin_unlock+0x28/0x50 [ 565.524813][ T7866] ? __pfx_vfs_open_tree+0x10/0x10 [ 565.524850][ T7866] __x64_sys_open_tree+0xbe/0x150 [ 565.524882][ T7866] do_syscall_64+0x123/0x790 [ 565.524902][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.524916][ T7866] RIP: 0033:0x7f2857b9fb19 [ 565.524929][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.524942][ T7866] RSP: 002b:00007f2858a72028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 565.524963][ T7866] RAX: ffffffffffffffda RBX: 00007f2857e25fa0 RCX: 00007f2857b9fb19 [ 565.524976][ T7866] RDX: 0000000000009902 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 565.524989][ T7866] RBP: 00007f2857c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 565.525000][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.525012][ T7866] R13: 00007f2857e26038 R14: 00007f2857e25fa0 R15: 00007ffe42690698 [ 565.525037][ T7866] [ 565.897117][ T5672] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 566.048573][ T5672] usb 4-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 566.055290][ T5672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.055330][ T5672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 566.095882][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.095905][ T5672] usb 4-1: Product: syz [ 566.095915][ T5672] usb 4-1: Manufacturer: syz [ 566.095925][ T5672] usb 4-1: SerialNumber: syz [ 566.706620][ T5799] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 566.707060][ T5799] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 566.721616][ T5672] usb 4-1: usb_control_msg returned -71 [ 566.721662][ T5672] usbtmc 4-1:1.0: can't read capabilities [ 566.721696][ T5672] usbtmc 4-1:1.0: Failed to submit iin_urb [ 566.721758][ T5672] usbtmc 4-1:1.0: probe with driver usbtmc failed with error -90 [ 566.722813][ T5672] usbtouchscreen 4-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 566.747003][ T5799] usb 1-1: USB disconnect, device number 24 [ 566.766971][ T2266] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 566.767142][ T5672] usb 4-1: USB disconnect, device number 24 [ 567.395646][ T7888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.150009][ T7902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7902 comm=syz.0.406 [ 570.630224][ T7916] affs: No valid root block on device nullb0 [ 570.819482][ T30] audit: type=1400 audit(1794013373.347:358): avc: denied { write } for pid=7890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.906869][ T5799] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 570.977812][ T7926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7926 comm=syz.6.412 [ 571.013843][ T7925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.672641][ T2266] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 571.745799][ T5799] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 571.746529][ T5799] usb 1-1: config 0 has no interfaces? [ 571.746560][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.785084][ T5799] usb 1-1: config 0 descriptor?? [ 571.886526][ T2266] usb 4-1: Using ep0 maxpacket: 32 [ 571.889487][ T2266] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 571.911125][ T2266] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 571.911162][ T2266] usb 4-1: config 155 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.911176][ T2266] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 571.919095][ T2266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.919125][ T2266] usb 4-1: Product: syz [ 571.919140][ T2266] usb 4-1: Manufacturer: syz [ 571.919154][ T2266] usb 4-1: SerialNumber: syz [ 571.981333][ T2266] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 571.981387][ T2266] imon 4-1:155.0: unable to initialize intf0, err -19 [ 572.000843][ T30] audit: type=1400 audit(1794013374.527:359): avc: denied { write } for pid=7930 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.254742][ T7940] loop6: detected capacity change from 0 to 2640 [ 573.257868][ T7940] buffer_io_error: 11 callbacks suppressed [ 573.258020][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.258482][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.258582][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.258698][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.258919][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.259269][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.259501][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.259602][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.259646][ T7940] ldm_validate_partition_table(): Disk read failed. [ 573.259728][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.259900][ T7940] Buffer I/O error on dev loop6, logical block 0, async page read [ 573.260206][ T7940] Dev loop6: unable to read RDB block 0 [ 573.261183][ T7940] loop6: unable to read partition table [ 573.262105][ T7940] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 573.712123][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.761158][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.988844][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.991567][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.247299][ T5799] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 574.417893][ T5799] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 574.419272][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.427387][ T5799] usb 7-1: config 0 descriptor?? [ 574.649062][ T5799] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 575.653588][ T5799] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 575.653621][ T5799] [drm] Initialized udl on minor 1 [ 575.662224][ T5799] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 575.662543][ T5799] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 575.664720][ T5799] usb 7-1: USB disconnect, device number 11 [ 575.665823][ T2266] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 575.806094][ T30] audit: type=1400 audit(1794013378.327:360): avc: denied { write } for pid=7936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.915222][ T5799] usb 4-1: USB disconnect, device number 25 [ 575.946278][ T2266] usb 1-1: USB disconnect, device number 25 [ 576.020432][ T30] audit: type=1400 audit(1794013378.547:361): avc: denied { write } for pid=7964 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.657485][ T7973] affs: No valid root block on device nullb0 [ 576.953528][ T2266] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 577.123371][ T5781] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 577.139378][ T2266] usb 4-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 577.156092][ T2266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.156179][ T2266] usb 4-1: Product: syz [ 577.156195][ T2266] usb 4-1: Manufacturer: syz [ 577.156211][ T2266] usb 4-1: SerialNumber: syz [ 577.246358][ T5799] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 577.378409][ T5781] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 577.411336][ T5799] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 577.414348][ T5799] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.414396][ T5799] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.414457][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.609579][ T2266] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 577.756303][ T7976] ceph: No mds server is up or the cluster is laggy [ 577.962960][ T30] audit: type=1400 audit(1794013380.487:362): avc: denied { read write } for pid=7969 comm="syz.3.420" name="lp0" dev="devtmpfs" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 577.963021][ T30] audit: type=1400 audit(1794013380.487:363): avc: denied { open } for pid=7969 comm="syz.3.420" path="/dev/usb/lp0" dev="devtmpfs" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 578.195701][ T2266] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 578.425632][ T2266] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 578.440475][ T2266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.441361][ T2266] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 578.441417][ T2266] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.473238][ T2266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 578.473690][ T2266] usb 2-1: Product: syz [ 578.474757][ T2266] usb 2-1: Manufacturer: syz [ 578.732007][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.750599][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.756250][ T5781] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 578.766677][ T7984] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 578.785755][ T2266] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 578.809028][ T2266] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 578.911927][ T5781] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 578.913024][ T5781] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.913073][ T5781] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 578.913100][ T5781] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.917966][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 578.917994][ T5781] usb 7-1: Product: syz [ 578.918010][ T5781] usb 7-1: Manufacturer: syz [ 578.940605][ T7991] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 579.024853][ T5781] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 579.043820][ T5781] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 579.223029][ C0] usblp0: nonzero write bulk status received: -71 [ 579.224815][ T5781] usb 4-1: USB disconnect, device number 26 [ 579.428622][ T8003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.869664][ T7974] usblp0: removed [ 580.061043][ T8005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8005 comm=syz.3.425 [ 580.149740][ T5781] usb 2-1: USB disconnect, device number 22 [ 580.164603][ T5781] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 580.165471][ T5781] garmin_gps 2-1:1.0: device disconnected [ 580.298168][ T5646] usb 1-1: USB disconnect, device number 26 [ 580.511631][ T2266] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 580.716745][ T2266] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 580.925789][ T2266] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 580.925825][ T2266] usb 6-1: config 1 has no interface number 0 [ 581.011744][ T2266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.011779][ T2266] usb 6-1: Product: syz [ 581.011795][ T2266] usb 6-1: Manufacturer: syz [ 581.011811][ T2266] usb 6-1: SerialNumber: syz [ 581.049878][ T2266] usb 6-1: 3:0 : does not exist [ 581.049909][ T2266] usb 6-1: 3:0 : does not exist [ 582.366723][ T5799] usb 7-1: USB disconnect, device number 12 [ 582.409308][ T5799] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 582.409943][ T5799] garmin_gps 7-1:1.0: device disconnected [ 582.447855][ T8020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8020 comm=syz.0.429 [ 582.507712][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.6.431'. [ 582.508453][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.6.431'. [ 584.444956][ T30] audit: type=1400 audit(1794013386.967:364): avc: denied { read } for pid=8038 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 584.779059][ T8045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.224802][ T8048] affs: No valid root block on device nullb0 [ 585.883095][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.438'. [ 586.516272][ T5781] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 586.523427][ T2266] usb 6-1: USB disconnect, device number 16 [ 586.588286][ T5672] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 586.588945][ T7872] udevd[7872]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.667142][ T5781] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 586.679024][ T5781] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.679058][ T5781] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.679088][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.737005][ T5672] usb 7-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 586.740175][ T5672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.740207][ T5672] usb 7-1: Product: syz [ 586.740247][ T5672] usb 7-1: Manufacturer: syz [ 586.740263][ T5672] usb 7-1: SerialNumber: syz [ 586.930741][ T2266] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 587.135688][ T2266] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 587.141128][ T2266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.167551][ T2266] usb 6-1: config 0 descriptor?? [ 587.477865][ T5672] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 587.896194][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.902089][ T2266] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 587.902467][ T2266] [drm:udl_init] *ERROR* Selecting channel failed [ 587.916584][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.943369][ T2266] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 587.943394][ T2266] [drm] Initialized udl on minor 1 [ 587.953033][ T2266] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 587.953353][ T2266] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 587.954762][ T5672] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 587.955870][ T5672] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 587.956018][ T5672] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 588.560877][ T2266] usb 6-1: USB disconnect, device number 17 [ 589.937275][ T5860] usb 7-1: USB disconnect, device number 13 [ 589.941726][ T5860] usblp0: removed [ 590.189237][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.5.446'. [ 590.263034][ T8083] FAULT_INJECTION: forcing a failure. [ 590.263034][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 590.263078][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.446 Not tainted syzkaller #0 PREEMPT(full) [ 590.263107][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 590.263124][ T8083] Call Trace: [ 590.263133][ T8083] [ 590.263152][ T8083] dump_stack_lvl+0x100/0x190 [ 590.263206][ T8083] should_fail_ex.cold+0x5/0xa [ 590.263249][ T8083] should_failslab+0xc2/0x120 [ 590.263281][ T8083] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 590.263318][ T8083] ? find_held_lock+0x2b/0x80 [ 590.263345][ T8083] ? alloc_inode+0x183/0x250 [ 590.263374][ T8083] alloc_inode+0x183/0x250 [ 590.263398][ T8083] path_from_stashed+0x25b/0x760 [ 590.263433][ T8083] ? __pfx_create_new_namespace+0x10/0x10 [ 590.263474][ T8083] open_namespace_file+0x8f/0x130 [ 590.263510][ T8083] ? __pfx_open_namespace_file+0x10/0x10 [ 590.263553][ T8083] vfs_open_tree+0x94a/0xb60 [ 590.263587][ T8083] ? _raw_spin_unlock+0x28/0x50 [ 590.263615][ T8083] ? __pfx_vfs_open_tree+0x10/0x10 [ 590.263661][ T8083] __x64_sys_open_tree+0xbe/0x150 [ 590.263702][ T8083] do_syscall_64+0x123/0x790 [ 590.263757][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.263785][ T8083] RIP: 0033:0x7f3c4219fb19 [ 590.263809][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.263834][ T8083] RSP: 002b:00007f3c403f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 590.263867][ T8083] RAX: ffffffffffffffda RBX: 00007f3c42425fa0 RCX: 00007f3c4219fb19 [ 590.263885][ T8083] RDX: 0000000000009902 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 590.263902][ T8083] RBP: 00007f3c42237b70 R08: 0000000000000000 R09: 0000000000000000 [ 590.263919][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.263935][ T8083] R13: 00007f3c42426038 R14: 00007f3c42425fa0 R15: 00007ffe79673bd8 [ 590.263970][ T8083] [ 590.343810][ T5672] usb 2-1: USB disconnect, device number 23 [ 590.567896][ T5860] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 590.694373][ T8090] loop6: detected capacity change from 0 to 2640 [ 590.697470][ T8090] buffer_io_error: 11 callbacks suppressed [ 590.697526][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.697747][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.697957][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698087][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698198][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698415][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698568][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698708][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698759][ T8090] ldm_validate_partition_table(): Disk read failed. [ 590.698903][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.698996][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.699172][ T8090] Dev loop6: unable to read RDB block 0 [ 590.699919][ T8090] loop6: unable to read partition table [ 590.700881][ T8090] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 591.420748][ T5860] usb 6-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 591.658659][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.658703][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 592.147078][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.147116][ T5860] usb 6-1: Product: syz [ 592.147134][ T5860] usb 6-1: Manufacturer: syz [ 592.147152][ T5860] usb 6-1: SerialNumber: syz [ 593.277536][ T5860] usb 6-1: usb_control_msg returned -71 [ 593.277595][ T5860] usbtmc 6-1:1.0: can't read capabilities [ 593.277637][ T5860] usbtmc 6-1:1.0: Failed to submit iin_urb [ 593.277701][ T5860] usbtmc 6-1:1.0: probe with driver usbtmc failed with error -90 [ 593.279372][ T5860] usbtouchscreen 6-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 593.289392][ T5860] usb 6-1: USB disconnect, device number 18 [ 593.357204][ T4987] ldm_validate_partition_table(): Disk read failed. [ 593.357271][ T4987] Dev loop6: unable to read RDB block 0 [ 593.357402][ T4987] loop6: unable to read partition table [ 594.831260][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 595.692601][ T8106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8106 comm=syz.3.444 [ 597.543284][ T8126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8126 comm=syz.5.456 [ 597.558031][ T990] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 597.755088][ T2266] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 597.808887][ T990] usb 2-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 597.832284][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.832380][ T990] usb 2-1: Product: syz [ 597.832447][ T990] usb 2-1: Manufacturer: syz [ 597.832519][ T990] usb 2-1: SerialNumber: syz [ 598.346208][ T2266] usb 4-1: Using ep0 maxpacket: 32 [ 598.346898][ T2266] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 598.347821][ T2266] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 598.347865][ T2266] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 598.347892][ T2266] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.347923][ T2266] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 598.352662][ T2266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.352689][ T2266] usb 4-1: Product: syz [ 598.352706][ T2266] usb 4-1: Manufacturer: syz [ 598.352721][ T2266] usb 4-1: SerialNumber: syz [ 598.389416][ T2266] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 598.389501][ T2266] imon 4-1:155.0: unable to initialize intf0, err -19 [ 598.597038][ T30] audit: type=1400 audit(1794013401.117:365): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.686482][ T8137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8137 comm=syz.5.457 [ 598.926503][ T990] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 600.340971][ T30] audit: type=1400 audit(1794013402.867:366): avc: denied { write } for pid=8144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.498778][ T5781] usb 4-1: USB disconnect, device number 27 [ 600.699938][ T5646] usb 2-1: USB disconnect, device number 24 [ 600.856242][ T2266] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 600.871715][ T5646] usblp0: removed [ 601.177311][ T2266] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 601.217242][ T2266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.481991][ T2266] usb 1-1: config 0 descriptor?? [ 601.532033][ T8160] FAULT_INJECTION: forcing a failure. [ 601.532033][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 601.532111][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.5.459 Not tainted syzkaller #0 PREEMPT(full) [ 601.532140][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 601.532160][ T8160] Call Trace: [ 601.532169][ T8160] [ 601.532179][ T8160] dump_stack_lvl+0x100/0x190 [ 601.532223][ T8160] should_fail_ex.cold+0x5/0xa [ 601.532261][ T8160] should_failslab+0xc2/0x120 [ 601.532289][ T8160] kmem_cache_alloc_noprof+0x92/0x6a0 [ 601.532324][ T8160] ? pidfs_register_pid_gfp+0x93/0x1f0 [ 601.532359][ T8160] pidfs_register_pid_gfp+0x93/0x1f0 [ 601.532388][ T8160] __pidfs_register_pids+0x76/0xd0 [ 601.532419][ T8160] unix_stream_connect+0x445/0x1b60 [ 601.532447][ T8160] ? irqentry_exit+0x202/0xab0 [ 601.532481][ T8160] ? __pfx_unix_stream_connect+0x10/0x10 [ 601.532509][ T8160] ? __pfx_unix_stream_connect+0x10/0x10 [ 601.532538][ T8160] p9_fd_create_unix+0x252/0x300 [ 601.532563][ T8160] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 601.532598][ T8160] ? lockdep_init_map_type+0x5c/0x250 [ 601.532635][ T8160] p9_client_create+0x563/0xd40 [ 601.532686][ T8160] ? __pfx_p9_client_create+0x10/0x10 [ 601.532725][ T8160] ? lockdep_init_map_type+0x5c/0x250 [ 601.532758][ T8160] ? __raw_spin_lock_init+0x3a/0x110 [ 601.532785][ T8160] v9fs_session_init+0x3c/0xdd0 [ 601.532814][ T8160] ? v9fs_get_tree+0x9c/0xb60 [ 601.532848][ T8160] v9fs_get_tree+0xb8/0xb60 [ 601.532879][ T8160] ? rcu_is_watching+0x13/0xc0 [ 601.532904][ T8160] ? __pfx_v9fs_get_tree+0x10/0x10 [ 601.532933][ T8160] ? bpf_lsm_capable+0x9/0x10 [ 601.532957][ T8160] ? security_capable+0x80/0x260 [ 601.532994][ T8160] vfs_get_tree+0x92/0x320 [ 601.533027][ T8160] path_mount+0x7d0/0x2850 [ 601.533063][ T8160] ? __pfx_path_mount+0x10/0x10 [ 601.533092][ T8160] ? lockdep_hardirqs_on+0x7d/0x110 [ 601.533119][ T8160] ? putname+0xb1/0x110 [ 601.533146][ T8160] ? kmem_cache_free+0x127/0x6c0 [ 601.533183][ T8160] ? __x64_sys_mount+0x293/0x310 [ 601.533213][ T8160] __x64_sys_mount+0x293/0x310 [ 601.533245][ T8160] ? __pfx___x64_sys_mount+0x10/0x10 [ 601.533284][ T8160] do_syscall_64+0x123/0x790 [ 601.533312][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.533335][ T8160] RIP: 0033:0x7f3c4219fb19 [ 601.533357][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.533377][ T8160] RSP: 002b:00007f3c403d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.533401][ T8160] RAX: ffffffffffffffda RBX: 00007f3c42426090 RCX: 00007f3c4219fb19 [ 601.533416][ T8160] RDX: 0000200000002500 RSI: 00002000000024c0 RDI: 0000200000002480 [ 601.533431][ T8160] RBP: 00007f3c42237b70 R08: 0000200000002540 R09: 0000000000000000 [ 601.533445][ T8160] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 601.533460][ T8160] R13: 00007f3c42426128 R14: 00007f3c42426090 R15: 00007ffe79673bd8 [ 601.533490][ T8160] [ 601.851310][ T8160] 9pnet_fd: p9_fd_create_unix (8160): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 602.091361][ T2266] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 602.321596][ T2266] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 602.321619][ T2266] [drm] Initialized udl on minor 1 [ 604.317045][ T8186] loop6: detected capacity change from 0 to 2640 [ 604.321752][ T8186] buffer_io_error: 27 callbacks suppressed [ 604.321781][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.321906][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.322021][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.322128][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.351307][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.375768][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.384274][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.384449][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.384494][ T8186] ldm_validate_partition_table(): Disk read failed. [ 604.392788][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.392915][ T8186] Buffer I/O error on dev loop6, logical block 0, async page read [ 604.393141][ T8186] Dev loop6: unable to read RDB block 0 [ 604.394139][ T8186] loop6: unable to read partition table [ 604.412068][ T8186] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 604.617291][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.464'. [ 605.120701][ T8183] FAULT_INJECTION: forcing a failure. [ 605.120701][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 605.120772][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) [ 605.120796][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 605.120810][ T8183] Call Trace: [ 605.120816][ T8183] [ 605.120824][ T8183] dump_stack_lvl+0x100/0x190 [ 605.120869][ T8183] should_fail_ex.cold+0x5/0xa [ 605.120911][ T8183] should_failslab+0xc2/0x120 [ 605.120936][ T8183] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 605.120968][ T8183] ? find_held_lock+0x2b/0x80 [ 605.120989][ T8183] ? alloc_inode+0x183/0x250 [ 605.121012][ T8183] alloc_inode+0x183/0x250 [ 605.121029][ T8183] path_from_stashed+0x25b/0x760 [ 605.121057][ T8183] ? __pfx_create_new_namespace+0x10/0x10 [ 605.121089][ T8183] open_namespace_file+0x8f/0x130 [ 605.121115][ T8183] ? __pfx_open_namespace_file+0x10/0x10 [ 605.121144][ T8183] vfs_open_tree+0x94a/0xb60 [ 605.121169][ T8183] ? _raw_spin_unlock+0x28/0x50 [ 605.121191][ T8183] ? __pfx_vfs_open_tree+0x10/0x10 [ 605.121225][ T8183] __x64_sys_open_tree+0xbe/0x150 [ 605.121254][ T8183] do_syscall_64+0x123/0x790 [ 605.121281][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.121301][ T8183] RIP: 0033:0x7fc412b9fb19 [ 605.121334][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.121355][ T8183] RSP: 002b:00007fc413b38028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 605.121379][ T8183] RAX: ffffffffffffffda RBX: 00007fc412e25fa0 RCX: 00007fc412b9fb19 [ 605.121394][ T8183] RDX: 0000000000009902 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 605.121406][ T8183] RBP: 00007fc412c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 605.121418][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.121429][ T8183] R13: 00007fc412e26038 R14: 00007fc412e25fa0 R15: 00007fffc841e298 [ 605.121457][ T8183] [ 605.543795][ T30] audit: type=1400 audit(1794013408.067:367): avc: denied { write } for pid=8152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.765104][ T30] audit: type=1400 audit(1794013408.287:368): avc: denied { write } for pid=8192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.047723][ T5781] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 606.198442][ T5781] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 606.199430][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.210263][ T5781] usb 7-1: config 0 descriptor?? [ 607.357718][ T2266] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 607.358068][ T2266] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 607.362792][ T5759] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.363321][ T5759] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.363496][ T5759] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 607.363609][ T5781] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 607.364005][ T5781] [drm:udl_init] *ERROR* Selecting channel failed [ 607.427831][ T5799] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 607.444372][ T2266] usb 1-1: USB disconnect, device number 27 [ 607.467074][ T5781] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 607.467096][ T5781] [drm] Initialized udl on minor 2 [ 607.500229][ T5781] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.500471][ T5781] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 607.502984][ T5782] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.546459][ T5781] usb 7-1: USB disconnect, device number 14 [ 607.546924][ T5782] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.547051][ T5782] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 607.616927][ T5799] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 607.617876][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.657110][ T5799] usb 6-1: config 0 descriptor?? [ 608.080683][ T8213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.482337][ T5799] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 608.485733][ T5799] [drm:udl_init] *ERROR* Selecting channel failed [ 608.631654][ T5799] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 608.631687][ T5799] [drm] Initialized udl on minor 1 [ 608.657177][ T5799] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 608.657541][ T5799] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 608.689145][ T5799] usb 6-1: USB disconnect, device number 19 [ 608.699824][ T2266] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 609.447567][ T8222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.726677][ T5781] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 609.881915][ T5781] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.887432][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.985761][ T5781] usb 7-1: config 0 descriptor?? [ 610.741923][ T5781] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 610.743458][ T5781] [drm:udl_init] *ERROR* Selecting channel failed [ 610.941205][ T5781] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 610.941899][ T5781] [drm] Initialized udl on minor 1 [ 611.016481][ T5646] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 611.107577][ T5781] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 611.170289][ T5781] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 611.171587][ T5646] usb 2-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 611.245475][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.245669][ T5646] usb 2-1: Product: syz [ 611.245698][ T5646] usb 2-1: Manufacturer: syz [ 611.245877][ T5646] usb 2-1: SerialNumber: syz [ 611.430089][ T5781] usb 7-1: USB disconnect, device number 15 [ 611.624811][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 611.661203][ T8233] FAULT_INJECTION: forcing a failure. [ 611.661203][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 611.661260][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.3.478 Not tainted syzkaller #0 PREEMPT(full) [ 611.661285][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 611.661297][ T8233] Call Trace: [ 611.661321][ T8233] [ 611.661329][ T8233] dump_stack_lvl+0x100/0x190 [ 611.661379][ T8233] should_fail_ex.cold+0x5/0xa [ 611.661410][ T8233] should_failslab+0xc2/0x120 [ 611.661435][ T8233] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 611.661470][ T8233] ? find_held_lock+0x2b/0x80 [ 611.661495][ T8233] ? alloc_inode+0x183/0x250 [ 611.661520][ T8233] alloc_inode+0x183/0x250 [ 611.661542][ T8233] path_from_stashed+0x25b/0x760 [ 611.661575][ T8233] ? __pfx_create_new_namespace+0x10/0x10 [ 611.661610][ T8233] open_namespace_file+0x8f/0x130 [ 611.661641][ T8233] ? __pfx_open_namespace_file+0x10/0x10 [ 611.661684][ T8233] vfs_open_tree+0x94a/0xb60 [ 611.661715][ T8233] ? _raw_spin_unlock+0x28/0x50 [ 611.661740][ T8233] ? __pfx_vfs_open_tree+0x10/0x10 [ 611.661781][ T8233] __x64_sys_open_tree+0xbe/0x150 [ 611.661814][ T8233] do_syscall_64+0x123/0x790 [ 611.661843][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.661866][ T8233] RIP: 0033:0x7f2857b9fb19 [ 611.661884][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.661904][ T8233] RSP: 002b:00007f2858a72028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 611.661924][ T8233] RAX: ffffffffffffffda RBX: 00007f2857e25fa0 RCX: 00007f2857b9fb19 [ 611.661936][ T8233] RDX: 0000000000009902 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 611.661947][ T8233] RBP: 00007f2857c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 611.661958][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.661968][ T8233] R13: 00007f2857e26038 R14: 00007f2857e25fa0 R15: 00007ffe42690698 [ 611.661992][ T8233] [ 611.797544][ T8238] affs: No valid root block on device nullb0 [ 611.869076][ T8228] jffs2: notice: (8228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 612.291013][ T5646] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 612.316724][ T5646] usb 2-1: USB disconnect, device number 25 [ 612.340682][ T5646] usblp0: removed [ 612.536797][ T5759] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 612.696936][ T5759] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 612.697433][ T5759] usb 6-1: config 0 has no interfaces? [ 612.697464][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.722101][ T5759] usb 6-1: config 0 descriptor?? [ 612.762165][ T8255] affs: No valid root block on device nullb0 [ 612.908273][ T30] audit: type=1400 audit(1794013415.437:369): avc: denied { write } for pid=8244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.941361][ T5646] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 613.036364][ T5759] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 613.078240][ T30] audit: type=1400 audit(1794013415.607:370): avc: denied { write } for pid=8259 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.115696][ T5646] usb 7-1: unable to get BOS descriptor or descriptor too short [ 613.116240][ T5646] usb 7-1: not running at top speed; connect to a high speed hub [ 613.116271][ T5646] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 613.149680][ T5646] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 613.149734][ T5646] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 613.149757][ T5646] usb 7-1: config 14 has no interface number 0 [ 613.149776][ T5646] usb 7-1: config 14 has no interface number 1 [ 613.149830][ T5646] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 613.149853][ T5646] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 613.149876][ T5646] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 613.149902][ T5646] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 613.149929][ T5646] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 613.149957][ T5646] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 613.149980][ T5646] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.150006][ T5646] usb 7-1: config 14 interface 57 has no altsetting 0 [ 613.150021][ T5646] usb 7-1: config 14 interface 228 has no altsetting 0 [ 613.152183][ T5646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.152213][ T5646] usb 7-1: Product: syz [ 613.152231][ T5646] usb 7-1: Manufacturer: syz [ 613.152246][ T5646] usb 7-1: SerialNumber: syz [ 613.231033][ T5759] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 613.234250][ T5759] usb 1-1: config 0 has no interfaces? [ 613.234282][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.271877][ T5759] usb 1-1: config 0 descriptor?? [ 613.926907][ T5646] legousbtower 7-1:14.57: interrupt endpoints not found [ 614.329169][ T5646] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 614.435550][ T5646] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 614.970626][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.970924][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.353999][ T30] audit: type=1400 audit(1794013417.877:371): avc: denied { write } for pid=8250 comm="syz.6.482" name="legousbtower0" dev="devtmpfs" ino=3362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 615.395814][ T8295] usb 7-1: LEGO USB Tower reset control request failed [ 615.407954][ T5782] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 615.629711][ T8285] jffs2: notice: (8285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 615.664258][ T5782] usb 4-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 615.829654][ T5759] usb 7-1: USB disconnect, device number 16 [ 615.849655][ T5759] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 615.928494][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.928597][ T5782] usb 4-1: Product: syz [ 615.928614][ T5782] usb 4-1: Manufacturer: syz [ 615.928629][ T5782] usb 4-1: SerialNumber: syz [ 616.033418][ T2266] usb 6-1: USB disconnect, device number 20 [ 616.034749][ T30] audit: type=1400 audit(1794013418.557:372): avc: denied { write } for pid=8268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.397403][ T5782] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 616.404032][ T30] audit: type=1400 audit(1794013418.927:373): avc: denied { write } for pid=8299 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.962749][ T8311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.407064][ T8308] affs: No valid root block on device nullb0 [ 617.593649][ T2266] usb 1-1: USB disconnect, device number 28 [ 617.646584][ T5759] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 617.755071][ T8317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8317 comm=syz.0.491 [ 617.795892][ T8318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.803559][ T5759] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 617.814369][ T5759] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.814416][ T5759] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 617.814454][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.876364][ T5646] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 618.635226][ T5782] usb 4-1: USB disconnect, device number 28 [ 618.773679][ T8290] usblp0: removed [ 618.782877][ T5646] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 618.802043][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.818593][ T5646] usb 2-1: config 0 descriptor?? [ 619.101753][ T5646] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 619.102213][ T5646] [drm:udl_init] *ERROR* Selecting channel failed [ 619.152738][ T5782] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 619.169000][ T5646] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 619.169024][ T5646] [drm] Initialized udl on minor 1 [ 619.172196][ T5646] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 619.172412][ T5646] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 619.212785][ T5646] usb 2-1: USB disconnect, device number 26 [ 619.226921][ T5781] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 619.227812][ T5781] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 619.328131][ T5782] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 619.332400][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.357802][ T5782] usb 4-1: config 0 descriptor?? [ 619.572394][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.593201][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.835274][ T5782] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 619.844604][ T5782] [drm:udl_init] *ERROR* Selecting channel failed [ 619.890072][ T5782] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 619.890104][ T5782] [drm] Initialized udl on minor 1 [ 619.891182][ T5782] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 619.891517][ T5782] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 619.896076][ T5782] usb 4-1: USB disconnect, device number 29 [ 619.931284][ T5781] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 619.931648][ T5781] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 619.931833][ T5781] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 620.160348][ T8329] loop6: detected capacity change from 0 to 2640 [ 620.163715][ T8329] buffer_io_error: 11 callbacks suppressed [ 620.163745][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.163921][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164053][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164207][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164357][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164564][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164791][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164862][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.164886][ T8329] ldm_validate_partition_table(): Disk read failed. [ 620.164967][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.165069][ T8329] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.165280][ T8329] Dev loop6: unable to read RDB block 0 [ 620.166438][ T8329] loop6: unable to read partition table [ 620.167602][ T8329] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 621.155464][ T8331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8331 comm=syz.0.495 [ 621.319952][ T2266] usb 7-1: USB disconnect, device number 17 [ 622.590416][ T8347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.150923][ T8349] loop6: detected capacity change from 0 to 2640 [ 623.164271][ T8349] ldm_validate_partition_table(): Disk read failed. [ 623.164621][ T8349] Dev loop6: unable to read RDB block 0 [ 623.167180][ T8349] loop6: unable to read partition table [ 623.168088][ T8349] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 625.138147][ T8368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.614875][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.614939][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.836489][ T8353] jffs2: notice: (8353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 625.843911][ T8371] 9pnet_fd: p9_fd_create_unix (8371): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 625.925668][ T8357] FAULT_INJECTION: forcing a failure. [ 625.925668][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 625.925694][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.5.501 Not tainted syzkaller #0 PREEMPT(full) [ 625.925709][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 625.925717][ T8357] Call Trace: [ 625.925721][ T8357] [ 625.925726][ T8357] dump_stack_lvl+0x100/0x190 [ 625.925757][ T8357] should_fail_ex.cold+0x5/0xa [ 625.925778][ T8357] should_failslab+0xc2/0x120 [ 625.925799][ T8357] __kmalloc_noprof+0xfc/0x840 [ 625.925831][ T8357] ? hash_netportnet6_add+0x28ec/0x3110 [ 625.925862][ T8357] hash_netportnet6_add+0x28ec/0x3110 [ 625.925889][ T8357] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 625.925903][ T8357] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 625.925921][ T8357] ? rcu_is_watching+0x13/0xc0 [ 625.925939][ T8357] hash_netportnet6_uadt+0xd60/0x12a0 [ 625.925954][ T8357] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 625.925971][ T8357] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 625.925987][ T8357] ? lock_acquire+0x1d1/0x380 [ 625.926011][ T8357] call_ad.isra.0+0x171/0x950 [ 625.926026][ T8357] ? __pfx_hash_netportnet6_resize+0x10/0x10 [ 625.926043][ T8357] ? __pfx_call_ad.isra.0+0x10/0x10 [ 625.926057][ T8357] ? __pfx___nla_validate_parse+0x10/0x10 [ 625.926081][ T8357] ? __nla_parse+0x40/0x60 [ 625.926096][ T8357] ip_set_ad.isra.0+0x3f1/0x8b0 [ 625.926124][ T8357] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 625.926147][ T8357] ? trace_contention_end+0x126/0x160 [ 625.926184][ T8357] ? find_held_lock+0x2b/0x80 [ 625.926201][ T8357] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 625.926220][ T8357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 625.926233][ T8357] ? __lock_acquire+0x5c0/0x1f40 [ 625.926283][ T8357] ? avc_has_perm_noaudit+0x145/0x470 [ 625.926305][ T8357] netlink_rcv_skb+0x159/0x420 [ 625.926323][ T8357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 625.926337][ T8357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.926359][ T8357] ? ns_capable+0xcd/0xf0 [ 625.926376][ T8357] nfnetlink_rcv+0x1b3/0x440 [ 625.926388][ T8357] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 625.926400][ T8357] ? netlink_deliver_tap+0x1ae/0xb50 [ 625.926418][ T8357] netlink_unicast+0x668/0x950 [ 625.926436][ T8357] ? __pfx_netlink_unicast+0x10/0x10 [ 625.926456][ T8357] netlink_sendmsg+0x9ac/0x10c0 [ 625.926475][ T8357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.926494][ T8357] ? selinux_socket_sendmsg+0x198/0x2f0 [ 625.926515][ T8357] ? ____sys_sendmsg+0xa99/0xc30 [ 625.926536][ T8357] ____sys_sendmsg+0xa99/0xc30 [ 625.926553][ T8357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.926571][ T8357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.926593][ T8357] ? plist_check_list+0x1b8/0x280 [ 625.926613][ T8357] ? plist_del+0x308/0x510 [ 625.926626][ T8357] ___sys_sendmsg+0x190/0x1e0 [ 625.926648][ T8357] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.926668][ T8357] ? futex_wake+0x220/0x5e0 [ 625.926692][ T8357] ? find_held_lock+0x2b/0x80 [ 625.926714][ T8357] __sys_sendmsg+0x160/0x210 [ 625.926729][ T8357] ? __pfx___sys_sendmsg+0x10/0x10 [ 625.926754][ T8357] do_syscall_64+0x123/0x790 [ 625.926770][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.926783][ T8357] RIP: 0033:0x7f3c4219fb19 [ 625.926794][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.926806][ T8357] RSP: 002b:00007f3c403f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.926819][ T8357] RAX: ffffffffffffffda RBX: 00007f3c42425fa0 RCX: 00007f3c4219fb19 [ 625.926827][ T8357] RDX: 0000000020000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 625.926834][ T8357] RBP: 00007f3c42237b70 R08: 0000000000000000 R09: 0000000000000000 [ 625.926842][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.926849][ T8357] R13: 00007f3c42426038 R14: 00007f3c42425fa0 R15: 00007ffe79673bd8 [ 625.926863][ T8357] [ 628.979910][ T8394] affs: No valid root block on device nullb0 [ 629.239344][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 630.216252][ T5646] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 630.867958][ T5646] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 630.913011][ T5646] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.913059][ T5646] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.913101][ T5646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.926825][ T5782] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 631.107550][ T5782] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 631.108389][ T5782] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 631.108423][ T5782] usb 2-1: config 1 has no interface number 0 [ 631.146872][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.146909][ T5782] usb 2-1: Product: syz [ 631.146925][ T5782] usb 2-1: Manufacturer: syz [ 631.146941][ T5782] usb 2-1: SerialNumber: syz [ 631.195538][ T5782] usb 2-1: 3:0 : does not exist [ 631.195569][ T5782] usb 2-1: 3:0 : does not exist [ 631.968716][ T8411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.464347][ T5672] usb 2-1: USB disconnect, device number 27 [ 632.491508][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.491897][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.200168][ T5782] usb 7-1: USB disconnect, device number 18 [ 634.046362][ T8424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.519'. [ 634.990601][ T8429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.390021][ T5782] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 635.540306][ T5782] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 635.541654][ T5782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.545791][ T5782] usb 7-1: config 0 descriptor?? [ 635.718849][ T8436] affs: No valid root block on device nullb0 [ 635.869616][ T5759] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 635.978033][ T990] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 636.005303][ T5782] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 636.005673][ T5782] [drm:udl_init] *ERROR* Selecting channel failed [ 636.030070][ T5759] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 636.033085][ T5782] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 636.033112][ T5782] [drm] Initialized udl on minor 1 [ 636.035865][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.042379][ T5759] usb 1-1: config 0 descriptor?? [ 636.074204][ T5782] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 636.074565][ T5782] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 636.094955][ T5782] usb 7-1: USB disconnect, device number 19 [ 636.108243][ T5646] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 636.148397][ T990] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 636.149272][ T990] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.149318][ T990] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.149359][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.260935][ T5759] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 636.364322][ T8442] 9pnet_fd: p9_fd_create_unix (8442): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 636.386313][ T5672] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 636.482625][ T5759] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 636.482660][ T5759] [drm] Initialized udl on minor 2 [ 636.539450][ T5672] usb 4-1: unable to get BOS descriptor or descriptor too short [ 636.539500][ T5672] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 636.540302][ T5672] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 636.540334][ T5672] usb 4-1: config 142 has no interface number 0 [ 636.540356][ T5672] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 636.540374][ T5672] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 636.540398][ T5672] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 636.540413][ T5672] usb 4-1: config 142 interface 251 has no altsetting 0 [ 636.543202][ T5672] usb 4-1: string descriptor 0 read error: -22 [ 636.543303][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.545584][ T8438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 636.545680][ T8438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 636.552933][ T5672] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 636.556798][ T5672] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 636.669149][ T5759] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 636.673615][ T5759] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 636.683104][ T5759] usb 1-1: USB disconnect, device number 29 [ 636.684523][ T5860] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 637.991214][ C0] usb 4-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 637.991258][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 637.992310][ C0] usb 4-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 638.086749][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.100159][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.224590][ T8459] affs: No valid root block on device nullb0 [ 638.451276][ T5782] usb 4-1: USB disconnect, device number 30 [ 639.303185][ T8464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 639.326766][ T990] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 639.973294][ T5782] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 639.973818][ T5782] cypress_m8 4-1:142.251: device disconnected [ 640.026893][ T990] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 640.027769][ T990] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.027812][ T990] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 640.027857][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.100264][ T5672] usb 6-1: USB disconnect, device number 21 [ 641.220380][ T8474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.166790][ T8479] 9pnet_fd: p9_fd_create_unix (8479): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 642.280983][ T5781] usb 7-1: USB disconnect, device number 20 [ 642.436448][ T5672] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 642.598857][ T5672] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 642.633283][ T5672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.732498][ T5672] usb 6-1: config 0 descriptor?? [ 643.750111][ T5672] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 643.752968][ T5672] [drm:udl_init] *ERROR* Selecting channel failed [ 643.805892][ T5672] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 643.805926][ T5672] [drm] Initialized udl on minor 1 [ 643.823752][ T5672] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 643.824123][ T5672] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 643.847873][ T5759] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 643.848447][ T5759] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 643.848628][ T5759] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 643.850692][ T5672] usb 6-1: USB disconnect, device number 22 [ 645.112748][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.537'. [ 645.542070][ T8501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.626322][ T5781] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 645.798223][ T5781] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 645.801834][ T5781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 645.801910][ T5781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 645.811521][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.811549][ T5781] usb 1-1: Product: syz [ 645.811563][ T5781] usb 1-1: Manufacturer: syz [ 645.811577][ T5781] usb 1-1: SerialNumber: syz [ 647.031336][ T5781] usb 1-1: usb_control_msg returned -71 [ 647.031385][ T5781] usbtmc 1-1:1.0: can't read capabilities [ 647.031424][ T5781] usbtmc 1-1:1.0: Failed to submit iin_urb [ 647.031488][ T5781] usbtmc 1-1:1.0: probe with driver usbtmc failed with error -90 [ 647.032641][ T5781] usbtouchscreen 1-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 647.054221][ T5781] usb 1-1: USB disconnect, device number 30 [ 647.236435][ T5672] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 647.410121][ T5672] usb 6-1: unable to get BOS descriptor or descriptor too short [ 647.410604][ T5672] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 647.461770][ T5672] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 647.462194][ T5672] usb 6-1: config 142 has no interface number 0 [ 647.462868][ T5672] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 647.463154][ T5672] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 647.463254][ T5672] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 647.463470][ T5672] usb 6-1: config 142 interface 251 has no altsetting 0 [ 647.604715][ T5672] usb 6-1: string descriptor 0 read error: -22 [ 647.615932][ T5672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.787098][ T8517] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 647.790561][ T8517] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 647.862786][ T5672] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 647.929441][ T5672] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 648.160192][ T8506] futex_wake_op: syz.6.539 tries to shift op by 144; fix this program [ 648.160396][ T8506] futex_wake_op: syz.6.539 tries to shift op by 144; fix this program [ 649.120475][ C0] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 649.120503][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 649.120527][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 649.147736][ T8533] affs: No valid root block on device nullb0 [ 649.522449][ T8537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.006964][ T5781] usb 6-1: USB disconnect, device number 23 [ 650.046461][ T5781] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 650.046791][ T5781] cypress_m8 6-1:142.251: device disconnected [ 650.067387][ T5759] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 650.307152][ T5759] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 650.338069][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.338134][ T5759] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.338333][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.445557][ T8529] jffs2: notice: (8529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 651.473774][ T8552] loop6: detected capacity change from 0 to 2640 [ 651.486497][ T8552] buffer_io_error: 32 callbacks suppressed [ 651.486556][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.486815][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.486926][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487005][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487129][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487289][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487454][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487562][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487604][ T8552] ldm_validate_partition_table(): Disk read failed. [ 651.487683][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.487711][ T8552] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.488129][ T8552] Dev loop6: unable to read RDB block 0 [ 651.488919][ T8552] loop6: unable to read partition table [ 651.489992][ T8552] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 652.247373][ T5646] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 652.518344][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.545430][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.617253][ T5799] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 652.631123][ T5646] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 652.632595][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.635485][ T5646] usb 2-1: config 0 descriptor?? [ 652.766946][ T5799] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 652.773442][ T5799] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 652.773476][ T5799] usb 7-1: config 1 has no interface number 0 [ 652.811341][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.811374][ T5799] usb 7-1: Product: syz [ 652.811386][ T5799] usb 7-1: Manufacturer: syz [ 652.811400][ T5799] usb 7-1: SerialNumber: syz [ 652.864048][ T5799] usb 7-1: 3:0 : does not exist [ 652.864079][ T5799] usb 7-1: 3:0 : does not exist [ 652.927492][ T5782] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 653.030338][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.554'. [ 653.077049][ T5782] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 653.078202][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.084414][ T5782] usb 4-1: config 0 descriptor?? [ 653.122879][ T5646] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 653.126454][ T5646] [drm:udl_init] *ERROR* Selecting channel failed [ 653.159858][ T5646] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 653.159880][ T5646] [drm] Initialized udl on minor 1 [ 653.168784][ T5646] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 653.169153][ T5646] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 653.191185][ T5646] usb 2-1: USB disconnect, device number 28 [ 653.192576][ T990] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 653.301822][ T5782] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 653.386275][ T5799] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 653.519931][ T5782] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 653.519966][ T5782] [drm] Initialized udl on minor 2 [ 653.541627][ T5799] usb 6-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 653.542540][ T5799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.542561][ T5799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 653.567971][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.568005][ T5799] usb 6-1: Product: syz [ 653.568021][ T5799] usb 6-1: Manufacturer: syz [ 653.568036][ T5799] usb 6-1: SerialNumber: syz [ 653.691458][ T5759] usb 1-1: USB disconnect, device number 31 [ 653.713763][ T5782] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 653.714097][ T5782] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 653.731487][ T5782] usb 4-1: USB disconnect, device number 31 [ 653.732910][ T5646] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 653.733235][ T5646] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 653.733431][ T5646] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 653.965805][ T8573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8573 comm=syz.0.555 [ 654.221991][ T5799] usb 6-1: usb_control_msg returned -71 [ 654.222040][ T5799] usbtmc 6-1:1.0: can't read capabilities [ 654.222097][ T5799] usbtmc 6-1:1.0: Failed to submit iin_urb [ 654.222243][ T5799] usbtmc 6-1:1.0: probe with driver usbtmc failed with error -90 [ 654.234768][ T5799] usbtouchscreen 6-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 654.818063][ T5799] usb 6-1: USB disconnect, device number 24 [ 655.020645][ T5646] usb 7-1: USB disconnect, device number 21 [ 656.742127][ T30] audit: type=1400 audit(1794013459.257:374): avc: denied { write } for pid=8574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.888540][ T8611] futex_wake_op: syz.3.559 tries to shift op by 144; fix this program [ 656.888701][ T8611] futex_wake_op: syz.3.559 tries to shift op by 144; fix this program [ 657.571757][ T8614] 9pnet_fd: p9_fd_create_unix (8614): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 657.720270][ T30] audit: type=1400 audit(1794013460.237:375): avc: denied { write } for pid=8615 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.058806][ T990] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 658.209922][ T8629] affs: No valid root block on device nullb0 [ 658.217205][ T990] usb 1-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 658.223700][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.223733][ T990] usb 1-1: Product: syz [ 658.223749][ T990] usb 1-1: Manufacturer: syz [ 658.223766][ T990] usb 1-1: SerialNumber: syz [ 658.468194][ T5672] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 658.560181][ T8631] jffs2: notice: (8631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 658.868163][ T5672] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 658.872980][ T5672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.873033][ T5672] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 658.873084][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.956741][ T5782] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 659.050758][ T990] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 659.110993][ T5782] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 659.113493][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.139349][ T5782] usb 6-1: config 0 descriptor?? [ 659.160330][ T30] audit: type=1400 audit(1794013461.687:376): avc: denied { write } for pid=8622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.372936][ T30] audit: type=1400 audit(1794013461.897:377): avc: denied { write } for pid=8643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.603648][ T5782] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 659.604013][ T5782] [drm:udl_init] *ERROR* Selecting channel failed [ 659.631366][ T5782] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 659.631397][ T5782] [drm] Initialized udl on minor 1 [ 659.634691][ T5782] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 659.635053][ T5782] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 659.675735][ T5782] usb 6-1: USB disconnect, device number 25 [ 659.700944][ T990] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 660.200968][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.203207][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.960402][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.569'. [ 660.982187][ T5782] usb 1-1: USB disconnect, device number 32 [ 661.066903][ T8657] FAULT_INJECTION: forcing a failure. [ 661.066903][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 661.066955][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(full) [ 661.066981][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 661.066995][ T8657] Call Trace: [ 661.067005][ T8657] [ 661.067013][ T8657] dump_stack_lvl+0x100/0x190 [ 661.067058][ T8657] should_fail_ex.cold+0x5/0xa [ 661.067092][ T8657] should_failslab+0xc2/0x120 [ 661.067117][ T8657] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 661.067152][ T8657] ? find_held_lock+0x2b/0x80 [ 661.067178][ T8657] ? alloc_inode+0x183/0x250 [ 661.067203][ T8657] alloc_inode+0x183/0x250 [ 661.067222][ T8657] path_from_stashed+0x25b/0x760 [ 661.067250][ T8657] ? __pfx_create_new_namespace+0x10/0x10 [ 661.067281][ T8657] open_namespace_file+0x8f/0x130 [ 661.067310][ T8657] ? __pfx_open_namespace_file+0x10/0x10 [ 661.067345][ T8657] vfs_open_tree+0x94a/0xb60 [ 661.067374][ T8657] ? _raw_spin_unlock+0x28/0x50 [ 661.067400][ T8657] ? __pfx_vfs_open_tree+0x10/0x10 [ 661.067438][ T8657] __x64_sys_open_tree+0xbe/0x150 [ 661.067466][ T8657] do_syscall_64+0x123/0x790 [ 661.067491][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.067513][ T8657] RIP: 0033:0x7f2857b9fb19 [ 661.067540][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.067565][ T8657] RSP: 002b:00007f2858a72028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 661.067589][ T8657] RAX: ffffffffffffffda RBX: 00007f2857e25fa0 RCX: 00007f2857b9fb19 [ 661.067603][ T8657] RDX: 0000000000009902 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 661.067615][ T8657] RBP: 00007f2857c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 661.067626][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.067638][ T8657] R13: 00007f2857e26038 R14: 00007f2857e25fa0 R15: 00007ffe42690698 [ 661.067663][ T8657] [ 661.297640][ T8647] usblp0: removed [ 661.308372][ T990] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 661.486586][ T990] usb 4-1: device descriptor read/64, error -71 [ 661.727332][ T990] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 661.876473][ T990] usb 4-1: device descriptor read/64, error -71 [ 661.992638][ T990] usb usb4-port1: attempt power cycle [ 662.003209][ T8666] 9pnet_fd: p9_fd_create_unix (8666): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 662.260332][ T5782] usb 2-1: USB disconnect, device number 29 [ 662.356251][ T990] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 662.376795][ T990] usb 4-1: device descriptor read/8, error -71 [ 662.448565][ T5799] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 662.608836][ T5799] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 662.612658][ T5799] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 662.612741][ T5799] usb 1-1: config 1 has no interface number 0 [ 662.616204][ T990] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 662.637326][ T990] usb 4-1: device descriptor read/8, error -71 [ 662.692976][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.693223][ T5799] usb 1-1: Product: syz [ 662.693260][ T5799] usb 1-1: Manufacturer: syz [ 662.693377][ T5799] usb 1-1: SerialNumber: syz [ 662.746635][ T990] usb usb4-port1: unable to enumerate USB device [ 663.145788][ T5799] usb 1-1: 3:0 : does not exist [ 663.168574][ T5799] usb 1-1: 3:0 : does not exist [ 663.911084][ T8683] futex_wake_op: syz.1.574 tries to shift op by 144; fix this program [ 663.911284][ T8683] futex_wake_op: syz.1.574 tries to shift op by 144; fix this program [ 666.039057][ T30] audit: type=1400 audit(1794013468.567:378): avc: denied { write } for pid=8686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.048329][ T8713] 9pnet_fd: p9_fd_create_unix (8713): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 666.075016][ T5799] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 666.144348][ T30] audit: type=1400 audit(1794013468.667:379): avc: denied { write } for pid=8715 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.267483][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 666.267629][ T5799] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 666.275066][ T5799] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 666.275134][ T5799] usb 6-1: config 142 has no interface number 0 [ 666.275288][ T5799] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 666.275321][ T5799] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 666.275370][ T5799] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 666.275429][ T5799] usb 6-1: config 142 interface 251 has no altsetting 0 [ 666.398724][ T5799] usb 6-1: string descriptor 0 read error: -22 [ 666.399678][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.576096][ T8704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 666.576957][ T8704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 666.600665][ T5799] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 667.049794][ T5799] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 668.638089][ C1] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 668.638115][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 668.638142][ C1] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 668.729679][ T990] usb 1-1: USB disconnect, device number 33 [ 669.247091][ T5782] usb 6-1: USB disconnect, device number 26 [ 669.633338][ T5782] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 669.633939][ T5782] cypress_m8 6-1:142.251: device disconnected [ 669.799249][ T30] audit: type=1400 audit(1794013472.327:380): avc: denied { write } for pid=8719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.907586][ T2266] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 670.059066][ T2266] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 670.082412][ T2266] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 670.082517][ T2266] usb 4-1: config 1 has no interface number 0 [ 670.147095][ T2266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.147159][ T2266] usb 4-1: Product: syz [ 670.147303][ T2266] usb 4-1: Manufacturer: syz [ 670.147341][ T2266] usb 4-1: SerialNumber: syz [ 670.484874][ T2266] usb 4-1: 3:0 : does not exist [ 670.485421][ T2266] usb 4-1: 3:0 : does not exist [ 670.955041][ T8753] 9pnet_fd: p9_fd_create_unix (8753): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 671.591386][ T30] audit: type=1400 audit(1794013474.117:381): avc: denied { write } for pid=8754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.584401][ T990] usb 4-1: USB disconnect, device number 36 [ 672.679020][ T8416] udevd[8416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.598302][ T8775] 9pnet_fd: p9_fd_create_unix (8775): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 675.024963][ T8778] futex_wake_op: syz.5.591 tries to shift op by 144; fix this program [ 675.025086][ T8778] futex_wake_op: syz.5.591 tries to shift op by 144; fix this program [ 677.540858][ T2266] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 677.720547][ T2266] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 677.723948][ T2266] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 677.724009][ T2266] usb 6-1: config 1 has no interface number 0 [ 677.771613][ T2266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.771789][ T2266] usb 6-1: Product: syz [ 677.772010][ T2266] usb 6-1: Manufacturer: syz [ 677.772119][ T2266] usb 6-1: SerialNumber: syz [ 677.898022][ T2266] usb 6-1: 3:0 : does not exist [ 677.898130][ T2266] usb 6-1: 3:0 : does not exist [ 679.517816][ T990] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 679.669576][ T990] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 679.672127][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.680367][ T990] usb 7-1: config 0 descriptor?? [ 679.706708][ T5782] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 679.794006][ T5646] usb 6-1: USB disconnect, device number 27 [ 679.857772][ T5782] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 679.858911][ T5782] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 679.858936][ T5782] usb 4-1: config 1 has no interface number 0 [ 679.861919][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.861948][ T5782] usb 4-1: Product: syz [ 679.861965][ T5782] usb 4-1: Manufacturer: syz [ 679.861980][ T5782] usb 4-1: SerialNumber: syz [ 679.909389][ T5782] usb 4-1: 3:0 : does not exist [ 679.909438][ T5782] usb 4-1: 3:0 : does not exist [ 680.114466][ T8827] loop6: detected capacity change from 0 to 2640 [ 680.117613][ T8827] buffer_io_error: 11 callbacks suppressed [ 680.117661][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.117814][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.117947][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118077][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118165][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118334][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118456][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118595][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118637][ T8827] ldm_validate_partition_table(): Disk read failed. [ 680.118721][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118848][ T8827] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.118978][ T8827] Dev loop6: unable to read RDB block 0 [ 680.119728][ T8827] loop6: unable to read partition table [ 680.244107][ T8827] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 680.416350][ T990] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 680.461894][ T990] [drm:udl_init] *ERROR* Selecting channel failed [ 681.162350][ T990] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 681.162382][ T990] [drm] Initialized udl on minor 1 [ 681.165777][ T990] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 681.168213][ T990] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 681.174516][ T5782] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 681.175654][ T990] usb 7-1: USB disconnect, device number 22 [ 681.178646][ T5782] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 681.178830][ T5782] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 681.330154][ T5646] usb 4-1: USB disconnect, device number 37 [ 685.905605][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.611'. [ 686.748980][ T990] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 686.884355][ T30] audit: type=1400 audit(1794013489.407:382): avc: denied { write } for pid=8824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.927703][ T990] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 686.930087][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.933422][ T990] usb 4-1: config 0 descriptor?? [ 687.031605][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.031669][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.058157][ T5782] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 687.220073][ T5782] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 687.221360][ T5782] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 687.221389][ T5782] usb 1-1: config 1 has no interface number 0 [ 687.234840][ T30] audit: type=1400 audit(1794013489.757:383): avc: denied { write } for pid=8870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.276476][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.276514][ T5782] usb 1-1: Product: syz [ 687.276529][ T5782] usb 1-1: Manufacturer: syz [ 687.276544][ T5782] usb 1-1: SerialNumber: syz [ 687.311460][ T5782] usb 1-1: 3:0 : does not exist [ 687.311490][ T5782] usb 1-1: 3:0 : does not exist [ 687.407168][ T990] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 687.408586][ T990] [drm:udl_init] *ERROR* Selecting channel failed [ 687.451586][ T990] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 687.451627][ T990] [drm] Initialized udl on minor 1 [ 687.469108][ T990] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 687.469327][ T990] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 687.472846][ T990] usb 4-1: USB disconnect, device number 38 [ 687.483948][ T5782] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 688.857594][ T2266] usb 1-1: USB disconnect, device number 34 [ 688.873023][ T30] audit: type=1400 audit(1794013491.397:384): avc: denied { write } for pid=8872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.378894][ T8893] affs: No valid root block on device nullb0 [ 689.515076][ T30] audit: type=1400 audit(1794013492.037:385): avc: denied { write } for pid=8896 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.519520][ T8897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.656504][ T5759] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 689.808529][ T5759] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 689.809510][ T5759] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.809555][ T5759] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 689.809598][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.979112][ T8899] jffs2: notice: (8899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 691.039224][ T8919] 9pnet_fd: p9_fd_create_unix (8919): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 691.256248][ T5646] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 691.407757][ T990] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 691.409010][ T5646] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 691.409966][ T5646] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 691.409983][ T5646] usb 1-1: config 1 has no interface number 0 [ 691.415908][ T5646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.415930][ T5646] usb 1-1: Product: syz [ 691.415940][ T5646] usb 1-1: Manufacturer: syz [ 691.415950][ T5646] usb 1-1: SerialNumber: syz [ 691.438736][ T5646] usb 1-1: 3:0 : does not exist [ 691.438763][ T5646] usb 1-1: 3:0 : does not exist [ 691.561528][ T990] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 691.565974][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.577374][ T990] usb 4-1: config 0 descriptor?? [ 691.830628][ T990] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 692.491909][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.492141][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.535673][ T990] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 692.535706][ T990] [drm] Initialized udl on minor 1 [ 692.723308][ T5646] usb 1-1: USB disconnect, device number 35 [ 692.814985][ T8924] jffs2: notice: (8924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 692.861853][ T8936] 9pnet_fd: p9_fd_create_unix (8936): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 693.608354][ T8938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.807514][ T8941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8941 comm=syz.0.630 [ 694.675257][ T5781] usb 7-1: USB disconnect, device number 23 [ 694.917286][ T8951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.628'. [ 694.959417][ T8955] 9pnet_fd: p9_fd_create_unix (8955): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 694.961747][ T8951] FAULT_INJECTION: forcing a failure. [ 694.961747][ T8951] name failslab, interval 1, probability 0, space 0, times 0 [ 694.961771][ T8951] CPU: 1 UID: 0 PID: 8951 Comm: syz.5.628 Not tainted syzkaller #0 PREEMPT(full) [ 694.961802][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 694.961811][ T8951] Call Trace: [ 694.961819][ T8951] [ 694.961826][ T8951] dump_stack_lvl+0x100/0x190 [ 694.961859][ T8951] should_fail_ex.cold+0x5/0xa [ 694.961884][ T8951] should_failslab+0xc2/0x120 [ 694.961904][ T8951] __kmalloc_cache_noprof+0x91/0x6d0 [ 694.961924][ T8951] ? raw_open+0x89/0x490 [ 694.961952][ T8951] raw_open+0x89/0x490 [ 694.961971][ T8951] ? __pfx_raw_open+0x10/0x10 [ 694.961991][ T8951] misc_open+0x26d/0x450 [ 694.962014][ T8951] ? __pfx_misc_open+0x10/0x10 [ 694.962034][ T8951] chrdev_open+0x234/0x6a0 [ 694.962053][ T8951] ? __pfx_chrdev_open+0x10/0x10 [ 694.962069][ T8951] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 694.962094][ T8951] do_dentry_open+0x674/0x1470 [ 694.962108][ T8951] ? __pfx_chrdev_open+0x10/0x10 [ 694.962128][ T8951] vfs_open_consume+0xcc/0x460 [ 694.962152][ T8951] path_openat+0x1547/0x23f0 [ 694.962172][ T8951] ? __pfx_path_openat+0x10/0x10 [ 694.962192][ T8951] do_file_open+0x20e/0x430 [ 694.962209][ T8951] ? __pfx_do_file_open+0x10/0x10 [ 694.962237][ T8951] ? _raw_spin_unlock+0x28/0x50 [ 694.962254][ T8951] ? alloc_fd+0x471/0x7a0 [ 694.962275][ T8951] do_sys_openat2+0x163/0x1d0 [ 694.962293][ T8951] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.962309][ T8951] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 694.962344][ T8951] __x64_sys_openat+0x12d/0x210 [ 694.962365][ T8951] ? __pfx___x64_sys_openat+0x10/0x10 [ 694.962391][ T8951] do_syscall_64+0x123/0x790 [ 694.962411][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.962427][ T8951] RIP: 0033:0x7f3c4216034e [ 694.962440][ T8951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 694.962454][ T8951] RSP: 002b:00007f3c403f3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.962471][ T8951] RAX: ffffffffffffffda RBX: 00007f3c403f66c0 RCX: 00007f3c4216034e [ 694.962479][ T8951] RDX: 0000000000000002 RSI: 00007f3c42236f02 RDI: ffffffffffffff9c [ 694.962487][ T8951] RBP: 00007f3c42237b70 R08: 0000000000000000 R09: 0000000000000000 [ 694.962495][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000039 [ 694.962502][ T8951] R13: 0000200000000ac0 R14: 0000000000000000 R15: 00007ffe79673bd8 [ 694.962519][ T8951] [ 695.046891][ T5646] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 695.215020][ T5646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 695.215088][ T5646] usb 2-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 695.230664][ T5646] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 695.230700][ T5646] usb 2-1: config 142 has no interface number 0 [ 695.230736][ T5646] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 695.230798][ T5646] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 695.230821][ T5646] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 695.230849][ T5646] usb 2-1: config 142 interface 251 has no altsetting 0 [ 695.253158][ T5646] usb 2-1: string descriptor 0 read error: -22 [ 695.253307][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.275538][ T8946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.275673][ T8946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.317042][ T5646] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 695.345409][ T5646] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 695.591648][ T8961] loop6: detected capacity change from 0 to 2640 [ 695.598163][ T8961] buffer_io_error: 11 callbacks suppressed [ 695.598218][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.598435][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.598576][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.598720][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.598864][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599113][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599405][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599559][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599607][ T8961] ldm_validate_partition_table(): Disk read failed. [ 695.599767][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599850][ T8961] Buffer I/O error on dev loop6, logical block 0, async page read [ 695.599987][ T8961] Dev loop6: unable to read RDB block 0 [ 695.600950][ T8961] loop6: unable to read partition table [ 695.602061][ T8961] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 696.928194][ T8968] futex_wake_op: syz.0.635 tries to shift op by 144; fix this program [ 696.929622][ T8968] futex_wake_op: syz.0.635 tries to shift op by 144; fix this program [ 697.846456][ T990] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 697.846814][ T990] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 697.886442][ T990] usb 4-1: USB disconnect, device number 39 [ 697.889849][ T5767] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 697.890197][ T5767] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 697.890372][ T5767] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 698.730429][ T8970] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 698.730506][ T8970] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 698.730875][ C0] usb 2-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 699.057231][ T5759] usb 2-1: USB disconnect, device number 30 [ 699.205612][ T5759] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 699.205926][ T5759] cypress_m8 2-1:142.251: device disconnected [ 701.963803][ T9000] CIFS: Attempting to mount //127.0.0.1/share [ 702.541319][ T30] audit: type=1400 audit(1794013505.067:386): avc: denied { write } for pid=8960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.701092][ T9000] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with RawNTLMSSP: -11 [ 702.701159][ T9000] CIFS: VFS: cifs_mount failed w/return code = -11 [ 702.911134][ T8988] jffs2: notice: (8988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 704.185110][ T30] audit: type=1400 audit(1794013506.707:387): avc: denied { write } for pid=9014 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.258005][ T9020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9020 comm=syz.5.646 [ 704.271392][ T9019] loop6: detected capacity change from 0 to 2640 [ 704.271836][ T9019] buffer_io_error: 11 callbacks suppressed [ 704.271849][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271878][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271902][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271927][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271951][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271988][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.272019][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.272042][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.272055][ T9019] ldm_validate_partition_table(): Disk read failed. [ 704.272075][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.272097][ T9019] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.272132][ T9019] Dev loop6: unable to read RDB block 0 [ 704.272239][ T9019] loop6: unable to read partition table [ 704.272400][ T9019] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 707.317984][ T9042] CIFS: Attempting to mount //127.0.0.1/share [ 707.427789][ T9042] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with RawNTLMSSP: -11 [ 707.427883][ T9042] CIFS: VFS: cifs_mount failed w/return code = -11 [ 708.474169][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'. [ 710.546306][ T30] audit: type=1400 audit(1794013513.007:388): avc: denied { write } for pid=9027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.984945][ T30] audit: type=1400 audit(1794013513.507:389): avc: denied { write } for pid=9079 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.376809][ T9074] jffs2: notice: (9074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 711.479913][ T9089] loop6: detected capacity change from 0 to 2640 [ 711.483469][ T9089] buffer_io_error: 6 callbacks suppressed [ 711.483492][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483543][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483573][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483603][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483631][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483673][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483719][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483747][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483764][ T9089] ldm_validate_partition_table(): Disk read failed. [ 711.483790][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483818][ T9089] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.483860][ T9089] Dev loop6: unable to read RDB block 0 [ 711.483980][ T9089] loop6: unable to read partition table [ 711.484137][ T9089] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 711.816392][ T5672] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 711.968268][ T5672] usb 4-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 711.971389][ T5672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.971444][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.000988][ T5672] as10x_usb: device has been detected [ 712.009977][ T5672] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 712.274127][ T9100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9100 comm=syz.6.662 [ 712.337402][ T5672] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 713.365726][ T9107] ------------[ cut here ]------------ [ 713.365752][ T9107] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 713.365767][ T9107] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x93f/0x1c10, CPU#1: syz.3.656/9107 [ 713.387398][ T9107] Modules linked in: [ 713.391356][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.3.656 Not tainted syzkaller #0 PREEMPT(full) [ 713.400584][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 713.410670][ T9107] RIP: 0010:__mutex_lock+0x946/0x1c10 [ 713.416061][ T9107] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 4d e5 79 06 45 85 c0 75 13 48 8d 3d 01 f3 7c 06 48 c7 c6 c0 fc 0f 8c <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 713.436027][ T9107] RSP: 0018:ffffc900044e76a0 EFLAGS: 00010246 [ 713.442419][ T9107] RAX: 0000000000000003 RBX: ffff88807ca84010 RCX: 1ffffffff24d5b28 [ 713.450452][ T9107] RDX: 0000000000000000 RSI: ffffffff8c0ffcc0 RDI: ffffffff926de700 [ 713.458971][ T9107] RBP: ffffc900044e7810 R08: 0000000000000000 R09: 0000000000000000 [ 713.467045][ T9107] R10: ffffffff926ad947 R11: 0000000000000001 R12: 0000000000000000 [ 713.475048][ T9107] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802e5d8320 [ 713.483131][ T9107] FS: 00007f2858a306c0(0000) GS:ffff888122575000(0000) knlGS:0000000000000000 [ 713.492150][ T9107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.498776][ T9107] CR2: 00007f2858a2fff8 CR3: 00000000287d5000 CR4: 00000000003526f0 [ 713.506798][ T9107] Call Trace: [ 713.510084][ T9107] [ 713.513018][ T9107] ? lock_acquire+0x1d1/0x380 [ 713.517756][ T9107] ? as102_stream_ctrl+0x28/0xd0 [ 713.522708][ T9107] ? __pfx___mutex_lock+0x10/0x10 [ 713.527780][ T9107] ? __lock_acquire+0x5c0/0x1f40 [ 713.532745][ T9107] ? rcu_is_watching+0x13/0xc0 [ 713.537566][ T9107] ? __mutex_lock+0x267/0x1c10 [ 713.542345][ T9107] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 713.548307][ T9107] ? as102_stream_ctrl+0x28/0xd0 [ 713.553286][ T9107] as102_stream_ctrl+0x28/0xd0 [ 713.558182][ T9107] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 713.564408][ T9107] __dvb_frontend_open+0x122/0xf80 [ 713.569622][ T9107] dvb_frontend_open+0x767/0x960 [ 713.574583][ T9107] ? find_held_lock+0x2b/0x80 [ 713.579338][ T9107] ? __pfx_dvb_frontend_open+0x10/0x10 [ 713.584809][ T9107] dvb_device_open+0x270/0x3b0 [ 713.590041][ T9107] ? __pfx_dvb_device_open+0x10/0x10 [ 713.595342][ T9107] chrdev_open+0x234/0x6a0 [ 713.599874][ T9107] ? __pfx_chrdev_open+0x10/0x10 [ 713.604817][ T9107] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 713.611189][ T9107] do_dentry_open+0x674/0x1470 [ 713.615979][ T9107] ? __pfx_chrdev_open+0x10/0x10 [ 713.620953][ T9107] vfs_open_consume+0xcc/0x460 [ 713.625727][ T9107] path_openat+0x1547/0x23f0 [ 713.630354][ T9107] ? __pfx_path_openat+0x10/0x10 [ 713.635312][ T9107] do_file_open+0x20e/0x430 [ 713.639862][ T9107] ? __pfx_do_file_open+0x10/0x10 [ 713.644900][ T9107] ? _raw_spin_unlock+0x28/0x50 [ 713.649789][ T9107] ? alloc_fd+0x471/0x7a0 [ 713.654147][ T9107] do_sys_openat2+0x163/0x1d0 [ 713.658858][ T9107] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.664431][ T9107] ? do_raw_spin_lock+0x128/0x260 [ 713.669577][ T9107] ? find_held_lock+0x2b/0x80 [ 713.669633][ T5672] as10x_usb: error during firmware upload part1 [ 713.669934][ T5672] Registered device Abilis Systems DVB-Titan [ 713.680576][ T9107] __x64_sys_openat+0x12d/0x210 [ 713.691437][ T9107] ? __pfx___x64_sys_openat+0x10/0x10 [ 713.696879][ T9107] ? kcov_ioctl+0x17a/0x750 [ 713.701396][ T9107] do_syscall_64+0x123/0x790 [ 713.705997][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.711919][ T9107] RIP: 0033:0x7f2857b6034e [ 713.716369][ T9107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.736033][ T9107] RSP: 002b:00007f2858a2fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.744623][ T9107] RAX: ffffffffffffffda RBX: 00007f2858a306c0 RCX: 00007f2857b6034e [ 713.752675][ T9107] RDX: 0000000000000802 RSI: 00007f2858a2fc00 RDI: ffffffffffffff9c [ 713.760697][ T9107] RBP: 00007f2858a2fc00 R08: 0000000000000000 R09: 0000000000000000 [ 713.769014][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 713.777196][ T9107] R13: 00007f2857e26218 R14: 00007f2857e26180 R15: 00007ffe42690698 [ 713.785199][ T9107] [ 713.788254][ T9107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 713.795554][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.3.656 Not tainted syzkaller #0 PREEMPT(full) [ 713.804770][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 713.814848][ T9107] Call Trace: [ 713.818148][ T9107] [ 713.821081][ T9107] dump_stack_lvl+0x100/0x190 [ 713.825784][ T9107] vpanic+0x2dc/0x6f8 [ 713.829771][ T9107] panic+0xd1/0xe0 [ 713.833498][ T9107] ? __pfx_panic+0x10/0x10 [ 713.837919][ T9107] check_panic_on_warn.cold+0x19/0x34 [ 713.843297][ T9107] ? __mutex_lock+0x93f/0x1c10 [ 713.848067][ T9107] __warn.cold+0x191/0x321 [ 713.852494][ T9107] __report_bug+0x30f/0x440 [ 713.857012][ T9107] ? __mutex_lock+0x93f/0x1c10 [ 713.861778][ T9107] ? __pfx___report_bug+0x10/0x10 [ 713.866811][ T9107] ? __mutex_lock+0x946/0x1c10 [ 713.871583][ T9107] report_bug_entry+0xe2/0x290 [ 713.876355][ T9107] ? __mutex_lock+0x946/0x1c10 [ 713.881137][ T9107] handle_bug+0x1cd/0x2a0 [ 713.885504][ T9107] exc_invalid_op+0x17/0x50 [ 713.890027][ T9107] asm_exc_invalid_op+0x1a/0x20 [ 713.894900][ T9107] RIP: 0010:__mutex_lock+0x946/0x1c10 [ 713.900306][ T9107] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 4d e5 79 06 45 85 c0 75 13 48 8d 3d 01 f3 7c 06 48 c7 c6 c0 fc 0f 8c <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 713.919941][ T9107] RSP: 0018:ffffc900044e76a0 EFLAGS: 00010246 [ 713.926026][ T9107] RAX: 0000000000000003 RBX: ffff88807ca84010 RCX: 1ffffffff24d5b28 [ 713.934000][ T9107] RDX: 0000000000000000 RSI: ffffffff8c0ffcc0 RDI: ffffffff926de700 [ 713.942001][ T9107] RBP: ffffc900044e7810 R08: 0000000000000000 R09: 0000000000000000 [ 713.949965][ T9107] R10: ffffffff926ad947 R11: 0000000000000001 R12: 0000000000000000 [ 713.957937][ T9107] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802e5d8320 [ 713.965916][ T9107] ? lock_acquire+0x1d1/0x380 [ 713.970615][ T9107] ? as102_stream_ctrl+0x28/0xd0 [ 713.975555][ T9107] ? __pfx___mutex_lock+0x10/0x10 [ 713.980592][ T9107] ? __lock_acquire+0x5c0/0x1f40 [ 713.985526][ T9107] ? rcu_is_watching+0x13/0xc0 [ 713.990282][ T9107] ? __mutex_lock+0x267/0x1c10 [ 713.995043][ T9107] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 714.000757][ T9107] ? as102_stream_ctrl+0x28/0xd0 [ 714.005687][ T9107] as102_stream_ctrl+0x28/0xd0 [ 714.010441][ T9107] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 714.016151][ T9107] __dvb_frontend_open+0x122/0xf80 [ 714.021258][ T9107] dvb_frontend_open+0x767/0x960 [ 714.026273][ T9107] ? find_held_lock+0x2b/0x80 [ 714.030936][ T9107] ? __pfx_dvb_frontend_open+0x10/0x10 [ 714.036394][ T9107] dvb_device_open+0x270/0x3b0 [ 714.041152][ T9107] ? __pfx_dvb_device_open+0x10/0x10 [ 714.046430][ T9107] chrdev_open+0x234/0x6a0 [ 714.050837][ T9107] ? __pfx_chrdev_open+0x10/0x10 [ 714.055767][ T9107] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 714.062093][ T9107] do_dentry_open+0x674/0x1470 [ 714.066845][ T9107] ? __pfx_chrdev_open+0x10/0x10 [ 714.071775][ T9107] vfs_open_consume+0xcc/0x460 [ 714.076544][ T9107] path_openat+0x1547/0x23f0 [ 714.081127][ T9107] ? __pfx_path_openat+0x10/0x10 [ 714.086054][ T9107] do_file_open+0x20e/0x430 [ 714.090584][ T9107] ? __pfx_do_file_open+0x10/0x10 [ 714.095617][ T9107] ? _raw_spin_unlock+0x28/0x50 [ 714.100456][ T9107] ? alloc_fd+0x471/0x7a0 [ 714.104782][ T9107] do_sys_openat2+0x163/0x1d0 [ 714.109452][ T9107] ? __pfx_do_sys_openat2+0x10/0x10 [ 714.114651][ T9107] ? do_raw_spin_lock+0x128/0x260 [ 714.119661][ T9107] ? find_held_lock+0x2b/0x80 [ 714.124330][ T9107] __x64_sys_openat+0x12d/0x210 [ 714.129182][ T9107] ? __pfx___x64_sys_openat+0x10/0x10 [ 714.134566][ T9107] ? kcov_ioctl+0x17a/0x750 [ 714.139065][ T9107] do_syscall_64+0x123/0x790 [ 714.143657][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.149539][ T9107] RIP: 0033:0x7f2857b6034e [ 714.153946][ T9107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 714.173544][ T9107] RSP: 002b:00007f2858a2fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 714.181948][ T9107] RAX: ffffffffffffffda RBX: 00007f2858a306c0 RCX: 00007f2857b6034e [ 714.189906][ T9107] RDX: 0000000000000802 RSI: 00007f2858a2fc00 RDI: ffffffffffffff9c [ 714.197882][ T9107] RBP: 00007f2858a2fc00 R08: 0000000000000000 R09: 0000000000000000 [ 714.205840][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 714.213811][ T9107] R13: 00007f2857e26218 R14: 00007f2857e26180 R15: 00007ffe42690698 [ 714.221879][ T9107] [ 714.225124][ T9107] Kernel Offset: disabled [ 714.229432][ T9107] Rebooting in 86400 seconds..