last executing test programs: 10.554375977s ago: executing program 1 (id=411): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@redirect_dir_follow}, {@userxattr}]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4500c1, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4500c1, 0x0) recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/210, 0xd2}, {&(0x7f0000000240)=""/190, 0xbe}], 0x2, &(0x7f0000000440)=""/91, 0x5b}, 0x1) 10.454224163s ago: executing program 1 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x2000) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x800000) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000016c0)={0x28, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x80) 10.363266882s ago: executing program 1 (id=415): r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x854) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) 10.171119235s ago: executing program 1 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x1}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012000100000508000b400000cd200500010006000000050005000a00000005000400010000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents(r2, 0x0, 0x58) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10.108872634s ago: executing program 0 (id=418): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x1ea) lseek(r1, 0x8, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0x1, "d8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r3, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x8003, 0x4, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x3, 'veth0_to_team\x00', {0x8000}, 0x3ff}) 9.946167077s ago: executing program 1 (id=420): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x104}, 0x1, 0x0, 0x0, 0x200088d4}, 0x40040) openat$tun(0xffffffffffffff9c, 0x0, 0x181842, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="d817bd1580ad902d664805361fd47827a0c790e326010000000000000000002301", @ANYRES16=r2, @ANYBLOB="05001f0003"], 0x24}}, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000003c0), 0x4, 0x8800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = accept4$unix(r5, &(0x7f0000000100), 0x0, 0x80000) flistxattr(r6, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./proc/sys/kernel/core_pattern\x00', &(0x7f00000000c0), &(0x7f00000001c0)='./proc\x00', 0x7, 0x3) 9.721591341s ago: executing program 1 (id=421): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) userfaultfd(0x80001) (async) inotify_init1(0x80000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x400500, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.439076257s ago: executing program 32 (id=421): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) userfaultfd(0x80001) (async) inotify_init1(0x80000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x400500, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.322777716s ago: executing program 0 (id=426): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x6c, r2, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x5, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)="2b351cdb", 0x4) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c044}, 0x90) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r10, &(0x7f0000000100)='bRe', 0x3) (async) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 8.22675527s ago: executing program 0 (id=427): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f00000001c0)={0x6, [[0xfff, 0xa, 0x101, 0x6, 0x3, 0x5, 0x2, 0x1], [0x0, 0x8c1b, 0x0, 0x6, 0x0, 0x100, 0x9, 0x2], [0x10001, 0x200, 0x6, 0x1ff, 0x80000000, 0xa, 0x4, 0x6]], '\x00', [{0xa, 0x3, 0x0, 0x1}, {0x84, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6}, {0x2, 0x5, 0x0, 0x1, 0x1}, {0x6, 0xc}, {0x4, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x45580895, 0x0, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3ff, 0x1, 0x1}, {0x80000001, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x4}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) getdents(r2, &(0x7f0000000600)=""/54, 0x36) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x90, r5, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="b2bbe960a9d1d97c5997d91ba81066b248a23fcf92a77dab75cb718e844ee2feabfa5fd40ffb4e410c821f6ca3a2db4961a2a7acfe8b769782553982abceb947a725d75def", 0x45, r1}, 0x68) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x6e, 0x458440) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r1], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 8.029155249s ago: executing program 3 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./export_dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x3ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) 7.709636441s ago: executing program 3 (id=429): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x17}}}}]}}]}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 4.985837035s ago: executing program 0 (id=436): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000429a1442f1c7f81a09a5e6526da61d2deeb91cc2bf78a2b267f3a7049cc5d31d5f4731ac55c4f4444817e9e7169b920290b149581d03947e97cb89e392e682b0c68699caf05d1c", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x3, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x80000001, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x2, 0x200b398, 0x8001, 0x41, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x3, 0x1, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x5, 0x6, 0x438, 0x2, 0x9, 0x2000002, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x6, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x800000, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x5, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x26, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0x6, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xc, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x10000003, 0x400001ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffe, 0x5, 0x6, 0xf, 0xe, 0x10000, 0x1000274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000100)={&(0x7f0000000080)=[{0x1, 0x10000, 0x2, 0x10, 0x2}, {0x0, 0xf, 0x0, 0x1, 0x52e}], 0x2, 0x28, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r2, 0xc138fd02, &(0x7f0000000000)="0400000000000000") r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000088c0)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xb8}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x80000001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf6, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0x5, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) fchdir(r0) 4.497411185s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi0\x00', 0x96300, 0x0) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000280)=0x10001, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0xfffffffffffffe8f) socket$inet_smc(0x2b, 0x1, 0x0) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000b3a000/0x2000)=nil) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x0, 0xc7, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x240000, 0x1c8) 4.251635834s ago: executing program 0 (id=438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0x7ff00000}]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000280)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006020435000202"], 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000740)={{r1}, r5, 0x4, @unused=[0x6, 0x7, 0xffffffff80000001, 0x1], @name="e531fcc9a425c68a73bace1508ef3048d2f99fde86d58f67204b2075b7708d13f372921839a6c73958dd31f072f198c54db9770ddcb01775d80d24c9c67e04689bda5cce2f78eeca9a9e3f8ca87fda725182c5a0d8d19d7be8e2bd2c0f77eb59be4f2401cd2c728ccd9fbd0f4eba82a2ab9c803c848dca71b76d88405c4eb9f2864637bad969e32f14d8ca26945b76a9b6f86d7eb0d3595d658d8716e985a107dbcb79473fd48198c96b27c2cc4691bb14062e5625b76781e5f4535055394d266011286ce169ce9dc32b130f5c8edf6de1504c7b51d33d2ea4feab9d2a609afd5556b23b76152cf307b4924f507db45a50758a41f0ac2a02b2eedf4ce2140e1482e0bd98bcef2d7a7ebcd645f5bd21212923ff9dbd269170ef9ca044cf42466bac06895b1ba559f147e10fc2430c554bd4b994f77f9e3d90648bde33aee521dc053bfb10fd3a9b16ba4b80b62e77afa61756341357d6112235334b37c6904c2537783274aada86c6cae1268ddee1d5d2ea40f10658ef615eb7e6eca3e9298f755ee4e588b0d9b301efb849a96ad03dd1d6df2b51b1930d3a4322bffee039ca31e2a767a5374aad83841420b84c80ec4ce9e276b1476e06332aff95318ec3ede7453bdf05ac265867b0fddfe97a75a9994d115b9c8885a073ed303d9e39399886af0c673919b0bd7f48c373906bf2ee9e6c12d3b0302953125458dd78971ad832ef2da115f94cb6825bb20839d20ee02f95f87001125006ba7ac29fe0a76cfd14492473c85e1cd5c65cc6df8402e7b44ba222be26f664f41e0f7dc1a9d581e1729e7a771f199827b61fc35b32048ad47c5627be1458e6e8c309012c01c3e10f94d8141fd9381e6185dd04495427f7d81f1ed656b94a3942a712eb57defd6bf4c8457d582bad1f29b93be8d65e9582eedc2ed6f1c139c74f8b0e13820f286e38d9ab33ad5ac9a05ea8d982af687ebbac1cb4a7473f76d5c5966542412f2f37d9ab9b0de443debafbd3d3e80ee4ec11669884c578649376980fd4383d3c37346830e084cb35066bb4b44bb757d1f9afe24e7e1d8a180c730e220ccfd95c150cfac969e5591284b1c11d7e7c1ba9be29d5ed381d84c7cd60ce9c76ae025d721f354141bd64526ae1eec9e58dd1fc6f87dade65969fc59c9c4a79c508630ae49ce409a2555d343b2257fbd2a1cd112689dc31e829bb67cb439bdaa5fe103d47129e565c14bf7a048561677fe04622bfe50339b8d7b1dc00ca8f50217e4818966d628425a831725fa42b898822ad9aea53b7c981d975d8c9eab08d441a1c8543b75ff31829e6effcd5dd0ad68fcab087d815502fe0460531dbc393db24ba75f8cbe0e394e71cf21afc9b90778ccf20110409c4ec8d143c333f18b2b9bf8bf80d7b86c57c694d293d467788c81de2a70c75053f0f0bd57dc914a6f8d70bb6370bc4e1c5f5e5c2c262baf693362c8726dd0258e3ace097a1808ae5ec1c14ada96dab101a29182330ee25c77e9956987dd31bb882539c5aedd70b54dbfa232c0a35070d89ebcdd0b876591c933c3898cefcd23b511c75068e5e8f35ac54b019652bffbccc5e8a3fb4b482c6f68cae37e24c2842334fcd16d2cb0b40db2a1ec0ee8ebdfa4d5d2ca00ff9d591eb1701024aff4bb905a6e4ce28d654c23a0649cb831ccbc65543f9f88e70f1a1cf519f4c200f1833b61ad63e3ed5e598e70b03918d92976dee644fb97f239260a1972479e16cd0eaffb9eba0662b5ca4ae7bcf6acc8b05cd4e4144b8c15c5cf8539b901d217bfc58b59b6e2b87f08dd1869c4a2c0b16454eb072bd669f1d28bc807a867335f2b7e0956d3d25389728515cd5785cb75db7aef3f19123755b7c5eb8d42bf899bbd44494dfa17cb6a687349cb6d692cfb13c4b98061fd261598cbfa09352f526ba18558ba675e5dd2c847b28621695addbf69ca43676878a3f1fadb3286f5ad88e01ecf5e9e3510c14821e3da48e0baa02816983f1b42081b3b9d42569fb1b2f75699b5fe3fcf23cac444e57f47a0be7e7e4545b5a04180a4b2e4f95dbd45bf20df8fcaf7eff61c3d10bcb47cd61dd9333ae6f90cada5142c4374d17c85225517395d026c5152bba4ab2e3821fe03d0f4fcf550fa7eb5e000a56e52cd0296a542043ce4e28b61d81ab0cea3d6eb71661d8daef70df815e285cce97a81566fbb4e32b967e91b9c2977be1bb97a435fc6c00d39a757c89303f3533b9c9e9a4986dbb677b9a8105ce57b4742e17775f2306154299c0fe2dcabafd1e0ffcb9987e9f44b67b5ba4dc9d9c75ff8497ab498900ea9bde4b71683848972217b255ea3c73b034da4984ce170815240bc9c7d519c8849f1c150d0d134031dc00b8933c0cdfc6bb04bd1f4ca1f88c0895cf499505503782f2862db3b56896c8d78b908c4908ba223570d06092769980dba445f53987f1c9c45b39bdb31546970257f5054429bb75e2be5ee1ad1d4d041277368940b40e6de22d526625258fdc9efa83222a3c5a08d4fbf376143554cd91ec759cad861fe799124820448e724ddb3bddbad826790c900a471dc0340df4b6a3aba7f48d4b5019facd4b39e62adb8253bc1e17693cead254611df05b9cd9e135985371247288b6bddf39c62ab3adc8c9a895819e026df7342f29b5bb47cea4ab47e6a394e59367ed180a7bbbc4317fff1d1f7e7cb7cb304b8997a0cf71e87fec2bb1a19a2a5e27cbdaa843738474dde0f4c06fd49cc834fcb78ac4bac76678b78f260cbd1b12540adcf2adfa844ca828213ebbc0698d0e99fc1390e1ec11f13aa1263a25ff57c66ce658ebd296463403139fcdc789debeae3e8bc9c89765d4a7e601af47aa25f8d3727f6261d7222a7b7251b9b61da9cdc62a44a3d269de3392758f091120af632f000c805f64a4626cc0d18eba7f1b961811a9e416993e94a99dba4e0bd4e89c5be59960856b5a0c7ef5d0f867231b76df0ff90583990e5ea133f92d663892fa7a40bf1dfbb28205b15e02a8926741d7de73fcbb72379dea3681bef65979f1ded7b68d51128adf77ba11429a87c07b12f9a6dba2f69c80c924351a8b7f4f5240add5b9d7d6022ab26890c31e5d01a6f9a8d1a8fff8e7b38b554018c785173589322a8244c1d8d66332500ec65174966df8e7798f22fa09e35472ab3ea65b47d88001345c280403c44625de99ea59d9a04b3afe6001f7a210fcd92c675266a5f3ccbc51cbfba4981d68e3f2e07502aee2181f1377ef6a6cf2731178a2f0390f30fb79dfac399a4069c31fbf97c4335620348f92831ae03f48a862f95880844476cfd5c5be2aad9c9589aee1e30980b6a7fb3c93b6ae8a7ed24307368406d50548c946351e955f3809e1c35e36886f0d8deef054f471c8436e7b4e0c89c77901531fffb88a2ebf13d9c8f059e4706509fc26f576c15f074083226206d0e5d8da75e044e0c1ccd21ed486424c83c86921a6a2cac51573afe45f4abc02e891e6b863d8e298d3b3a5af7c33eac1b7c9f30f6ab85cdf3d8c907d82aa19f4a3abe5dc8485036234535479080173f027f5718c926217a204cd1183f0eff7c778c44981a57bf47d71e575d48205bd4901041a9aa2ab56800c92611d4fad8ef0b0fb8756b9bf0bcd0efc3b129414b2cd380b7d47a92c0e0ac0994b8c7a0be959e4961bfac2078c7b65196115425b482fc0e15e43f2b55b9f8d568f82437c8a5e298e2f798a197a9ff48dd0b4f94494c0eca2b0a3cb720ee907877393cb7e70cd6f5738d33c8efa71b459152bb02f4cdcc708e30f1965c8e3ce246c54bd76823e64b8590264e1bf55fb2dba13be78f35a6df3014fba85d94a635bdb30c0078070b3bc5a639ce661e7c0c7f5b496be4d64944fd3bd97d7d59d0a0b5190e5fdf2e11a31bbd2e62046adf1c76c073893edb47b6427f8d52b60a559d1d41e9e3e1bff707747b239671cee7807f8c3ec80b316247a6a422a7624f4755898012ac21e84ce1839a4cdcc2d9a41e568c44fa0bb54422492f54fa0399aef08051f6706bff073945356c7ab616a33c59c0fd29fea83433e6fbc46fc05ed7d5cbb72111c88b0822787520fae06269b32eeaceb276e6bd42b3d1191a92df28e5efac3280bbd37b125b2e09e4552bb23a2c8dd56ea3e0891a3ad5807cc217e8c94985ed41228a55c4b4c5adfef2a870d7cc002dd6b586648e56e01fea174750385ab8c56c6af786143f84a1800bbf8e0c393e4128466b6f922c9e8528d3b5659890b6430e4cad62c0d5127dd968f5fcbca1f2a58d657d652803ab7f8db96080df808ef2a9a99bd9a533f9dd81a0b21722cf0a8a4e18a9fc7d999ee54032d316228eb570ea9839ba70a33ce1a0c0ef7a71b0715351483d64dc228a35c29ac6b27d162ea6f68945e002701177a52036ded44820e21dbf7e7e6e520e5b8df4d653845498cffca6662478dbf15373b7976d3f2313d77cf658ab49cc22afd652e12b8fd4f3e5a79171e675c82f6d09c773ceeca718ed7dad8f6432e6d5b0dad5013546e2e42e94044239ead9e6f5f94488697eeaadaba1c42e987bb8e3f0f3a8eb7dd9cff037e68ca81f4775ef91a78406903d43aa5d1eb879b1a11e7c4bd27eac28054565e628352d50e31f606764cffefaf6fb5bc937cc091de0f1d6a8ca5795d84371edca0db15bc8eac829f99b7319235c70cc7681df507b19ba3f923b2656f7d4d5cb1b025523e5b213d35d5b6eaedf957dd81165b0d17eb7ac8caa5efaa1903f9aced1327f69d0709940ec3a3d79e3393d99b7e5d1d0fc2271fd742daf75d3fc262214c3cda675e2e98594dd4cec66c3008350db2e18bddb2cfe98b5b2fefcf6cf45b00965334a3ed4090f72b0070f721c19fde15ce5943f951d19709366744f4ead99597cb4b8a968435066e1883d8f17e01e2d3c388610e69e46b6581c5e25360bbf642ccc4110f0d9eee16612aeacc49ea2aecd39fad3189f0a3486acec8fe9863b08f2338c1ccf2860a0fe20d644832ad49a18be379bb89fdd297ca8b8447cd89cfbc221ddd2b6afd59b62d86da453afc48f9415ea1fdad80400e2d3518e053638d1796564baae5bbfadeaa453210316f3516dc4b61240a8fc2100d437705bb0d66e13139253ca1a560344f75e3222305c36afe491d41c08cea5aabe4973b820335181bb76301c5f7f14efc6a892f6a0702d7dba141f71ced5c7a0630ef588817df904d88961080e9f69a53d70bd7812970836ca1f6cb919db9a39727425a0c31087273cf814411cb239b7724abc7020bb48d7eb131aa7c3d1454d451c8217e7ecb49360b152123a11fe5db55b81491d88b5ccc8161d3390b031d291a273a0aa364420b3bfb2f285a8c1a8459993a8c6f3e888566662e2800335a22367c938b1bee8dc42a90172be9911a1d627a2e2287a612a5a9d86c6b7938e86e0b23d949b865127b35d500f6c8f98077310a5286254f14b2b168326ea2e2e5a02a9a896f94f288ecea7d572b80dcc1ffbcb22dc14f8a2773104942a62e4bda92d4ad02ffc4e0d8278cf5a0e059431bece0aba302ea212b20cc5206fbe8aa57bd79b7e6e01a2c541637c37f2cf1a347680088ccda9f72eca838035eda25d9a0b356d0b7c49551672173aa8bd955409141caba1bf58b8e258236f7a01b54a61bf8b7e60de84f488ef5dcdfc903c912e21b4181d1578c30add413bde40aaffd4fd5abc1ac6f916ede90706ea2633037038d203ce9d9e9b833"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r10 = dup(r8) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) write$binfmt_format(r7, &(0x7f00000000c0)='-1\x00', 0x3) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='-\x00', &(0x7f0000000200)="741ba337a44f6d128a29dc09a6422b17ec9e5ee9411a1f74e4cdc78d036fbd7cfdf4b33ee6615129e647c95b7d94dd2b8bb75b0a5858ff195a852ccc21817690447a94168dff43e20961", 0x4a) 3.710258926s ago: executing program 2 (id=439): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r2, 0x0, &(0x7f0000000540)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r4, 0x2, [0x80000001, 0x8]}, {r3, 0x0, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="40011e0000004d61501d015a626c65b30000100000000000905800ba9415f86eb6321f70"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) write(r6, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x330f, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x101}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x68}}, 0x4000000) r8 = memfd_create(&(0x7f00000007c0)='\x9d#\x18\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\t\x12\b\x01\xd9\x04\x00/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\x02\x00\x00\x00\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xddW\xe6}\xc5\xa4\x8f\x98\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8\xac\x00P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\x01\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0m\xc9\x82<\xa9\xdc\xddRU\t\xe9\xbah\xb6\xb2\xea-{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DL\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xd1\xc3\xe8?.\x8a)*\xdeag\xc6\xf3\xd6\x94\x9dn\x06\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\xb71~2{@:\x97^\xbfcu9\x8c<^ll\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xd7\x99\x19pn\xbe\xb8\f#\xe2\x8f\x02\xedk\x10\x1b\x9c\x10\xd5\xab\x95Yn\xe9\x00\xb5\xa29\xd7\xd1\bs\xd0x0\xf2F\xaam\xd8\\\x16\x98\x86\xbe\xbc|h+\t.\x0f\x1b?\xbf5\x9fW\xa7\x02\x14J\x16|TV\x1bW\xd6r\nR\x82\xe0\x88%\xfa\x1f\xae\xcb\xb5g\xd5\x9a\x17\xd2F3A\x03-\xe22\x1b\xb4\xb5\b\x8b\xe79\xbew#2\xbd`', 0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfdfd, 0x80}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x4) write$yama_ptrace_scope(r6, &(0x7f0000000100)='2\x00', 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mmap(&(0x7f0000504000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r0, 0xb6d61000) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8, 0x1, 0x3a4, 0x3ff}, {0x7, 0x7, 0xa, 0x5}}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[], 0x266440) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002a666ee08d219120483690102031b0902120001810320de0904b00900ffffff01"], &(0x7f0000000c80)={0x0, 0x0, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]}) 2.146297499s ago: executing program 2 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0f0035bd70004b207b2d7e25ed10efc415000000006c00000008000300", @ANYRES32=r2, @ANYBLOB="08009f00020000000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.631842013s ago: executing program 2 (id=441): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) faccessat(0xffffffffffffff9c, 0x0, 0x2) sendfile(r0, r0, 0x0, 0x15) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000040)={0x0, 0xf, 0x1, 0x9, 0x2, [0x0, 0x0, 0x0], [0x3, 0x0, 0x4, 0xdceb], [0x8, 0x8, 0x9, 0x7], [0x0, 0x3, 0x0, 0xc]}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0x3) close(0x4) r5 = socket(0x5, 0x4, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000001c0)={r7, 0xb2c7, 0x0, 0x6, 0x0, [], [0x4, 0xc, 0x7, 0x6], [0xffe2, 0x401, 0x2, 0x3], [0x8000000000000001, 0x2, 0xff, 0xb8]}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000280)={0x821b, 0x5, {0xffffffffffffffff}, {0xee00}, 0x3, 0xfca1}) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, r8, &(0x7f00000002c0)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000240)) 1.241941643s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000040)={0x79, 0x3}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x1ff, 0xa, 0x7ff, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x7, 0x10b200) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="de0ca35a4ec6d294d1dcae233364e9641be555e8a8580ca1c43c22b1325f0c2d4d3bbfdb816e35a6ecefc2698fb6f2119632e8e45942d2860d946cf627cc8fc459a51aedc15dd590069b53a0fad359566b7dde434b1db8e0a50e9e13e3759c3d7283ab1a56795a1ae64a5282dda27a480a52fc1cbb16ba351942caaa26c21ea6949dbe2487e341585f97cbf1cc1c51b72d10e43739fda76a50f6b41e0cf4f546ec440683c6f296e34c5cc42392516de14f50d091b1d14f56", 0xb8}], 0x1) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r1, 0x0, 0x7, 0xbb, &(0x7f0000000200)="7b369af6e64213150e6a56438b98c6279551838a5089bfd9e8d4151e4765671d13f980d7fe9ea7d53c53eed7ccb094b9b7ed93d03149fd91a3ed074e16e184d1857fcdb0d37fd5e889f4a362d10bcc116ee928e234cf5dccacc3705f2aa1044e73c3baf486f7ac7733bf92c2afc26cb15edefda99b42ba6f2c136b13f356f93776baf634bd31139f27e2d522145395f7df554c4eb54a928ff5dcb11b750aca1810d999e57438327bef83b3d61cdc15bf52c6c8b3ec4a5220f1d6a8", 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x1, r1}) r4 = signalfd(r1, &(0x7f0000000380)={[0x3c45]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000440)={&(0x7f00000003c0)=[r3], &(0x7f0000000400)=[0x10001, 0x8000000000000000, 0x3, 0x6, 0x5], 0x1, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000500)={r5}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000005c0)=0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r6, 0x0) splice(r1, &(0x7f0000000600)=0x2, r2, &(0x7f0000000640)=0x7fffffffffffffff, 0x4, 0x7) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xcb9, 0x40}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000800)=""/195) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) bind$vsock_stream(r1, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x800) accept$nfc_llcp(r1, &(0x7f0000000ac0), &(0x7f0000000b40)=0x60) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000f00)={{'\x00', 0x1}, {0xcd}, 0x8, 0x0, 0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)="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", 0x12f, 0x0, &(0x7f0000000d40)={0x2, 0x14c, {0x0, 0xc, 0xde, "f359a612874f5596fab5a43b91d94d3eef4217a231cf7bd4bc61b01a8c84ca268e8d8768a526b16790f386c5c00ae937345455e93f5685bf4481a71c63bcb03fe663d32202d80271e2d8c79e956961c3bed36137253b3339742d40ddf1787f0868fbdb2cae971f44c337099b608a5bd208a34714668513d134aac5e7797e08e4fd65c7188c003eeb10c5a0a8f6d75eb79703ac6b2d7378caccef27bf4e44522e50a6fe4b0f582239294e0b910c96b489fbd23b03b563e7c1a09bbbfce0597c20a934c94e29439e0cc79f78a88bd85579a8e947a8ffd76f877e69edd2f242", 0x61, "e1b725312ad7cd68848e22ad066a9cf4c8101fd34403add58a0d93f226e3f0389b57075f38bfcdaeb1f2a46f89fc45c71d9c06b9066c50f5d6fe1910fa7000780c7e627fbf608c7931081304368f132a7174d324ed5f45d660d9dcfaca8ae3b15a"}, 0x5e, "302493cbc07b9c4debf8c677bcfda50b714b1c8848315736f1f4c65c4521074226147ba98b31b570a675e18cd8e6a1e01a2ed7d65d14b542dae5563cc9610924213ebfbc16ebbf3d5680d957de90011707e617089efd905c9313dfff9a70"}, 0x1b6}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, r7, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x200, 0x3}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5ea0cb1e51b7"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x48}}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) fstatfs(r2, &(0x7f00000010c0)=""/131) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r4, 0xc0106450, &(0x7f0000001180)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, &(0x7f00000011c0)={r9}) 1.241596748s ago: executing program 3 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030e00d1fd14000000476b031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) socket(0x10, 0x800, 0xe) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @private2, 0x3}, 0x1c) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='bfs\x00', 0x800000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01002cbd7086c52bd94c00ff55f7dbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.152713443s ago: executing program 2 (id=444): socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0xf, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@private2, 0x1, 0xea5cb00d66847e23, 0xff, 0xf, 0x9, 0x5}, 0x20) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@empty, @multicast2}, &(0x7f0000000180)=0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000540)=0x1, 0x4) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='.request_key_auth\x00', 0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x20000004, &(0x7f0000000500)={0x11, 0x12, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) file_setattr(r10, 0x0, &(0x7f0000001f80)={0x101a, 0x5, 0x6, 0xfffffffc, 0x9}, 0x18, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x69, 0x1, 0x6, 0x3, 0x8}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e23, 0xdb83, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, [0x2, 0x2, 0x8, 0xffffffff, 0x7, 0xff, 0x6a3c, 0x7, 0x1, 0x1, 0xe6b, 0x5, 0x3, 0x1ff, 0x5e0]}, &(0x7f00000004c0)=0x100) openat2(r9, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)={0x203100, 0x89, 0x6}, 0x18) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="130000001900010000000000000000001d"], 0x184}, 0x1, 0x0, 0x0, 0x8845}, 0x10) 1.127198173s ago: executing program 0 (id=445): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600047ca8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd2, 0x87, 0x49, 0x40, 0x1740, 0x9707, 0x34de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100b100000040ef17ee6000000000000109022400010000e80b00010300020009210000000122e301090581038936050a6f"], 0x0) syz_usb_disconnect(r3) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f4dd2e584b7b8d4170303100b14100407ad0e475b1bf392818f68c2ef4b7feda50510021c3206001313a133d3eaf4f420cb"], 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async, rerun: 32) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x2, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) (async) sendto$inet6(r2, &(0x7f0000000180)="a7", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xb, 0x0, &(0x7f0000000400)) (async) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000b00)={&(0x7f0000000240)=0x4, 0x65, &(0x7f0000000b40), &(0x7f00000002c0)}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x8040, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x2f, 0x0, @empty, @empty=0xe0000000}}}}) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000140)={&(0x7f0000000040)=[{0x0, 0xffff, 0x9, 0x92, 0xe3a}, {0x3, 0x9e7, 0xb, 0x8, 0x9}, {0x0, 0x4, 0x4, 0x2, 0x101}, {0x8, 0x3, 0x9, 0x100000000, 0x1}, {0xe, 0xd0, 0x7fffffffffffffff, 0x4, 0xfffff000}], 0x5, 0x28, 0x1, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (rerun: 64) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x1c93) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000101040000000000000000020000001400188008000140000000fe008008000100e000000108000200e00000010c0002800500010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 745.809821ms ago: executing program 3 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000b80)={'syz0\x00', {0xfffd, 0x6, 0x0, 0xf000}, 0x4, [0x6, 0x4, 0x7fff, 0xe00, 0x8d94, 0x3, 0x5, 0x8, 0xe, 0xffff, 0x6, 0x10001, 0xfffffffa, 0x77c, 0x4, 0x7, 0x7c, 0x8, 0x1, 0x1, 0xf2, 0x7, 0xce3, 0x4, 0x3, 0x838, 0xfffffffe, 0x101, 0x1, 0x0, 0x5, 0x5, 0x9, 0x3, 0xd4a2, 0xffffffff, 0x10000, 0x8, 0x5, 0x0, 0x4, 0x5, 0x6, 0x2, 0x81, 0x6, 0x1, 0x2, 0x40, 0x7, 0x4, 0x8, 0x3bb, 0x2, 0x6, 0xab, 0x7f, 0xffc8, 0x4, 0x6, 0x3ff, 0x3ffffff, 0x3, 0xd2cf], [0x7fffffff, 0x10001, 0x6, 0x9, 0x8, 0x0, 0x4d, 0x8000, 0x0, 0x4e16d7d1, 0xfffffffb, 0x3, 0x8, 0x6fc, 0x2, 0x4, 0x7fffffff, 0x4efa, 0x6, 0x4, 0x6, 0x1, 0x1ff, 0x2, 0x7, 0x200, 0x9, 0x9, 0x3, 0x3, 0x10000, 0x100, 0x5, 0x8001, 0x100, 0x5, 0x3, 0x5, 0x9, 0x4, 0x2, 0x87, 0x0, 0x4, 0x6, 0x40a, 0x5, 0x800, 0x2, 0x770, 0x9, 0x1ff800, 0x6b8000, 0x5028, 0x5, 0x6, 0x9, 0x8, 0x7, 0xff, 0x3, 0xf30, 0x8, 0xfffffff7], [0x41, 0x5, 0x1c00, 0x1c000, 0x4, 0x8, 0x1, 0x98d, 0x4, 0xfffffffe, 0x6, 0x3ff, 0x0, 0x1, 0x8, 0x4, 0x800, 0x9, 0x8000, 0x800, 0x3, 0x1000, 0x9, 0x9, 0x98b, 0x9, 0x0, 0x2, 0x8000, 0x2, 0x9, 0x6, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x3, 0x3, 0x100, 0x5, 0x80000000, 0x8, 0x4, 0xa, 0x4, 0x6, 0x280000, 0x10, 0x5, 0x0, 0x4, 0xa, 0x7, 0x2, 0x0, 0x7fffffff, 0x1000, 0x6, 0x2, 0x4b9, 0x8, 0x10001], [0x5, 0x6, 0x5, 0x200, 0x3ff, 0x3, 0x0, 0x0, 0x4, 0xf0, 0x2e6, 0x0, 0x7b4285dc, 0x8, 0x1e0000, 0x3e4, 0xffffff3d, 0x3, 0x8, 0x2, 0x9, 0xb, 0x400, 0xffffffff, 0x200, 0x2, 0x7, 0xd, 0x9, 0x1, 0x7, 0x7, 0x7ff, 0x4, 0x1, 0xff, 0x8, 0xb0, 0x9, 0xedb, 0x1ff, 0x562, 0x3ee, 0x40, 0x10000000, 0x9, 0x6, 0x7, 0x3, 0x6, 0x3, 0x3fc, 0x6, 0x8, 0x6, 0x10001, 0x0, 0x9, 0x8, 0x9, 0xa, 0x101, 0x5, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'syz_tun\x00', 0x1000}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x30000014}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f00000002c0)=0x100) 428.762917ms ago: executing program 3 (id=447): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x1, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x5, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd4fd, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}]}, @NFCTH_TUPLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r7 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r7, &(0x7f0000000140)=@generic={0x1f, "aaaaaaaaaa000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}, 0x80) connect(r7, &(0x7f0000000180)=@generic={0x1f, "0102030405060100"}, 0x80) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 355.577161ms ago: executing program 4 (id=422): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f00000005c0)={0x74, 0x0, 0x19fe33930c640f33}) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x485, 0x0, 0x100000000}]}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x138) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r6, 0x402, 0x8000001c) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) r8 = syz_open_procfs(0x0, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x8}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r4, 0x1, 0x9) openat(r9, &(0x7f0000000200)='.\x00', 0x4a6900, 0x11) 70.138446ms ago: executing program 4 (id=448): pipe(&(0x7f00000007c0)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) (async) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1, 0x0, 0x0, 0x4c0c4}, 0x0) 0s ago: executing program 2 (id=449): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e00005c7f553d6c0f8185f1c610b60fa228ce", 0x68}], 0x1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): has invalid wMaxPacketSize 0 [ 120.230468][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.230493][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.232710][ T9] usb 1-1: config 0 descriptor?? [ 120.269792][ T5722] usb 3-1: device descriptor read/64, error -71 [ 120.319611][ T1217] usb 4-1: Using ep0 maxpacket: 8 [ 120.320449][ T1217] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.321534][ T1217] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 120.321579][ T1217] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.321601][ T1217] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.321624][ T1217] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.321646][ T1217] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.321677][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.500668][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.509933][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.526480][ T5722] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 120.540278][ T1217] usb 4-1: usb_control_msg returned -32 [ 120.540332][ T1217] usbtmc 4-1:16.0: can't read capabilities [ 120.658693][ T5722] usb 3-1: device descriptor read/64, error -71 [ 120.666451][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 120.688772][ T9] sony 0003:054C:042F.0006: can't set operational mode: step 3, ignoring [ 120.769995][ T5722] usb usb3-port1: attempt power cycle [ 120.770987][ T1217] tipc: Node number set to 2886997162 [ 120.826994][ T9] input: HID 054c:042f as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:042F.0006/input/input14 [ 120.903755][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.904197][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.927879][ T9] sony 0003:054C:042F.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0 [ 121.108708][ T5722] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 121.130271][ T5722] usb 3-1: device descriptor read/8, error -71 [ 121.159132][ T5747] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.309906][ T5747] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.314539][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.314567][ T5747] usb 2-1: Product: syz [ 121.314653][ T5747] usb 2-1: Manufacturer: syz [ 121.314670][ T5747] usb 2-1: SerialNumber: syz [ 121.368734][ T5722] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 121.389867][ T5722] usb 3-1: device descriptor read/8, error -71 [ 121.499037][ T5722] usb usb3-port1: unable to enumerate USB device [ 121.533127][ T5747] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.844233][ T5620] usb 2-1: USB disconnect, device number 14 [ 121.989229][ T5769] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 122.118679][ T5769] usb 1-1: device descriptor read/64, error -32 [ 122.358810][ T5769] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 122.502882][ T6378] CIFS: Attempting to mount //127.0.0.1/share [ 122.506189][ T6378] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.506277][ T6378] CIFS: VFS: cifs_mount failed w/return code = -111 [ 122.509032][ T5769] usb 1-1: device descriptor read/64, error -32 [ 122.568819][ T5747] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 122.569279][ T5747] ath9k_htc: Failed to initialize the device [ 122.571161][ T5620] usb 2-1: ath9k_htc: USB layer deinitialized [ 122.760994][ T5769] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 122.789297][ T5769] usb 1-1: device descriptor read/8, error -32 [ 122.960837][ T5620] usb 4-1: USB disconnect, device number 10 [ 123.205439][ T6389] program syz.2.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.559490][ T5620] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.704384][ T9] usb 1-1: USB disconnect, device number 12 [ 123.721600][ T5620] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 123.722752][ T5620] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 123.722775][ T5620] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 123.730605][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.730644][ T5620] usb 4-1: Product: syz [ 123.730659][ T5620] usb 4-1: Manufacturer: syz [ 123.730672][ T5620] usb 4-1: SerialNumber: syz [ 123.739115][ T5620] usb 4-1: config 0 descriptor?? [ 123.741315][ T6392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.741489][ T6392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.923421][ T6405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.990348][ T6392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.990458][ T6392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.062348][ T6404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.247530][ T6416] ufs: You didn't specify the type of your ufs filesystem [ 124.247530][ T6416] [ 124.247530][ T6416] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 124.247530][ T6416] [ 124.247530][ T6416] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 124.286482][ T6416] afs: Unknown parameter 'fsuuid' [ 124.287488][ T6418] afs: Unknown parameter 'fsuuid' [ 124.376583][ T6422] sda1: Can't mount, would change RO state [ 124.394898][ T5620] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 124.395286][ T6426] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.169'. [ 124.636731][ T6430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.869770][ T5722] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 124.945520][ T6439] nbd1: detected capacity change from 0 to 127 [ 124.958782][ T6439] block nbd1: NBD_DISCONNECT [ 124.959477][ T6439] block nbd1: Disconnected due to user request. [ 124.959497][ T6439] block nbd1: shutting down sockets [ 124.961600][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.961766][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.962295][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.962382][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 124.963243][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.963324][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 124.963344][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.963421][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 124.963936][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 124.963964][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.963997][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 124.964011][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 124.964025][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 124.964899][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 124.964925][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.964940][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 124.965128][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.965232][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.966196][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 124.966368][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.973048][ T5943] ldm_validate_partition_table(): Disk read failed. [ 124.973716][ T5943] Dev nbd1: unable to read RDB block 0 [ 124.975812][ T5943] nbd1: unable to read partition table [ 124.988263][ T59] IPVS: starting estimator thread 0... [ 124.995291][ T5943] ldm_validate_partition_table(): Disk read failed. [ 124.996346][ T5943] Dev nbd1: unable to read RDB block 0 [ 124.999524][ T5943] nbd1: unable to read partition table [ 125.004836][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.014095][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.019286][ T5620] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 125.058934][ T5620] usb 4-1: USB disconnect, device number 11 [ 125.071384][ T6440] IPVS: using max 27 ests per chain, 64800 per kthread [ 125.099938][ T5722] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 125.126273][ T5722] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.126302][ T5722] usb 3-1: config 0 has no interface number 0 [ 125.126345][ T5722] usb 3-1: config 0 interface 1 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.126371][ T5722] usb 3-1: config 0 interface 1 altsetting 216 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.126393][ T5722] usb 3-1: config 0 interface 1 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 125.126412][ T5722] usb 3-1: config 0 interface 1 has no altsetting 0 [ 125.126433][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.214638][ T5722] usb 3-1: config 0 descriptor?? [ 125.261057][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.439652][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 125.441114][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.441144][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.443051][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.443075][ T9] usb 2-1: Product: syz [ 125.443089][ T9] usb 2-1: Manufacturer: syz [ 125.499905][ T9] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 125.673559][ T5722] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:258A:6A88.0007/input/input15 [ 125.754351][ T5722] itetech 0003:258A:6A88.0007: input,hidraw0: USB HID v80.00 Joystick [HID 258a:6a88] on usb-dummy_hcd.2-1/input1 [ 125.948695][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.100018][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.101744][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.126639][ T43] usb 4-1: config 0 descriptor?? [ 126.140466][ T43] cp210x 4-1:0.0: cp210x converter detected [ 126.146654][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 126.160529][ T9] usb 2-1: USB disconnect, device number 15 [ 126.165311][ T9] mos7840 2-1:1.0: device disconnected [ 126.538227][ T43] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 126.542800][ T6442] program syz.3.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.618738][ T5722] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.768255][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 126.772417][ T30] audit: type=1800 audit(1789950642.942:3): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name=09 dev="sda1" ino=1262 res=0 errno=0 [ 126.799143][ T5722] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 126.801791][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.801816][ T5722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.801863][ T5722] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.806792][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.806820][ T5722] usb 1-1: Product: syz [ 126.806836][ T5722] usb 1-1: Manufacturer: syz [ 126.806850][ T5722] usb 1-1: SerialNumber: syz [ 126.847362][ T5722] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 126.911623][ T6459] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.962238][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.966174][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.055216][ T6464] rust_binder: 6462:6464 got transaction to invalid handle 1 [ 127.055238][ T6464] rust_binder: 6462:6464 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 127.078342][ T9] rust_binder: 6462: undelivered TRANSACTION_ERROR: 29201 [ 127.196396][ T6468] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.215781][ T6468] overlayfs: failed to resolve '/=./file0': -2 [ 127.538823][ T1217] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 127.569178][ T9] usb 3-1: USB disconnect, device number 21 [ 127.689417][ T1217] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 127.690468][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.695325][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.695355][ T1217] usb 2-1: Product: syz [ 127.695385][ T1217] usb 2-1: Manufacturer: syz [ 127.695394][ T1217] usb 2-1: SerialNumber: syz [ 127.698061][ T1217] usb 2-1: config 0 descriptor?? [ 127.813740][ T6474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 127.813769][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 127.818135][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 127.823643][ T6475] vhci_hcd: connection closed [ 127.827283][ T49] vhci_hcd vhci_hcd.2: stop threads [ 127.827746][ T49] vhci_hcd vhci_hcd.2: release socket [ 127.827777][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 127.949933][ T1217] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 128.152360][ T6470] netlink: 468 bytes leftover after parsing attributes in process `syz.1.183'. [ 128.153783][ T1217] usb 2-1: USB disconnect, device number 16 [ 128.679183][ T9] usb 4-1: USB disconnect, device number 12 [ 128.684919][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.690007][ T9] cp210x 4-1:0.0: device disconnected [ 128.778670][ T5620] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 128.948651][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 129.012487][ T5620] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.012530][ T5620] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 129.013749][ T5620] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 129.013775][ T5620] usb 3-1: can't read configurations, error -71 [ 129.309229][ T5722] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC error code control 1 on unit 3: -71 (exp. 1). [ 129.309366][ T5722] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 129.355888][ T5722] usb 1-1: USB disconnect, device number 13 [ 129.878776][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.978800][ T5722] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.006310][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.006815][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.029300][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 130.033500][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.033528][ T10] usb 4-1: Product: syz [ 130.033543][ T10] usb 4-1: Manufacturer: syz [ 130.033558][ T10] usb 4-1: SerialNumber: syz [ 130.053519][ T10] usb 4-1: invalid playback endpoint [ 130.128674][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 130.129631][ T5722] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 130.130831][ T5722] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.130853][ T5722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.132821][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.132839][ T5722] usb 2-1: Product: syz [ 130.132847][ T5722] usb 2-1: Manufacturer: syz [ 130.132856][ T5722] usb 2-1: SerialNumber: syz [ 130.153174][ T5722] usb 2-1: config 0 descriptor?? [ 130.238678][ T5620] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 130.306619][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.307116][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.314340][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.317316][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.320134][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.324776][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.390042][ T5620] usb 3-1: not running at top speed; connect to a high speed hub [ 130.390082][ T5620] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 130.391291][ T5620] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.391337][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.440082][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 130.444629][ T5722] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 130.452175][ T5620] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 130.487284][ T5722] imon:send_packet: packet tx failed (-71) [ 130.499910][ T5722] imon 2-1:0.0: panel buttons/knobs setup failed [ 130.598670][ T5722] rc_core: IR keymap rc-imon-pad not found [ 130.598692][ T5722] Registered IR keymap rc-empty [ 130.598787][ T5722] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 130.598807][ T5722] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 130.601250][ T5722] imon:send_packet: packet tx failed (-71) [ 130.612910][ T5620] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 130.614972][ T5620] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 130.615023][ T5620] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 130.620421][ T5722] imon 2-1:0.0: remote input dev register failed [ 130.620598][ T5722] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 130.623057][ T5620] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 130.640700][ T5620] usb 3-1: USB disconnect, device number 24 [ 130.765394][ T5722] imon 2-1:0.0: unable to initialize intf0, err 0 [ 130.765421][ T5722] imon:imon_probe: failed to initialize context! [ 130.765436][ T5722] imon 2-1:0.0: unable to register, err -19 [ 130.780107][ T6520] tmpfs: Unknown parameter '@' [ 130.794506][ T5722] usb 2-1: USB disconnect, device number 17 [ 131.119011][ T5722] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.260098][ T5620] usb 4-1: USB disconnect, device number 13 [ 131.276282][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 131.278497][ T5722] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 131.295485][ T5722] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.295522][ T5722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.316533][ T5722] usb 2-1: string descriptor 0 read error: -22 [ 131.316688][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.334958][ T5722] usb 2-1: config 0 descriptor?? [ 131.361006][ T5722] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 131.685379][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 131.688715][ T5722] rc_core: IR keymap rc-imon-pad not found [ 131.688734][ T5722] Registered IR keymap rc-empty [ 131.688851][ T5722] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 131.688869][ T5722] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.690571][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.691464][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.698264][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.699186][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.700547][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.701399][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.706156][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.707246][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.708342][ T6530] kvm_intel: kvm [6529]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x2 [ 131.829986][ T5722] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 131.833281][ T5722] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 131.836976][ T5722] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:18> initialized [ 131.939170][ T5695] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 132.108682][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 132.109480][ T5695] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 132.110868][ T5695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 132.110912][ T5695] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 132.110971][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.111006][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.177584][ T5695] usb 3-1: config 0 descriptor?? [ 132.248727][ T5620] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 132.416717][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.416782][ T5620] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 132.424034][ T5620] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 132.424061][ T5620] usb 4-1: config 8 has no interface number 0 [ 132.424100][ T5620] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 132.424124][ T5620] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 132.424147][ T5620] usb 4-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.428701][ T5620] usb 4-1: string descriptor 0 read error: -22 [ 132.428836][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.437819][ T6542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.450253][ T5620] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 132.482986][ T5620] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 132.807667][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.816661][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.975362][ T10] usb 4-1: USB disconnect, device number 14 [ 133.003415][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 133.004383][ T10] metro_usb 4-1:8.109: device disconnected [ 133.125540][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126140][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198824][ T5620] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 133.285175][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 133.289550][ T10] usb 2-1: USB disconnect, device number 18 [ 133.363103][ T5620] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 133.364607][ T5620] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.364661][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.400176][ T5620] usb 1-1: config 0 descriptor?? [ 133.719547][ T6563] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 133.719727][ T6563] netlink: 156 bytes leftover after parsing attributes in process `syz.2.210'. [ 133.722061][ T6564] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 133.722112][ T6564] netlink: 156 bytes leftover after parsing attributes in process `syz.2.210'. [ 133.752520][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.753886][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.802222][ T3371] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.827388][ T5620] hid_parser_main: 30 callbacks suppressed [ 133.827415][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x1 [ 133.827496][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x5 [ 133.827523][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x6 [ 133.827550][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827576][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827600][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827625][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827650][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827673][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.827697][ T5620] logitech 0003:046D:C298.0008: unknown main item tag 0x0 [ 133.912290][ T5620] logitech 0003:046D:C298.0008: hidraw0: USB HID v0.c1 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 133.912327][ T5620] logitech 0003:046D:C298.0008: no inputs found [ 134.150602][ T1217] usb 1-1: USB disconnect, device number 14 [ 134.582399][ T6574] block2mtd: illegal erase size [ 134.858782][ T1217] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 135.008753][ T1217] usb 2-1: Using ep0 maxpacket: 8 [ 135.011173][ T1217] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.013511][ T1217] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 135.013596][ T1217] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.013620][ T1217] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.013645][ T1217] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.013669][ T1217] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.013742][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.128673][ T5620] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.243435][ T1217] usb 2-1: usb_control_msg returned -32 [ 135.243521][ T1217] usbtmc 2-1:16.0: can't read capabilities [ 135.284125][ T5620] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.301853][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.301884][ T5620] usb 4-1: Product: syz [ 135.301899][ T5620] usb 4-1: Manufacturer: syz [ 135.301913][ T5620] usb 4-1: SerialNumber: syz [ 135.308027][ T30] audit: type=1800 audit(1789950651.472:4): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.216" name="file0" dev="overlay" ino=325 res=0 errno=0 [ 135.398432][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.408798][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.510909][ T5695] usbhid 3-1:0.0: can't add hid device: -71 [ 135.511016][ T5695] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 135.515746][ T5695] usb 3-1: USB disconnect, device number 25 [ 135.606175][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.608414][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.938114][ T6579] sctp: [Deprecated]: syz.3.213 (pid 6579) Use of int in maxseg socket option. [ 135.938114][ T6579] Use struct sctp_assoc_value instead [ 136.343608][ T5620] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 136.343649][ T5620] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.351274][ T5620] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.363992][ T5620] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 136.378329][ T5620] usb 4-1: USB disconnect, device number 15 [ 136.394729][ T5695] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.549135][ T5695] usb 1-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 136.549975][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.552070][ T5695] usb 1-1: config 0 descriptor?? [ 136.576612][ T5695] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 136.919123][ T5620] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 136.921937][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 136.962509][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.964498][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.068668][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 137.069464][ T5620] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.070824][ T5620] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.070874][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.070901][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.070922][ T5620] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.070936][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.072529][ T5620] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.072553][ T5620] usb 3-1: Manufacturer: syz [ 137.075237][ T5620] usb 3-1: config 0 descriptor?? [ 137.340345][ T5620] rc_core: IR keymap rc-hauppauge not found [ 137.340361][ T5620] Registered IR keymap rc-empty [ 137.340696][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.362143][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.380207][ T5620] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 137.382843][ T5620] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 137.387533][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.398852][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.419112][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.438756][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.459564][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.481552][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.498851][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.513885][ T10] usb 2-1: USB disconnect, device number 19 [ 137.519596][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.544549][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.561576][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.591516][ T5620] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.591544][ T5620] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.740220][ T6601] vivid-000: ================= START STATUS ================= [ 137.740297][ T6601] vivid-000: Test Pattern: 75% Colorbar [ 137.740326][ T6601] vivid-000: Fill Percentage of Frame: 100 [ 137.740348][ T6601] vivid-000: Horizontal Movement: No Movement [ 137.740368][ T6601] vivid-000: Vertical Movement: No Movement [ 137.740397][ T6601] vivid-000: OSD Text Mode: All [ 137.740445][ T6601] vivid-000: Show Border: false [ 137.740465][ T6601] vivid-000: Show Square: false [ 137.740484][ T6601] vivid-000: Sensor Flipped Horizontally: false [ 137.740505][ T6601] vivid-000: Sensor Flipped Vertically: false [ 137.740524][ T6601] vivid-000: Insert SAV Code in Image: false [ 137.740544][ T6601] vivid-000: Insert EAV Code in Image: false [ 137.740593][ T6601] vivid-000: Insert Video Guard Band: false [ 137.740614][ T6601] vivid-000: Reduced Framerate: false [ 137.740635][ T6601] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 137.740657][ T6601] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 137.740677][ T6601] vivid-000: Enable Capture Cropping: true [ 137.740696][ T6601] vivid-000: Enable Capture Composing: true [ 137.740745][ T6601] vivid-000: Enable Capture Scaler: true [ 137.740766][ T6601] vivid-000: Timestamp Source: End of Frame [ 137.740786][ T6601] vivid-000: Colorspace: sRGB [ 137.740805][ T6601] vivid-000: Transfer Function: Default [ 137.740824][ T6601] vivid-000: Y'CbCr Encoding: Default [ 137.740843][ T6601] vivid-000: HSV Encoding: Hue 0-179 [ 137.740892][ T6601] vivid-000: Quantization: Default [ 137.740908][ T6601] vivid-000: Apply Alpha To Red Only: false [ 137.740927][ T6601] vivid-000: Standard Aspect Ratio: 4x3 [ 137.740946][ T6601] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 137.740971][ T6601] vivid-000: DV Timings: 640x480p59 inactive [ 137.740996][ T6601] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 137.741046][ T6601] vivid-000: Maximum EDID Blocks: 2 [ 137.741067][ T6601] vivid-000: Limited RGB Range (16-235): false [ 137.741087][ T6601] vivid-000: Rx RGB Quantization Range: Automatic [ 137.741108][ T6601] vivid-000: Power Present: 0x00000001 [ 137.741128][ T6601] tpg source WxH: 320x180 (R'G'B) [ 137.741141][ T6601] tpg field: 1 [ 137.741179][ T6601] tpg crop: (0,0)/320x180 [ 137.741192][ T6601] tpg compose: (0,0)/320x180 [ 137.741206][ T6601] tpg colorspace: 8 [ 137.741214][ T6601] tpg transfer function: 0/0 [ 137.741224][ T6601] tpg quantization: 0/0 [ 137.741233][ T6601] tpg RGB range: 0/2 [ 137.741243][ T6601] vivid-000: ================== END STATUS ================== [ 137.766688][ T5747] usb 3-1: USB disconnect, device number 26 [ 138.017509][ T6599] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.220'. [ 138.131604][ T5695] gspca_stv06xx: I2C: Read error writing address: -71 [ 138.135722][ T5695] usb 1-1: USB disconnect, device number 15 [ 138.511465][ T6623] MTD: Couldn't look up 'mtdblock0': -2 [ 138.524517][ T30] audit: type=1800 audit(1789950654.682:5): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 138.990118][ T5747] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 138.997843][ T6615] CIFS: Attempting to mount //::1/share [ 139.140412][ T5747] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 139.147320][ T6615] CIFS: VFS: Error connecting to socket. Aborting operation. [ 139.147380][ T6615] CIFS: VFS: cifs_mount failed w/return code = -111 [ 139.149814][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.149842][ T5747] usb 4-1: Product: syz [ 139.149855][ T5747] usb 4-1: Manufacturer: syz [ 139.149867][ T5747] usb 4-1: SerialNumber: syz [ 139.188881][ T5620] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 139.338662][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 139.339657][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.341338][ T5620] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 139.341379][ T5620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.341442][ T5620] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.341467][ T5620] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.341536][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.503954][ T5747] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 139.504210][ T5747] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 139.526192][ T5747] usb 4-1: USB disconnect, device number 16 [ 139.572571][ T5620] usb 3-1: GET_CAPABILITIES returned 0 [ 139.572603][ T5620] usbtmc 3-1:16.0: can't read capabilities [ 139.708724][ T1217] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 139.776437][ T5722] usb 3-1: USB disconnect, device number 27 [ 139.848695][ T1217] usb 2-1: device descriptor read/64, error -71 [ 140.088837][ T1217] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 140.220332][ T1217] usb 2-1: device descriptor read/64, error -71 [ 140.330610][ T1217] usb usb2-port1: attempt power cycle [ 140.668856][ T1217] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 140.671283][ T6668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.240'. [ 140.708805][ T1217] usb 2-1: device descriptor read/8, error -71 [ 140.949036][ T1217] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 140.971455][ T1217] usb 2-1: device descriptor read/8, error -71 [ 141.080370][ T1217] usb usb2-port1: unable to enumerate USB device [ 141.127037][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.127557][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.164723][ T6683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 141.359100][ T1217] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 141.481311][ T6690] sg_write: data in/out 224704/136 bytes for SCSI command 0x0-- guessing data in; [ 141.481311][ T6690] program syz.0.245 not setting count and/or reply_len properly [ 141.518794][ T1217] usb 3-1: Using ep0 maxpacket: 8 [ 141.519732][ T1217] usb 3-1: New USB device found, idVendor=9b8d, idProduct=a434, bcdDevice=62.28 [ 141.519775][ T1217] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 141.522690][ T1217] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 141.522749][ T1217] usb 3-1: can't read configurations, error -61 [ 141.639097][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 141.657752][ T1217] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 141.788922][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 141.790188][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.791566][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.791618][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.791647][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 141.791673][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.791694][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.791738][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.797476][ T43] usb 4-1: config 0 descriptor?? [ 141.825282][ T1217] usb 3-1: Using ep0 maxpacket: 8 [ 141.885558][ T1217] usb 3-1: New USB device found, idVendor=9b8d, idProduct=a434, bcdDevice=62.28 [ 141.885605][ T1217] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 141.909135][ T1217] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 141.909179][ T1217] usb 3-1: can't read configurations, error -61 [ 141.909476][ T1217] usb usb3-port1: attempt power cycle [ 142.000248][ T43] rc_core: IR keymap rc-hauppauge not found [ 142.000273][ T43] Registered IR keymap rc-empty [ 142.000445][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.031394][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.044900][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.050770][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.055742][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 142.081756][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 142.103337][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.119689][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.138956][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.143926][ T6702] smc: net device erspan0 applied user defined pnetid SYZ1 [ 142.164307][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.178759][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.199550][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.217998][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.227659][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.237882][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.247140][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.258735][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.258897][ T1217] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 142.286843][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.286985][ T1217] usb 3-1: Using ep0 maxpacket: 8 [ 142.287572][ T1217] usb 3-1: New USB device found, idVendor=9b8d, idProduct=a434, bcdDevice=62.28 [ 142.287612][ T1217] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 142.306181][ T6710] netlink: 188 bytes leftover after parsing attributes in process `syz.0.250'. [ 142.330673][ T1217] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 142.330714][ T1217] usb 3-1: can't read configurations, error -61 [ 142.332999][ T43] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 142.333023][ T43] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 142.336936][ T43] usb 4-1: USB disconnect, device number 17 [ 142.458762][ T1217] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 142.482507][ T1217] usb 3-1: Using ep0 maxpacket: 8 [ 142.483090][ T1217] usb 3-1: New USB device found, idVendor=9b8d, idProduct=a434, bcdDevice=62.28 [ 142.483130][ T1217] usb 3-1: too many configurations: 35, using maximum allowed: 8 [ 142.485508][ T1217] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 142.485546][ T1217] usb 3-1: can't read configurations, error -61 [ 142.486605][ T1217] usb usb3-port1: unable to enumerate USB device [ 142.658702][ T5695] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.758729][ T43] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 142.809340][ T5695] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 142.810370][ T5695] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.810404][ T5695] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 142.810443][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.862179][ T5695] pl2303 1-1:1.0: required endpoints missing [ 142.875064][ T5695] pl2303 1-1:1.1: pl2303 converter detected [ 142.886587][ T5695] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 142.918775][ T43] usb 4-1: device descriptor read/64, error -71 [ 143.158692][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 143.288740][ T43] usb 4-1: device descriptor read/64, error -71 [ 143.402193][ T43] usb usb4-port1: attempt power cycle [ 143.738698][ T43] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 143.759156][ T43] usb 4-1: device descriptor read/8, error -71 [ 144.001226][ T43] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 144.017003][ T5747] usb 1-1: USB disconnect, device number 16 [ 144.032105][ T43] usb 4-1: device descriptor read/8, error -71 [ 144.047620][ T5747] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 144.048453][ T5747] pl2303 1-1:1.1: device disconnected [ 144.138907][ T43] usb usb4-port1: unable to enumerate USB device [ 144.543428][ T6726] xt_l2tp: invalid flags combination: c [ 144.548856][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 144.679321][ T10] usb 2-1: device descriptor read/64, error -71 [ 144.918709][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 144.958998][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.008828][ T5695] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 145.058761][ T10] usb 2-1: device descriptor read/64, error -71 [ 145.106403][ T6734] overlayfs: overlapping lowerdir path [ 145.115764][ T43] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 145.129479][ T43] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 145.129506][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.129523][ T43] usb 1-1: config 0 has no interface number 0 [ 145.129562][ T43] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 145.129587][ T43] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 145.129607][ T43] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.131528][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.131548][ T43] usb 1-1: Product: syz [ 145.131561][ T43] usb 1-1: Manufacturer: syz [ 145.131574][ T43] usb 1-1: SerialNumber: syz [ 145.138415][ T43] usb 1-1: config 0 descriptor?? [ 145.161139][ T5695] usb 4-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 145.162497][ T5695] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 145.162524][ T5695] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 145.162586][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.167030][ T6732] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.167184][ T6732] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.170559][ T5695] io_edgeport 4-1:1.0: Edgeport 4 port adapter converter detected [ 145.171244][ T5695] usb 4-1: detected [ 145.194616][ T10] usb usb2-port1: attempt power cycle [ 145.374679][ T5695] io_edgeport 4-1:1.0: short epic descriptor received: 0 [ 145.538712][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 145.569390][ T10] usb 2-1: device descriptor read/8, error -71 [ 145.655785][ T5695] usb 4-1: error in getting manufacturer descriptor: -71 [ 145.657249][ T5695] usb 4-1: error in getting boot descriptor: -71 [ 145.657614][ T5695] usb 4-1: Device Reported 0 serial ports vs. core thinking we have 4 ports, email greg@kroah.com this information. [ 145.772374][ T5695] usb 4-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 145.772406][ T5695] usb 4-1: Falling back to sysfs fallback for: edgeport/down.fw [ 145.828726][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 145.849644][ T10] usb 2-1: device descriptor read/8, error -71 [ 145.960066][ T10] usb usb2-port1: unable to enumerate USB device [ 145.975353][ T10] usb 1-1: USB disconnect, device number 17 [ 146.658549][ T6783] exfat: Unknown parameter 'debugR' [ 147.103910][ T6793] netlink: 'syz.2.267': attribute type 2 has an invalid length. [ 147.359280][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 147.488693][ T10] usb 3-1: device descriptor read/64, error -71 [ 147.731211][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 147.861577][ T10] usb 3-1: device descriptor read/64, error -71 [ 147.880760][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 147.969019][ T10] usb usb3-port1: attempt power cycle [ 148.040023][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 148.040957][ T43] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.045332][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.045475][ T43] usb 2-1: Product: syz [ 148.045491][ T43] usb 2-1: Manufacturer: syz [ 148.045506][ T43] usb 2-1: SerialNumber: syz [ 148.052852][ T43] r8152-cfgselector 2-1: Unknown version 0x0000 [ 148.052874][ T43] r8152-cfgselector 2-1: config 0 descriptor?? [ 148.109066][ T1217] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 148.238904][ T1217] usb 1-1: device descriptor read/64, error -71 [ 148.310268][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 148.331292][ T10] usb 3-1: device descriptor read/8, error -71 [ 148.461567][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 148.464116][ T43] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 148.489193][ T1217] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 148.568716][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 148.599223][ T10] usb 3-1: device descriptor read/8, error -71 [ 148.628798][ T1217] usb 1-1: device descriptor read/64, error -71 [ 148.708969][ T10] usb usb3-port1: unable to enumerate USB device [ 148.738993][ T1217] usb usb1-port1: attempt power cycle [ 149.079007][ T1217] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 149.107091][ T1217] usb 1-1: device descriptor read/8, error -71 [ 149.338724][ T1217] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 149.359265][ T1217] usb 1-1: device descriptor read/8, error -71 [ 149.468999][ T1217] usb usb1-port1: unable to enumerate USB device [ 149.498693][ T5722] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 149.650599][ T5722] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 149.651577][ T5722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 149.651603][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 149.651645][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.661694][ T5722] usb 2-1: probing VID:PID(0424:012C) [ 149.667135][ T5722] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 149.667157][ T5722] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 149.667175][ T5722] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 149.667191][ T5722] usb 2-1: vub300 testing BULK IN EndPoint(3) 85 [ 149.667208][ T5722] usb 2-1: ignoring unexpected bulk_in endpoint [ 149.667220][ T5722] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 149.675840][ T5722] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 149.862440][ T5722] usb 2-1: USB disconnect, device number 29 [ 150.728747][ T5620] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 150.858968][ T5620] usb 2-1: device descriptor read/64, error -71 [ 151.098757][ T5620] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 151.218826][ T5722] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.236581][ T5620] usb 2-1: device descriptor read/64, error -71 [ 151.338971][ T5620] usb usb2-port1: attempt power cycle [ 151.378736][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 151.379604][ T5722] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.381052][ T5722] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.381080][ T5722] usb 1-1: config 179 has no interface number 0 [ 151.381126][ T5722] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.381153][ T5722] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.381180][ T5722] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.381206][ T5722] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.381233][ T5722] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.381294][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.388743][ T6869] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.538721][ T5747] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 151.630512][ T5722] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 151.692392][ T5747] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.693918][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.699174][ T5747] usb 3-1: config 0 descriptor?? [ 151.730049][ T5747] cp210x 3-1:0.0: cp210x converter detected [ 151.779438][ T5620] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 151.800489][ T5620] usb 2-1: device descriptor read/8, error -71 [ 151.863156][ T6869] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 151.880055][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 151.880110][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 151.880334][ T5722] usb 1-1: USB disconnect, device number 22 [ 151.936955][ T5747] usb 3-1: cp210x converter now attached to ttyUSB0 [ 152.038682][ T5620] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 152.069414][ T5620] usb 2-1: device descriptor read/8, error -71 [ 152.178999][ T5620] usb usb2-port1: unable to enumerate USB device [ 152.627759][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.628254][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.929911][ T6900] FAULT_INJECTION: forcing a failure. [ 153.929911][ T6900] name , interval 1, probability 100, space 0, times 1 [ 153.929949][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.1.293 Not tainted syzkaller #0 PREEMPT(full) [ 153.929974][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.929988][ T6900] Call Trace: [ 153.929998][ T6900] [ 153.930007][ T6900] dump_stack_lvl+0xe8/0x150 [ 153.930042][ T6900] should_fail_ex+0x3eb/0x540 [ 153.930080][ T6900] null_queue_rq+0x334/0xe70 [ 153.930102][ T6900] ? bdev_count_inflight+0x1cf/0x210 [ 153.930157][ T6900] blk_mq_try_issue_directly+0x3f4/0x880 [ 153.930189][ T6900] ? __pfx_blk_mq_try_issue_directly+0x10/0x10 [ 153.930218][ T6900] ? blk_account_io_start+0x57c/0x8c0 [ 153.930266][ T6900] blk_mq_submit_bio+0x20d4/0x2a70 [ 153.930306][ T6900] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 153.930348][ T6900] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 153.930370][ T6900] ? blk_cgroup_bio_start+0x5d7/0x670 [ 153.930405][ T6900] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 153.930436][ T6900] ? __submit_bio+0x7e/0x340 [ 153.930464][ T6900] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 153.930493][ T6900] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 153.930520][ T6900] ? submit_bio_noacct+0x104a/0x1b80 [ 153.930547][ T6900] ? blkcg_set_ioprio+0x16b/0x2a0 [ 153.930585][ T6900] block_read_full_folio+0x83a/0x8c0 [ 153.930619][ T6900] ? __pfx_blkdev_get_block+0x10/0x10 [ 153.930647][ T6900] filemap_read_folio+0x12c/0x3a0 [ 153.930674][ T6900] ? __folio_batch_add_and_move+0x78e/0xc50 [ 153.930702][ T6900] ? __pfx_blkdev_read_folio+0x10/0x10 [ 153.930725][ T6900] ? __pfx_filemap_read_folio+0x10/0x10 [ 153.930753][ T6900] ? filemap_add_folio+0x336/0x4e0 [ 153.930784][ T6900] do_read_cache_folio+0x354/0x590 [ 153.930813][ T6900] ? __pfx_blkdev_read_folio+0x10/0x10 [ 153.930842][ T6900] read_part_sector+0xb6/0x2b0 [ 153.930869][ T6900] adfspart_check_ICS+0xb1/0x960 [ 153.930894][ T6900] ? seq_buf_printf+0x212/0x2d0 [ 153.930930][ T6900] ? rcu_is_watching+0x16/0xb0 [ 153.930957][ T6900] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 153.930984][ T6900] ? __kmalloc_cache_noprof+0x148/0x600 [ 153.931011][ T6900] ? bdev_disk_changed+0x56c/0x17a0 [ 153.931031][ T6900] ? bdev_disk_changed+0x56c/0x17a0 [ 153.931061][ T6900] bdev_disk_changed+0x851/0x17a0 [ 153.931111][ T6900] ? __pfx_bdev_disk_changed+0x10/0x10 [ 153.931143][ T6900] ? file_init_path+0x42e/0x5a0 [ 153.931170][ T6900] blkdev_get_whole+0x372/0x510 [ 153.931200][ T6900] bdev_open+0x324/0xd70 [ 153.931236][ T6900] bdev_file_open_by_dev+0x1be/0x240 [ 153.931263][ T6900] disk_scan_partitions+0x1bb/0x2c0 [ 153.931295][ T6900] add_disk_fwnode+0x24b/0x3a0 [ 153.931341][ T6900] null_add_dev+0x130b/0x1d70 [ 153.931371][ T6900] ? __pfx_null_add_dev+0x10/0x10 [ 153.931433][ T6900] nullb_device_power_store+0x240/0x380 [ 153.931460][ T6900] ? __pfx_nullb_device_power_store+0x10/0x10 [ 153.931486][ T6900] ? down_read+0x2b9/0x320 [ 153.931509][ T6900] ? __pfx_nullb_device_power_store+0x10/0x10 [ 153.931532][ T6900] configfs_write_iter+0x337/0x430 [ 153.931562][ T6900] vfs_write+0x612/0xba0 [ 153.931593][ T6900] ? __pfx_vfs_write+0x10/0x10 [ 153.931626][ T6900] ? __fget_files+0x2a/0x420 [ 153.931655][ T6900] ksys_write+0x150/0x270 [ 153.931680][ T6900] ? __pfx_ksys_write+0x10/0x10 [ 153.931713][ T6900] do_syscall_64+0x166/0x520 [ 153.931729][ T6900] ? trace_irq_disable+0x3b/0x140 [ 153.931751][ T6900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.931768][ T6900] ? clear_bhb_loop+0x70/0xc0 [ 153.931790][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.931806][ T6900] RIP: 0033:0x7fcdbc99e159 [ 153.931826][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.931840][ T6900] RSP: 002b:00007fcdbd8d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.931861][ T6900] RAX: ffffffffffffffda RBX: 00007fcdbcc25fa0 RCX: 00007fcdbc99e159 [ 153.931874][ T6900] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 153.931885][ T6900] RBP: 00007fcdbca3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.931896][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.931906][ T6900] R13: 00007fcdbcc26038 R14: 00007fcdbcc25fa0 R15: 00007ffe2d2b8b28 [ 153.931936][ T6900] [ 153.948997][ T6900] null_blk: disk nullb1 created [ 154.329827][ T5747] usb 3-1: USB disconnect, device number 36 [ 154.351352][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.352130][ T5747] cp210x 3-1:0.0: device disconnected [ 154.647024][ T6910] loop5: detected capacity change from 0 to 7 [ 154.660483][ T6910] Dev loop5: unable to read RDB block 7 [ 154.660527][ T6910] loop5: unable to read partition table [ 154.660759][ T6910] loop5: partition table beyond EOD, truncated [ 154.660794][ T6910] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.787248][ T6915] x_tables: unsorted underflow at hook 1 [ 154.788001][ T5621] Bluetooth: hci1: hcon ffff8880357a0000 sent 1 < count 6 [ 155.278971][ T1217] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 155.439508][ T1217] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 155.443100][ T1217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.443156][ T1217] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.458799][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.458829][ T1217] usb 1-1: Product: syz [ 155.458844][ T1217] usb 1-1: Manufacturer: syz [ 155.458858][ T1217] usb 1-1: SerialNumber: syz [ 155.462039][ T1217] usb 1-1: config 0 descriptor?? [ 155.466828][ T1217] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 155.473229][ T1217] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.474079][ T1217] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 155.474133][ T1217] usb 1-1: media controller created [ 155.541279][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.544371][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 155.708785][ T6942] bond0: option slaves: interface -v does not exist! [ 155.843812][ T1217] DVB: Unable to find symbol tda10046_attach() [ 155.843832][ T1217] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 155.843846][ T1217] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 155.998468][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 156.078824][ T6951] netlink: 'syz.1.308': attribute type 2 has an invalid length. [ 156.078850][ T6951] netlink: 'syz.1.308': attribute type 8 has an invalid length. [ 156.078862][ T6951] netlink: 'syz.1.308': attribute type 9 has an invalid length. [ 156.078873][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 156.096516][ T5015] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 156.165422][ T5015] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 156.431532][ T43] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 156.508707][ T5747] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 156.671084][ T5747] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.697502][ T5747] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.697531][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.697549][ T5747] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.697594][ T5747] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.700530][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.700554][ T5747] usb 2-1: Product: syz [ 156.700567][ T5747] usb 2-1: Manufacturer: syz [ 156.717664][ T5747] cdc_wdm 2-1:1.0: skipping garbage [ 156.717685][ T5747] cdc_wdm 2-1:1.0: skipping garbage [ 156.726907][ T6945] ceph: No mds server is up or the cluster is laggy [ 156.732443][ T5747] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 156.732462][ T5747] cdc_wdm 2-1:1.0: Unknown control protocol [ 156.848812][ T1217] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 156.857111][ T1217] usb 1-1: USB disconnect, device number 23 [ 156.955682][ T10] usb 2-1: USB disconnect, device number 34 [ 157.442437][ T30] audit: type=1326 audit(1789950673.612:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.0.311" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x0 [ 157.524591][ T5621] Bluetooth: hci0: Malformed LE Event: 0x02 [ 157.828108][ T6967] bond0: no command found in arp_ip_targets file - use + or - [ 157.828744][ T5747] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 157.960711][ T5747] usb 2-1: device descriptor read/64, error -71 [ 158.198779][ T5747] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 158.328063][ T6972] netlink: 264 bytes leftover after parsing attributes in process `syz.0.315'. [ 158.334312][ T5747] usb 2-1: device descriptor read/64, error -71 [ 158.439123][ T5747] usb usb2-port1: attempt power cycle [ 158.780305][ T5747] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 158.789009][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 158.799319][ T5747] usb 2-1: device descriptor read/8, error -71 [ 158.938763][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 158.940504][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 158.943112][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.943128][ T10] usb 1-1: Product: syz [ 158.943137][ T10] usb 1-1: Manufacturer: syz [ 158.943146][ T10] usb 1-1: SerialNumber: syz [ 158.945464][ T10] usb 1-1: config 0 descriptor?? [ 158.961967][ T10] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 159.038790][ T5747] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 159.059558][ T5747] usb 2-1: device descriptor read/8, error -71 [ 159.169017][ T5747] usb usb2-port1: unable to enumerate USB device [ 159.366643][ T10] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 159.366888][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 159.387907][ T10] usb 1-1: USB disconnect, device number 24 [ 160.138682][ T1217] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 160.289466][ T1217] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 160.290548][ T1217] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 160.290573][ T1217] usb 1-1: config 1 has no interface number 0 [ 160.292564][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.292588][ T1217] usb 1-1: Product: syz [ 160.292603][ T1217] usb 1-1: Manufacturer: syz [ 160.292617][ T1217] usb 1-1: SerialNumber: syz [ 160.325814][ T1217] usb 1-1: 3:0 : does not exist [ 160.325839][ T1217] usb 1-1: 3:0 : does not exist [ 160.468681][ T5015] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 160.501754][ T5620] usb 1-1: USB disconnect, device number 25 [ 160.619884][ T5015] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.620931][ T5015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.620982][ T5015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.624182][ T5015] usb 3-1: config 0 descriptor?? [ 160.836855][ T5015] usbhid 3-1:0.0: can't add hid device: -71 [ 160.836969][ T5015] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.841685][ T5015] usb 3-1: USB disconnect, device number 37 [ 161.056457][ T7009] overlayfs: failed to resolve './file0': -2 [ 161.278898][ T5620] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 161.438940][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 161.441186][ T5620] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 161.442564][ T5620] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 161.442591][ T5620] usb 3-1: config 0 has no interface number 0 [ 161.442740][ T5620] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.442770][ T5620] usb 3-1: config 0 interface 52 has no altsetting 0 [ 161.442807][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.445752][ T5620] usb 3-1: config 0 descriptor?? [ 161.458715][ T1217] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 161.609333][ T1217] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.612088][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.612115][ T1217] usb 2-1: Product: syz [ 161.612132][ T1217] usb 2-1: Manufacturer: syz [ 161.612147][ T1217] usb 2-1: SerialNumber: syz [ 161.658005][ T5620] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input24 [ 161.684491][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.855127][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.856875][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.860900][ T5620] usb 3-1: USB disconnect, device number 38 [ 162.075885][ T30] audit: type=1326 audit(1789950678.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.076216][ T30] audit: type=1326 audit(1789950678.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.076268][ T30] audit: type=1326 audit(1789950678.242:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.076433][ T30] audit: type=1326 audit(1789950678.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.076773][ T30] audit: type=1326 audit(1789950678.242:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce6e35e98e code=0x7ffc0000 [ 162.077280][ T30] audit: type=1326 audit(1789950678.242:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.077917][ T30] audit: type=1326 audit(1789950678.242:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.077966][ T30] audit: type=1326 audit(1789950678.242:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.078010][ T30] audit: type=1326 audit(1789950678.242:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ffc0000 [ 162.133111][ T5620] usb 2-1: USB disconnect, device number 39 [ 162.567941][ T7035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 162.567962][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.568034][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 162.576226][ T7036] vhci_hcd: connection closed [ 162.576507][ T3410] vhci_hcd vhci_hcd.2: stop threads [ 162.576534][ T3410] vhci_hcd vhci_hcd.2: release socket [ 162.576553][ T3410] vhci_hcd vhci_hcd.2: disconnect device [ 162.589967][ T5015] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 162.704553][ T7039] FAULT_INJECTION: forcing a failure. [ 162.704553][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 162.704578][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 162.704593][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.704601][ T7039] Call Trace: [ 162.704606][ T7039] [ 162.704613][ T7039] dump_stack_lvl+0xe8/0x150 [ 162.704635][ T7039] should_fail_ex+0x3eb/0x540 [ 162.704662][ T7039] should_failslab+0xa8/0x100 [ 162.704677][ T7039] __kmalloc_noprof+0xf9/0x710 [ 162.704696][ T7039] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 162.704710][ T7039] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 162.704727][ T7039] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 162.704745][ T7039] genl_family_rcv_msg_doit+0xda/0x340 [ 162.704769][ T7039] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.704791][ T7039] ? __pfx_genl_get_cmd+0x10/0x10 [ 162.704810][ T7039] ? __dev_queue_xmit+0x29b/0x3820 [ 162.704832][ T7039] genl_rcv_msg+0x614/0x7a0 [ 162.704855][ T7039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.704873][ T7039] ? __pfx_ctrl_getfamily+0x10/0x10 [ 162.704893][ T7039] ? __asan_memcpy+0x40/0x70 [ 162.704910][ T7039] ? __skb_clone+0x5c/0x6c0 [ 162.704929][ T7039] netlink_rcv_skb+0x226/0x4a0 [ 162.704945][ T7039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.704965][ T7039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.704989][ T7039] ? down_read+0x2b9/0x320 [ 162.705005][ T7039] genl_rcv+0x28/0x40 [ 162.705022][ T7039] netlink_unicast+0x7bd/0x940 [ 162.705043][ T7039] netlink_sendmsg+0x7c3/0xae0 [ 162.705062][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.705083][ T7039] ? apparmor_socket_sendmsg+0x98/0x360 [ 162.705097][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.705112][ T7039] sock_sendmsg_nosec+0x13a/0x180 [ 162.705131][ T7039] __sys_sendto+0x408/0x5a0 [ 162.705149][ T7039] ? __pfx___sys_sendto+0x10/0x10 [ 162.705162][ T7039] ? errseq_sample+0x40/0x70 [ 162.705194][ T7039] ? fd_install+0x94/0x3d0 [ 162.705216][ T7039] ? fd_install+0x309/0x3d0 [ 162.705249][ T7039] __x64_sys_sendto+0xde/0x100 [ 162.705273][ T7039] do_syscall_64+0x166/0x520 [ 162.705293][ T7039] ? trace_irq_disable+0x3b/0x140 [ 162.705321][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.705342][ T7039] ? clear_bhb_loop+0x70/0xc0 [ 162.705365][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.705377][ T7039] RIP: 0033:0x7fcdbc95e98e [ 162.705390][ T7039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.705401][ T7039] RSP: 002b:00007fcdbd8d6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 162.705416][ T7039] RAX: ffffffffffffffda RBX: 00007fcdbd8d86c0 RCX: 00007fcdbc95e98e [ 162.705426][ T7039] RDX: 0000000000000020 RSI: 00007fcdbd8d7000 RDI: 0000000000000006 [ 162.705434][ T7039] RBP: 0000000000000000 R08: 00007fcdbd8d6f04 R09: 000000000000000c [ 162.705442][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 162.705450][ T7039] R13: 00007fcdbd8d6f58 R14: 00007fcdbd8d7000 R15: 0000000000000000 [ 162.705469][ T7039] [ 162.782034][ T5015] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 162.820625][ T5015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.855417][ T5015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.881202][ T5015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.881263][ T5015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.931908][ T5015] usb 1-1: config 0 descriptor?? [ 162.934878][ T5015] rndis_host 1-1:0.0: rndis: master #0/ffff888028150000 slave #1/0000000000000000 [ 162.959015][ T43] usb 2-1: Service connection timeout for: 256 [ 162.959039][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 162.959795][ T43] ath9k_htc: Failed to initialize the device [ 162.973658][ T5620] usb 2-1: ath9k_htc: USB layer deinitialized [ 163.163817][ T7044] overlayfs: missing 'lowerdir' [ 163.167573][ T9] usb 1-1: USB disconnect, device number 26 [ 163.231765][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.232104][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.388747][ T5015] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 164.028769][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 164.180049][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 164.181549][ T9] usb 1-1: config 254 has an invalid interface number: 94 but max is 0 [ 164.181575][ T9] usb 1-1: config 254 has no interface number 0 [ 164.181631][ T9] usb 1-1: config 254 interface 94 altsetting 16 endpoint 0xC has invalid wMaxPacketSize 0 [ 164.181654][ T9] usb 1-1: config 254 interface 94 altsetting 16 bulk endpoint 0xC has invalid maxpacket 0 [ 164.181679][ T9] usb 1-1: config 254 interface 94 has no altsetting 0 [ 164.184696][ T9] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 164.184721][ T9] usb 1-1: Product: syz [ 164.184737][ T9] usb 1-1: Manufacturer: syz [ 164.184752][ T9] usb 1-1: SerialNumber: syz [ 164.333333][ T7061] FAULT_INJECTION: forcing a failure. [ 164.333333][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 164.333365][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT(full) [ 164.333390][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.333402][ T7061] Call Trace: [ 164.333410][ T7061] [ 164.333423][ T7061] dump_stack_lvl+0xe8/0x150 [ 164.333454][ T7061] should_fail_ex+0x3eb/0x540 [ 164.333472][ T7061] should_failslab+0xa8/0x100 [ 164.333487][ T7061] ? sk_prot_alloc+0x57/0x210 [ 164.333501][ T7061] kmem_cache_alloc_noprof+0x9c/0x600 [ 164.333528][ T7061] ? lock_acquire+0x115/0x350 [ 164.333558][ T7061] ? sk_prot_alloc+0x57/0x210 [ 164.333586][ T7061] sk_prot_alloc+0x57/0x210 [ 164.333606][ T7061] ? sk_alloc+0x27/0x390 [ 164.333629][ T7061] sk_alloc+0x3a/0x390 [ 164.333653][ T7061] pn_socket_create+0xf5/0x520 [ 164.333672][ T7061] __sock_create+0x4b5/0xac0 [ 164.333710][ T7061] __sys_socket+0xd6/0x1b0 [ 164.333743][ T7061] __x64_sys_socket+0x7a/0x90 [ 164.333772][ T7061] do_syscall_64+0x166/0x520 [ 164.333788][ T7061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.333802][ T7061] ? clear_bhb_loop+0x70/0xc0 [ 164.333817][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.333830][ T7061] RIP: 0033:0x7fcdbc99e159 [ 164.333855][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.333874][ T7061] RSP: 002b:00007fcdbd8d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 164.333898][ T7061] RAX: ffffffffffffffda RBX: 00007fcdbcc25fa0 RCX: 00007fcdbc99e159 [ 164.333913][ T7061] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 164.333926][ T7061] RBP: 00007fcdbca3506b R08: 0000000000000000 R09: 0000000000000000 [ 164.333939][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.333947][ T7061] R13: 00007fcdbcc26038 R14: 00007fcdbcc25fa0 R15: 00007ffe2d2b8b28 [ 164.333966][ T7061] [ 165.818697][ T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 165.979948][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 165.980742][ T43] usb 2-1: New USB device found, idVendor=5143, idProduct=0522, bcdDevice= 0.00 [ 165.982079][ T43] usb 2-1: config 0 has too many interfaces: 35, using maximum allowed: 32 [ 165.982104][ T43] usb 2-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 165.982124][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 35 [ 165.982201][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.985906][ T43] usb 2-1: config 0 descriptor?? [ 166.788279][ T9] usb 1-1: USB disconnect, device number 27 [ 167.053276][ T7088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 167.199642][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 167.353347][ T9] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 167.354344][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 167.354375][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 167.354393][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 169, changing to 7 [ 167.354409][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49587, setting to 1024 [ 167.354435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.420718][ T7086] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.420857][ T7086] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.429871][ T9] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 167.626882][ T5015] usb 1-1: USB disconnect, device number 28 [ 168.297440][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.297578][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.297676][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.297769][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.297873][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.297968][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.298062][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.298156][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.298249][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319078][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319172][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319258][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319368][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319456][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319540][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319624][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319708][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319794][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319878][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.319962][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320046][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320131][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320215][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320306][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320390][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320474][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320571][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320655][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320739][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320824][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320908][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.320992][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.321074][ T7110] comedi comedi3: mpc624: I/O base address or length out of range [ 168.644183][ T9] usb 2-1: USB disconnect, device number 40 [ 168.735719][ T7113] kvm: pic: non byte write [ 169.061103][ T201] IPVS: starting estimator thread 0... [ 169.098773][ T5620] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 169.170006][ T7127] IPVS: using max 30 ests per chain, 72000 per kthread [ 169.260745][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 169.261635][ T5620] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 169.262774][ T5620] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.262799][ T5620] usb 2-1: config 0 has no interface number 0 [ 169.265171][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.265195][ T5620] usb 2-1: Product: syz [ 169.265211][ T5620] usb 2-1: Manufacturer: syz [ 169.265226][ T5620] usb 2-1: SerialNumber: syz [ 169.273661][ T5620] usb 2-1: config 0 descriptor?? [ 169.278529][ T5620] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 169.447236][ T7132] bridge0: port 3(erspan0) entered blocking state [ 169.447350][ T7132] bridge0: port 3(erspan0) entered disabled state [ 169.447632][ T7132] erspan0: entered allmulticast mode [ 169.459654][ T7132] erspan0: entered promiscuous mode [ 169.461837][ T7132] bridge0: port 3(erspan0) entered blocking state [ 169.462117][ T7132] bridge0: port 3(erspan0) entered forwarding state [ 169.487936][ T7132] erspan0: left allmulticast mode [ 169.487956][ T7132] erspan0: left promiscuous mode [ 169.490017][ T7132] bridge0: port 3(erspan0) entered disabled state [ 169.494849][ T5620] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 169.510690][ T5620] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 169.684714][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.697650][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.751025][ T7136] FAULT_INJECTION: forcing a failure. [ 169.751025][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 169.751052][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 169.751067][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.751076][ T7136] Call Trace: [ 169.751081][ T7136] [ 169.751087][ T7136] dump_stack_lvl+0xe8/0x150 [ 169.751109][ T7136] should_fail_ex+0x3eb/0x540 [ 169.751129][ T7136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.751146][ T7136] should_failslab+0xa8/0x100 [ 169.751161][ T7136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.751179][ T7136] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 169.751198][ T7136] ? sock_alloc_inode+0x2c/0x1a0 [ 169.751213][ T7136] ? sock_alloc_inode+0x2c/0x1a0 [ 169.751229][ T7136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.751244][ T7136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.751260][ T7136] sock_alloc_inode+0x2c/0x1a0 [ 169.751276][ T7136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 169.751291][ T7136] alloc_inode+0x6a/0x1b0 [ 169.751307][ T7136] __sock_create+0x127/0xac0 [ 169.751324][ T7136] ? ksys_write+0x242/0x270 [ 169.751341][ T7136] ? __pfx___se_sys_futex+0x10/0x10 [ 169.751357][ T7136] __sys_socket+0xd6/0x1b0 [ 169.751376][ T7136] __x64_sys_socket+0x7a/0x90 [ 169.751394][ T7136] do_syscall_64+0x166/0x520 [ 169.751407][ T7136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.751422][ T7136] ? clear_bhb_loop+0x70/0xc0 [ 169.751439][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.751451][ T7136] RIP: 0033:0x7fce6e39e159 [ 169.751465][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.751476][ T7136] RSP: 002b:00007fce6f190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 169.751491][ T7136] RAX: ffffffffffffffda RBX: 00007fce6e625fa0 RCX: 00007fce6e39e159 [ 169.751500][ T7136] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 169.751508][ T7136] RBP: 00007fce6e43506b R08: 0000000000000000 R09: 0000000000000000 [ 169.751521][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.751534][ T7136] R13: 00007fce6e626038 R14: 00007fce6e625fa0 R15: 00007ffdedbf2cb8 [ 169.751567][ T7136] [ 169.751670][ T7136] socket: no more sockets [ 170.324455][ T7149] Need at least one configuration in g1. [ 170.324778][ T7149] udc usbip-vudc.0: failed to start g1: -22 [ 170.324796][ T7149] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 170.355262][ T7149] UDC core: g1: couldn't find an available UDC or it's busy [ 170.409037][ T43] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 170.559944][ T43] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 170.561131][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.561171][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.564097][ T43] usb 3-1: config 0 descriptor?? [ 170.678677][ T5015] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 170.773046][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x1 [ 170.773137][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x5 [ 170.773173][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x6 [ 170.773201][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773226][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773252][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773277][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773302][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773326][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.773351][ T43] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 170.868675][ T5015] usb 1-1: Using ep0 maxpacket: 32 [ 170.869755][ T5015] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 170.870965][ T5015] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 170.873545][ T5015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.873569][ T5015] usb 1-1: Product: syz [ 170.873583][ T5015] usb 1-1: Manufacturer: syz [ 170.873677][ T5015] usb 1-1: SerialNumber: syz [ 170.877290][ T5015] usb 1-1: config 0 descriptor?? [ 170.932787][ T5015] cdc_ether 1-1:0.0: missing cdc header descriptor [ 170.933887][ T5015] usb 1-1: unsupported MDLM descriptors [ 171.119949][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.123050][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.126321][ T5015] usb 1-1: USB disconnect, device number 29 [ 171.894245][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.894857][ T5722] usb 2-1: USB disconnect, device number 41 [ 171.942377][ T5722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.968261][ T5722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 171.983582][ T5722] quatech2 2-1:0.51: device disconnected [ 172.304648][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 172.478882][ T5722] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 172.639059][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 172.639807][ T5722] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.640914][ T5722] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.640931][ T5722] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.640942][ T5722] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.640970][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.641031][ T5722] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.641046][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.641059][ T5722] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.641073][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.641102][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.643765][ T5722] usb 2-1: config 0 descriptor?? [ 172.808741][ T5015] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 172.850633][ T5722] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 172.939671][ T5015] usb 1-1: device descriptor read/64, error -71 [ 173.053944][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.054431][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.058774][ T9] usb 2-1: USB disconnect, device number 42 [ 173.068482][ T9] usblp0: removed [ 173.170701][ T43] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 173.178680][ T5015] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 173.200799][ T43] usb 3-1: USB disconnect, device number 40 [ 173.227776][ T7184] netlink: NAT attribute has 4 unknown bytes [ 173.227815][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.328878][ T5015] usb 1-1: device descriptor read/64, error -71 [ 173.440532][ T5015] usb usb1-port1: attempt power cycle [ 173.778696][ T5015] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 173.800897][ T5015] usb 1-1: device descriptor read/8, error -71 [ 173.938692][ T5722] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 174.038688][ T5015] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.059328][ T5015] usb 1-1: device descriptor read/8, error -71 [ 174.089032][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 174.091538][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.091598][ T5722] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 174.092619][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.092666][ T5722] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.092694][ T5722] usb 2-1: config 1 interface 0 has no altsetting 0 [ 174.094948][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.094973][ T5722] usb 2-1: Product: syz [ 174.094988][ T5722] usb 2-1: Manufacturer: syz [ 174.095003][ T5722] usb 2-1: SerialNumber: syz [ 174.143917][ T7219] loop8: detected capacity change from 0 to 16384 [ 174.169905][ T5015] usb usb1-port1: unable to enumerate USB device [ 174.405154][ T5722] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 174.408375][ T5722] usb 2-1: USB disconnect, device number 43 [ 174.482375][ T7220] loop8: detected capacity change from 16384 to 16383 [ 174.487926][ T7219] blk_print_req_error: 78 callbacks suppressed [ 174.487943][ T7219] I/O error, dev loop8, sector 13952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.488513][ T7219] I/O error, dev loop8, sector 14080 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 174.500064][ T7220] I/O error, dev loop8, sector 5888 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 174.500097][ T7220] buffer_io_error: 138 callbacks suppressed [ 174.500108][ T7220] Buffer I/O error on dev loop8, logical block 736, lost async page write [ 174.500602][ T7219] I/O error, dev loop8, sector 13952 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500629][ T7219] Buffer I/O error on dev loop8, logical block 1744, async page read [ 174.500693][ T7219] I/O error, dev loop8, sector 13960 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500725][ T7219] Buffer I/O error on dev loop8, logical block 1745, async page read [ 174.500757][ T7219] I/O error, dev loop8, sector 13968 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500780][ T7219] Buffer I/O error on dev loop8, logical block 1746, async page read [ 174.500811][ T7219] I/O error, dev loop8, sector 13976 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500835][ T7219] Buffer I/O error on dev loop8, logical block 1747, async page read [ 174.500866][ T7219] I/O error, dev loop8, sector 13984 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500889][ T7219] Buffer I/O error on dev loop8, logical block 1748, async page read [ 174.500920][ T7219] I/O error, dev loop8, sector 13992 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500942][ T7219] Buffer I/O error on dev loop8, logical block 1749, async page read [ 174.500973][ T7219] I/O error, dev loop8, sector 14000 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.500996][ T7219] Buffer I/O error on dev loop8, logical block 1750, async page read [ 174.501029][ T7219] Buffer I/O error on dev loop8, logical block 1751, async page read [ 174.501063][ T7219] Buffer I/O error on dev loop8, logical block 1752, async page read [ 174.574895][ T7220] ldm_validate_partition_table(): Disk read failed. [ 174.575086][ T7220] Dev loop8: unable to read RDB block 0 [ 174.575302][ T7220] loop8: unable to read partition table [ 174.575617][ T7220] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 174.988916][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 175.138692][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 175.140315][ T9] usb 3-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 175.141424][ T9] usb 3-1: config 12 has an invalid interface number: 159 but max is 0 [ 175.141452][ T9] usb 3-1: config 12 has no interface number 0 [ 175.141495][ T9] usb 3-1: config 12 interface 159 altsetting 234 bulk endpoint 0xC has invalid maxpacket 8 [ 175.141519][ T9] usb 3-1: config 12 interface 159 altsetting 234 bulk endpoint 0xF has invalid maxpacket 32 [ 175.141543][ T9] usb 3-1: config 12 interface 159 has no altsetting 0 [ 175.143217][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.143232][ T9] usb 3-1: Product: syz [ 175.143240][ T9] usb 3-1: Manufacturer: syz [ 175.143249][ T9] usb 3-1: SerialNumber: syz [ 175.147174][ T7223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.147328][ T7223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.299899][ T5722] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 175.354722][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 175.381787][ T9] usb-storage 3-1:12.159: USB Mass Storage device detected [ 175.439115][ T9] usb 3-1: USB disconnect, device number 41 [ 175.461096][ T5722] usb 2-1: not running at top speed; connect to a high speed hub [ 175.461134][ T5722] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 175.463598][ T5722] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 175.463625][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.463645][ T5722] usb 2-1: config 1 has no interface number 0 [ 175.463687][ T5722] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 175.463715][ T5722] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.463738][ T5722] usb 2-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.463765][ T5722] usb 2-1: config 1 interface 167 has no altsetting 0 [ 175.466277][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.466305][ T5722] usb 2-1: Product: syz [ 175.466319][ T5722] usb 2-1: Manufacturer: syz [ 175.466334][ T5722] usb 2-1: SerialNumber: syz [ 175.622141][ T7239] x_tables: duplicate underflow at hook 2 [ 175.762997][ T5722] em28xx 2-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 175.763036][ T5722] em28xx 2-1:1.167: Device initialization failed. [ 175.763050][ T5722] em28xx 2-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 175.794242][ T5722] usb 2-1: USB disconnect, device number 44 [ 175.920889][ T7244] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 176.029262][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.030502][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.259408][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 176.339897][ T7261] FAULT_INJECTION: forcing a failure. [ 176.339897][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 176.339923][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 176.339939][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.339946][ T7261] Call Trace: [ 176.339952][ T7261] [ 176.339958][ T7261] dump_stack_lvl+0xe8/0x150 [ 176.339979][ T7261] should_fail_ex+0x3eb/0x540 [ 176.339996][ T7261] should_failslab+0xa8/0x100 [ 176.340011][ T7261] __kmalloc_noprof+0xf9/0x710 [ 176.340030][ T7261] ? load_msg+0xcc/0x3a0 [ 176.340043][ T7261] ? load_msg+0xcc/0x3a0 [ 176.340061][ T7261] load_msg+0xcc/0x3a0 [ 176.340079][ T7261] do_msgrcv+0x278/0x1480 [ 176.340099][ T7261] ? __pfx_do_msg_fill+0x10/0x10 [ 176.340118][ T7261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.340136][ T7261] ? __se_sys_futex+0x3a8/0x450 [ 176.340150][ T7261] ? __pfx_do_msgrcv+0x10/0x10 [ 176.340166][ T7261] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 176.340184][ T7261] ? __pfx___se_sys_futex+0x10/0x10 [ 176.340197][ T7261] ? rcu_is_watching+0x16/0xb0 [ 176.340214][ T7261] ? __x64_sys_msgrcv+0x20/0xd0 [ 176.340232][ T7261] do_syscall_64+0x166/0x520 [ 176.340244][ T7261] ? trace_irq_disable+0x3b/0x140 [ 176.340261][ T7261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.340274][ T7261] ? clear_bhb_loop+0x70/0xc0 [ 176.340289][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.340302][ T7261] RIP: 0033:0x7fcdbc99e159 [ 176.340314][ T7261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.340326][ T7261] RSP: 002b:00007fcdbd8d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 176.340341][ T7261] RAX: ffffffffffffffda RBX: 00007fcdbcc25fa0 RCX: 00007fcdbc99e159 [ 176.340351][ T7261] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 176.340359][ T7261] RBP: 00007fcdbca3506b R08: 0000000000004800 R09: 0000000000000000 [ 176.340368][ T7261] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 176.340376][ T7261] R13: 00007fcdbcc26038 R14: 00007fcdbcc25fa0 R15: 00007ffe2d2b8b28 [ 176.340395][ T7261] [ 176.411117][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 176.413143][ T9] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 176.422393][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.431080][ T9] usb 3-1: config 0 descriptor?? [ 176.445315][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 176.457217][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 176.634867][ T5722] usb 3-1: USB disconnect, device number 42 [ 177.732011][ T7294] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 177.738399][ T7294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.833079][ T7297] netlink: Unknown nat attribute (0) [ 177.833105][ T7297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.010298][ T7301] overlayfs: conflicting options: userxattr,redirect_dir=on [ 178.125436][ T7309] rust_binder: 7306:7309 got transaction to invalid handle 1 [ 178.125468][ T7309] rust_binder: 7306:7309 transaction call to 0:0 failed ENOENT, code 0 size 120-24 [ 178.222965][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.238401][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.249391][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.251713][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.257884][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.265475][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.280275][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.299209][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.315968][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.323949][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 178.431119][ T9] rust_binder: 7306: undelivered TRANSACTION_ERROR: 29201 [ 178.758761][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 178.920912][ T3410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.942293][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.961752][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.961785][ T9] usb 1-1: Product: syz [ 178.961800][ T9] usb 1-1: Manufacturer: syz [ 178.961816][ T9] usb 1-1: SerialNumber: syz [ 179.068215][ T3410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.137572][ T3410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.215748][ T3410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.457376][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.468039][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.476634][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.486235][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.488015][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.602322][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 179.602391][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 179.603234][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 179.603294][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.674915][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.693001][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 179.712397][ T9] usb 1-1: USB disconnect, device number 34 [ 179.775076][ T3410] bridge_slave_1: left allmulticast mode [ 179.775122][ T3410] bridge_slave_1: left promiscuous mode [ 179.777040][ T3410] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.812380][ T3410] bridge_slave_0: left allmulticast mode [ 179.812411][ T3410] bridge_slave_0: left promiscuous mode [ 179.814707][ T3410] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.218429][ T3410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.235178][ T3410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.256667][ T3410] bond0 (unregistering): Released all slaves [ 180.423334][ T7364] jffs2: notice: (7364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.586885][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.587403][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.708744][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 180.852436][ T10] usb 1-1: device descriptor read/64, error -71 [ 180.945938][ T3410] hsr_slave_0: left promiscuous mode [ 180.953435][ T3410] hsr_slave_1: left promiscuous mode [ 180.954682][ T3410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.954716][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.966724][ T3410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.966746][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.088678][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 181.163287][ T3410] veth1_macvtap: left promiscuous mode [ 181.163357][ T3410] veth0_macvtap: left promiscuous mode [ 181.163484][ T3410] veth1_vlan: left promiscuous mode [ 181.163677][ T3410] veth0_vlan: left promiscuous mode [ 181.193203][ T7382] netlink: 'syz.2.430': attribute type 19 has an invalid length. [ 181.218672][ T10] usb 1-1: device descriptor read/64, error -71 [ 181.329064][ T10] usb usb1-port1: attempt power cycle [ 181.600835][ T5621] Bluetooth: hci0: command tx timeout [ 181.679381][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 181.699370][ T10] usb 1-1: device descriptor read/8, error -71 [ 181.956174][ T3410] team0 (unregistering): Port device team_slave_1 removed [ 181.968662][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 181.989368][ T10] usb 1-1: device descriptor read/8, error -71 [ 181.992057][ T3410] team0 (unregistering): Port device team_slave_0 removed [ 182.099075][ T10] usb usb1-port1: unable to enumerate USB device [ 182.407859][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 182.476030][ T7390] cgroup: fork rejected by pids controller in /syz2 [ 183.105581][ T3410] IPVS: stop unused estimator thread 0... [ 183.302130][ T7446] __nla_validate_parse: 24 callbacks suppressed [ 183.302153][ T7446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.434'. [ 183.306244][ T7446] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 183.599446][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.601115][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.601268][ T7330] bridge_slave_0: entered allmulticast mode [ 183.605067][ T7330] bridge_slave_0: entered promiscuous mode [ 183.645389][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 183.645924][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.646086][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.646231][ T7330] bridge_slave_1: entered allmulticast mode [ 183.649867][ T7330] bridge_slave_1: entered promiscuous mode [ 183.682937][ T5621] Bluetooth: hci0: command tx timeout [ 183.714333][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.724084][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.820636][ T7330] team0: Port device team_slave_0 added [ 183.824149][ T7330] team0: Port device team_slave_1 added [ 183.882025][ T7463] openvswitch: netlink: Key type 184 is out of range max 32 [ 183.891299][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.891316][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.891341][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.899358][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.899374][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.899398][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.096727][ T7330] hsr_slave_0: entered promiscuous mode [ 184.097869][ T7330] hsr_slave_1: entered promiscuous mode [ 184.104616][ T7330] debugfs: 'hsr0' already exists in 'hsr' [ 184.104638][ T7330] Cannot create hsr debugfs directory [ 184.370781][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 184.370804][ T30] audit: type=1326 audit(1789950700.542:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.371380][ T30] audit: type=1326 audit(1789950700.542:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.371434][ T30] audit: type=1326 audit(1789950700.542:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.373104][ T30] audit: type=1326 audit(1789950700.542:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408733][ T30] audit: type=1326 audit(1789950700.552:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408789][ T30] audit: type=1326 audit(1789950700.552:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408829][ T30] audit: type=1326 audit(1789950700.552:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408870][ T30] audit: type=1326 audit(1789950700.552:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408909][ T30] audit: type=1326 audit(1789950700.552:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.408949][ T30] audit: type=1326 audit(1789950700.552:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.0.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6e39e159 code=0x7ff00000 [ 184.923993][ T7330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.975363][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.978497][ T7330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.010297][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.013285][ T7330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.023214][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.026419][ T7330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.054964][ T7330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.081820][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 185.198728][ T5747] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 185.294598][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.330908][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.347962][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.348091][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.349844][ T5747] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 185.352423][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.352471][ T5747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.352501][ T5747] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.352524][ T5747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.352562][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.479208][ T3410] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.479329][ T3410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.560741][ T5747] gud 3-1:1.0: probe with driver gud failed with error -22 [ 185.759068][ T5621] Bluetooth: hci0: command tx timeout [ 185.799495][ T7482] FAULT_INJECTION: forcing a failure. [ 185.799495][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.799540][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT(full) [ 185.799566][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.799579][ T7482] Call Trace: [ 185.799587][ T7482] [ 185.799597][ T7482] dump_stack_lvl+0xe8/0x150 [ 185.799632][ T7482] should_fail_ex+0x3eb/0x540 [ 185.799661][ T7482] _copy_from_user+0x2d/0xb0 [ 185.799695][ T7482] xsk_setsockopt+0x42b/0x960 [ 185.799727][ T7482] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.799762][ T7482] ? aa_sock_opt_perm+0x142/0x1e0 [ 185.799791][ T7482] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 185.799814][ T7482] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.799844][ T7482] do_sock_setsockopt+0x17c/0x1b0 [ 185.799873][ T7482] __x64_sys_setsockopt+0x13d/0x1b0 [ 185.799901][ T7482] do_syscall_64+0x166/0x520 [ 185.799923][ T7482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.799945][ T7482] ? clear_bhb_loop+0x70/0xc0 [ 185.799972][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.799992][ T7482] RIP: 0033:0x7fcb0539e159 [ 185.800013][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.800031][ T7482] RSP: 002b:00007fcb0623b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.800055][ T7482] RAX: ffffffffffffffda RBX: 00007fcb05625fa0 RCX: 00007fcb0539e159 [ 185.800071][ T7482] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 185.800085][ T7482] RBP: 00007fcb0543506b R08: 0000000000000020 R09: 0000000000000000 [ 185.800099][ T7482] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 185.800112][ T7482] R13: 00007fcb05626038 R14: 00007fcb05625fa0 R15: 00007ffd8ef0ff88 [ 185.800145][ T7482] [ 185.805378][ T7482] FAULT_INJECTION: forcing a failure. [ 185.805378][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 185.805410][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT(full) [ 185.805434][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.805447][ T7482] Call Trace: [ 185.805456][ T7482] [ 185.805465][ T7482] dump_stack_lvl+0xe8/0x150 [ 185.805499][ T7482] should_fail_ex+0x3eb/0x540 [ 185.805527][ T7482] should_failslab+0xa8/0x100 [ 185.805560][ T7482] ? do_getname+0x2e/0x250 [ 185.805582][ T7482] kmem_cache_alloc_noprof+0x9c/0x600 [ 185.805614][ T7482] ? do_getname+0x2e/0x250 [ 185.805645][ T7482] do_getname+0x2e/0x250 [ 185.805666][ T7482] ? __se_sys_symlinkat+0x22/0x2b0 [ 185.805692][ T7482] __se_sys_symlinkat+0x2e/0x2b0 [ 185.805718][ T7482] do_syscall_64+0x166/0x520 [ 185.805739][ T7482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.805762][ T7482] ? clear_bhb_loop+0x70/0xc0 [ 185.805788][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.805810][ T7482] RIP: 0033:0x7fcb0539e159 [ 185.805829][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.805847][ T7482] RSP: 002b:00007fcb0623b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 185.805873][ T7482] RAX: ffffffffffffffda RBX: 00007fcb05625fa0 RCX: 00007fcb0539e159 [ 185.805889][ T7482] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000080 [ 185.805904][ T7482] RBP: 00007fcb0543506b R08: 0000000000000000 R09: 0000000000000000 [ 185.805918][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.805930][ T7482] R13: 00007fcb05626038 R14: 00007fcb05625fa0 R15: 00007ffd8ef0ff88 [ 185.805964][ T7482] [ 185.817857][ T5747] usb 3-1: USB disconnect, device number 43 [ 186.518283][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 186.610140][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 186.805977][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.504832][ T7538] netlink: 'syz.0.445': attribute type 21 has an invalid length. [ 187.504856][ T7538] netlink: 128 bytes leftover after parsing attributes in process `syz.0.445'. [ 187.504926][ T7538] netlink: 3 bytes leftover after parsing attributes in process `syz.0.445'. [ 187.505018][ T7533] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 187.577485][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.577965][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.675765][ T7330] veth0_vlan: entered promiscuous mode [ 187.690834][ T7330] veth1_vlan: entered promiscuous mode [ 187.747350][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.445'. [ 187.758515][ T7330] veth0_macvtap: entered promiscuous mode [ 187.775592][ T7330] veth1_macvtap: entered promiscuous mode [ 187.798775][ T5015] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 187.802399][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.813295][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.841346][ T5621] Bluetooth: hci0: command tx timeout [ 187.873935][ T7553] input: syz0 as /devices/virtual/input/input28 [ 187.924967][ T7428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.925018][ T7428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.925055][ T7428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.925088][ T7428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.956630][ T5015] usb 1-1: device descriptor read/64, error -71 [ 188.052960][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.052994][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.113641][ T7428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.113665][ T7428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.188924][ T5015] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 188.256166][ T7560] FAULT_INJECTION: forcing a failure. [ 188.256166][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 188.256200][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.4.422 Not tainted syzkaller #0 PREEMPT(full) [ 188.256221][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.256228][ T7560] Call Trace: [ 188.256234][ T7560] [ 188.256240][ T7560] dump_stack_lvl+0xe8/0x150 [ 188.256262][ T7560] should_fail_ex+0x3eb/0x540 [ 188.256278][ T7560] ? __alloc_empty_sheaf+0x28/0x40 [ 188.256295][ T7560] should_failslab+0xa8/0x100 [ 188.256309][ T7560] ? __alloc_empty_sheaf+0x28/0x40 [ 188.256324][ T7560] __kmalloc_flags_noprof+0x123/0x790 [ 188.256343][ T7560] ? __alloc_empty_sheaf+0x28/0x40 [ 188.256363][ T7560] __alloc_empty_sheaf+0x28/0x40 [ 188.256378][ T7560] __pcs_replace_empty_main+0x43b/0x6c0 [ 188.256398][ T7560] kmem_cache_alloc_noprof+0x394/0x600 [ 188.256414][ T7560] ? fcntl_dirnotify+0x1d8/0x6a0 [ 188.256427][ T7560] ? kmem_cache_alloc_noprof+0x151/0x600 [ 188.256451][ T7560] ? fcntl_dirnotify+0x1d8/0x6a0 [ 188.256469][ T7560] fcntl_dirnotify+0x1d8/0x6a0 [ 188.256487][ T7560] do_fcntl+0x779/0x1a20 [ 188.256507][ T7560] ? lock_acquire+0x115/0x350 [ 188.256524][ T7560] ? __pfx_do_fcntl+0x10/0x10 [ 188.256546][ T7560] ? __fget_files+0x2a/0x420 [ 188.256564][ T7560] ? __fget_files+0x2a/0x420 [ 188.256582][ T7560] ? bpf_lsm_file_fcntl+0x9/0x20 [ 188.256601][ T7560] __se_sys_fcntl+0xc8/0x150 [ 188.256619][ T7560] do_syscall_64+0x166/0x520 [ 188.256631][ T7560] ? trace_irq_disable+0x3b/0x140 [ 188.256648][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.256661][ T7560] ? clear_bhb_loop+0x70/0xc0 [ 188.256675][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.256688][ T7560] RIP: 0033:0x7f5ea8b9e159 [ 188.256701][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.256712][ T7560] RSP: 002b:00007f5ea9a51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 188.256727][ T7560] RAX: ffffffffffffffda RBX: 00007f5ea8e25fa0 RCX: 00007f5ea8b9e159 [ 188.256736][ T7560] RDX: 000000008000001c RSI: 0000000000000402 RDI: 0000000000000009 [ 188.256745][ T7560] RBP: 00007f5ea8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 188.256753][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.256761][ T7560] R13: 00007f5ea8e26038 R14: 00007f5ea8e25fa0 R15: 00007ffdf3864f58 [ 188.256779][ T7560] [ 188.369704][ T5015] usb 1-1: device descriptor read/64, error -71 [ 188.483780][ T5015] usb usb1-port1: attempt power cycle [ 188.563928][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 188.597964][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 188.609207][ T7567] ------------[ cut here ]------------ [ 188.609223][ T7567] !chanctx_conf [ 188.609232][ T7567] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.2.449/7567 [ 188.629916][ T7567] Modules linked in: [ 188.633842][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) [ 188.643689][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.654058][ T7567] RIP: 0010:rate_control_rate_init+0x5a6/0x630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.660296][ T7567] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 188.680541][ T7567] RSP: 0018:ffffc90004f2f008 EFLAGS: 00010283 [ 188.686729][ T7567] RAX: ffffffff8b678505 RBX: ffff888012b50050 RCX: 0000000000080000 [ 188.695006][ T7567] RDX: ffffc90005dfa000 RSI: 000000000000053d RDI: 000000000000053e [ 188.703085][ T7567] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 188.711159][ T7567] R10: dffffc0000000000 R11: ffffed100256a031 R12: ffffffff8b678077 [ 188.719238][ T7567] R13: ffff888059170f40 R14: 0000000000000001 R15: 0000000000000000 [ 188.727239][ T7567] FS: 00007fcb0623b6c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 188.736263][ T7567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.742953][ T7567] CR2: 0000200000001080 CR3: 00000000767c8000 CR4: 00000000003526f0 [ 188.751130][ T7567] Call Trace: [ 188.754437][ T7567] [ 188.757487][ T7567] rate_control_rate_init_all_links+0xf4/0x190 [ 188.763767][ T7567] sta_apply_auth_flags+0x1bc/0x430 [ 188.769057][ T7567] sta_apply_parameters+0x1291/0x1b50 [ 188.774904][ T7567] ieee80211_add_station+0x3de/0x700 [ 188.780499][ T7567] rdev_add_station+0xfc/0x290 [ 188.785338][ T7567] nl80211_new_station+0x1b4e/0x1fd0 [ 188.790716][ T7567] ? trace_contention_end+0x3d/0x140 [ 188.796051][ T7567] ? __pfx_nl80211_new_station+0x10/0x10 [ 188.801812][ T7567] ? __rtnl_unlock+0xc3/0xe0 [ 188.806471][ T7567] ? nl80211_pre_doit+0x53d/0x890 [ 188.811695][ T7567] genl_family_rcv_msg_doit+0x233/0x340 [ 188.817298][ T7567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 188.823561][ T7567] ? bpf_lsm_capable+0x9/0x20 [ 188.828280][ T7567] ? security_capable+0x7e/0x2c0 [ 188.833312][ T7567] genl_rcv_msg+0x614/0x7a0 [ 188.837878][ T7567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.843037][ T7567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 188.848446][ T7567] ? __pfx_nl80211_new_station+0x10/0x10 [ 188.854690][ T7567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 188.860341][ T7567] ? __asan_memcpy+0x40/0x70 [ 188.864974][ T7567] ? __skb_clone+0x5c/0x6c0 [ 188.869593][ T7567] netlink_rcv_skb+0x226/0x4a0 [ 188.874829][ T7567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.880267][ T7567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.885615][ T7567] ? down_read+0x2b9/0x320 [ 188.890119][ T7567] genl_rcv+0x28/0x40 [ 188.894144][ T7567] netlink_unicast+0x7bd/0x940 [ 188.899081][ T7567] netlink_sendmsg+0x7c3/0xae0 [ 188.903894][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.909268][ T7567] ? apparmor_socket_sendmsg+0x98/0x360 [ 188.914851][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.920245][ T7567] sock_sendmsg_nosec+0x13a/0x180 [ 188.925313][ T7567] ____sys_sendmsg+0x54e/0x850 [ 188.930201][ T7567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.935533][ T7567] ? import_iovec+0x73/0xa0 [ 188.940136][ T7567] ___sys_sendmsg+0x2a5/0x360 [ 188.944851][ T7567] ? __lock_acquire+0x747/0x2de0 [ 188.949902][ T7567] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.955148][ T7567] ? futex_wait+0x2a2/0x390 [ 188.959895][ T7567] ? __fget_files+0x2a/0x420 [ 188.964526][ T7567] ? __fget_files+0x3a2/0x420 [ 188.969320][ T7567] __x64_sys_sendmsg+0x1b1/0x290 [ 188.974305][ T7567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.980336][ T7567] do_syscall_64+0x166/0x520 [ 188.984963][ T7567] ? trace_irq_disable+0x3b/0x140 [ 188.990344][ T7567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.996795][ T7567] ? clear_bhb_loop+0x70/0xc0 [ 189.001562][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.007492][ T7567] RIP: 0033:0x7fcb0539e159 [ 189.011984][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.031695][ T7567] RSP: 002b:00007fcb0623b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.040508][ T7567] RAX: ffffffffffffffda RBX: 00007fcb05625fa0 RCX: 00007fcb0539e159 [ 189.048538][ T7567] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 189.056659][ T7567] RBP: 00007fcb0543506b R08: 0000000000000000 R09: 0000000000000000 [ 189.064730][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.072792][ T7567] R13: 00007fcb05626038 R14: 00007fcb05625fa0 R15: 00007ffd8ef0ff88 [ 189.081282][ T7567] [ 189.084556][ T7567] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.091863][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) [ 189.101070][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.111128][ T7567] Call Trace: [ 189.114412][ T7567] [ 189.117342][ T7567] vpanic+0x56d/0xa70 [ 189.121338][ T7567] ? __pfx__printk+0x10/0x10 [ 189.125933][ T7567] ? __pfx_vpanic+0x10/0x10 [ 189.130445][ T7567] ? is_bpf_text_address+0x292/0x2b0 [ 189.135734][ T7567] ? is_bpf_text_address+0x26/0x2b0 [ 189.140946][ T7567] panic+0xc5/0xd0 [ 189.144683][ T7567] ? __pfx_panic+0x10/0x10 [ 189.149123][ T7567] __warn+0x315/0x4c0 [ 189.153115][ T7567] ? rate_control_rate_init+0x5a6/0x630 [ 189.158669][ T7567] ? rate_control_rate_init+0x5a6/0x630 [ 189.164219][ T7567] __report_bug+0x276/0x570 [ 189.168737][ T7567] ? rate_control_rate_init+0x5a6/0x630 [ 189.174289][ T7567] ? __pfx___report_bug+0x10/0x10 [ 189.179323][ T7567] ? __lock_acquire+0x747/0x2de0 [ 189.184279][ T7567] ? __lock_acquire+0x747/0x2de0 [ 189.189234][ T7567] ? rate_control_rate_init+0x5a6/0x630 [ 189.194788][ T7567] report_bug+0x16b/0x220 [ 189.199129][ T7567] ? rate_control_rate_init+0x5a6/0x630 [ 189.204679][ T7567] ? rate_control_rate_init+0x5a8/0x630 [ 189.210233][ T7567] handle_bug+0x9c/0x200 [ 189.214481][ T7567] exc_invalid_op+0x1a/0x50 [ 189.218998][ T7567] asm_exc_invalid_op+0x1a/0x20 [ 189.223850][ T7567] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 189.230016][ T7567] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 189.249627][ T7567] RSP: 0018:ffffc90004f2f008 EFLAGS: 00010283 [ 189.255703][ T7567] RAX: ffffffff8b678505 RBX: ffff888012b50050 RCX: 0000000000080000 [ 189.263679][ T7567] RDX: ffffc90005dfa000 RSI: 000000000000053d RDI: 000000000000053e [ 189.271653][ T7567] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 189.279625][ T7567] R10: dffffc0000000000 R11: ffffed100256a031 R12: ffffffff8b678077 [ 189.287601][ T7567] R13: ffff888059170f40 R14: 0000000000000001 R15: 0000000000000000 [ 189.295578][ T7567] ? rate_control_rate_init+0x117/0x630 [ 189.301140][ T7567] ? rate_control_rate_init+0x117/0x630 [ 189.306692][ T7567] ? rate_control_rate_init+0x5a5/0x630 [ 189.312247][ T7567] ? rate_control_rate_init+0x5a5/0x630 [ 189.317821][ T7567] rate_control_rate_init_all_links+0xf4/0x190 [ 189.323996][ T7567] sta_apply_auth_flags+0x1bc/0x430 [ 189.329214][ T7567] sta_apply_parameters+0x1291/0x1b50 [ 189.334623][ T7567] ieee80211_add_station+0x3de/0x700 [ 189.339941][ T7567] rdev_add_station+0xfc/0x290 [ 189.344731][ T7567] nl80211_new_station+0x1b4e/0x1fd0 [ 189.350033][ T7567] ? trace_contention_end+0x3d/0x140 [ 189.355345][ T7567] ? __pfx_nl80211_new_station+0x10/0x10 [ 189.360985][ T7567] ? __rtnl_unlock+0xc3/0xe0 [ 189.365608][ T7567] ? nl80211_pre_doit+0x53d/0x890 [ 189.370654][ T7567] genl_family_rcv_msg_doit+0x233/0x340 [ 189.376216][ T7567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 189.382303][ T7567] ? bpf_lsm_capable+0x9/0x20 [ 189.386992][ T7567] ? security_capable+0x7e/0x2c0 [ 189.391954][ T7567] genl_rcv_msg+0x614/0x7a0 [ 189.396478][ T7567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.401510][ T7567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 189.406885][ T7567] ? __pfx_nl80211_new_station+0x10/0x10 [ 189.412527][ T7567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 189.417995][ T7567] ? __asan_memcpy+0x40/0x70 [ 189.422594][ T7567] ? __skb_clone+0x5c/0x6c0 [ 189.427107][ T7567] netlink_rcv_skb+0x226/0x4a0 [ 189.431889][ T7567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.436940][ T7567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.442284][ T7567] ? down_read+0x2b9/0x320 [ 189.446815][ T7567] genl_rcv+0x28/0x40 [ 189.450827][ T7567] netlink_unicast+0x7bd/0x940 [ 189.455633][ T7567] netlink_sendmsg+0x7c3/0xae0 [ 189.460433][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.465838][ T7567] ? apparmor_socket_sendmsg+0x98/0x360 [ 189.471394][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.476705][ T7567] sock_sendmsg_nosec+0x13a/0x180 [ 189.481751][ T7567] ____sys_sendmsg+0x54e/0x850 [ 189.486526][ T7567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.491823][ T7567] ? import_iovec+0x73/0xa0 [ 189.496342][ T7567] ___sys_sendmsg+0x2a5/0x360 [ 189.501033][ T7567] ? __lock_acquire+0x747/0x2de0 [ 189.506029][ T7567] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.511253][ T7567] ? futex_wait+0x2a2/0x390 [ 189.515801][ T7567] ? __fget_files+0x2a/0x420 [ 189.520407][ T7567] ? __fget_files+0x3a2/0x420 [ 189.525107][ T7567] __x64_sys_sendmsg+0x1b1/0x290 [ 189.530163][ T7567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.535754][ T7567] do_syscall_64+0x166/0x520 [ 189.540360][ T7567] ? trace_irq_disable+0x3b/0x140 [ 189.545414][ T7567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.551512][ T7567] ? clear_bhb_loop+0x70/0xc0 [ 189.556243][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.562149][ T7567] RIP: 0033:0x7fcb0539e159 [ 189.566573][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.586277][ T7567] RSP: 002b:00007fcb0623b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.594698][ T7567] RAX: ffffffffffffffda RBX: 00007fcb05625fa0 RCX: 00007fcb0539e159 [ 189.602680][ T7567] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 189.610657][ T7567] RBP: 00007fcb0543506b R08: 0000000000000000 R09: 0000000000000000 [ 189.618631][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.626603][ T7567] R13: 00007fcb05626038 R14: 00007fcb05625fa0 R15: 00007ffd8ef0ff88 [ 189.634605][ T7567] [ 189.637789][ T7567] Kernel Offset: disabled [ 189.642120][ T7567] Rebooting in 86400 seconds..