last executing test programs: 4.597705789s ago: executing program 4 (id=1726): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$vmci(0xffffff9c, &(0x7f0000001140), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4.260102589s ago: executing program 2 (id=1730): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) close(r4) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r4, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.774398138s ago: executing program 0 (id=1733): timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r0, 0x409, 0x7) fcntl$addseals(r0, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040000}, 0x10) 3.483583655s ago: executing program 0 (id=1736): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r1 = getpid() syz_pidfd_open(r1, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4c854}, 0x4000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000300)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}, {&(0x7f00000003c0)="a303916238978066cac87e793838b68758066abd1f5b1c81d0f71caa6d9a501ee762e9129f58a1c13598f096dfff966de9737fb4bb22767752b7a5c932e422d6656ce10a102c81173b3b", 0x4a}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 3.27758783s ago: executing program 0 (id=1739): listen(0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x4, 0x19, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3.187953993s ago: executing program 4 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x7c}}, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0xfffffffc, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 3.170638128s ago: executing program 0 (id=1741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x7fffffff}}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x102) write(r3, &(0x7f0000000140)='never', 0x5) getpid() setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x803, 0x2, 0x5, 0x45, 0x44, 0x0, 0x4, 0xf8, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xbfffffff, 0x83, 0x38, 0x3, 0x84, 0x4, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x200, 0x3, 0x201d, 0x0, 0xb, 0x1ab7e5aa9860b0f6}}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x7) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.940145829s ago: executing program 0 (id=1743): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009"], 0x0) 2.250059683s ago: executing program 4 (id=1745): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000f00), 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4f}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xeed2, 0x0, 0x3, 0x2d5, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x4002100, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dd, 0x1, 0x0, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x21b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7af4, 0x8200, 0x2, 0x2b7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.091980204s ago: executing program 2 (id=1747): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r1, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 2.030985441s ago: executing program 4 (id=1749): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r1 = getpid() syz_pidfd_open(r1, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="370525bd7000feffffff0200000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4c854}, 0x4000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000300)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}, {&(0x7f00000003c0)="a303916238978066cac87e793838b68758066abd1f5b1c81d0f71caa6d9a501ee762e9129f58a1c13598f096dfff966de9737fb4bb22767752b7a5c932e422d6656ce10a102c81173b3b", 0x4a}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 1.980200644s ago: executing program 3 (id=1750): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000002c0)="60a75dc565ef116aa412580445034943beea59637ecd48880c7da002f8b5f2a33978bb5e368fad90e9af284c9c81dbc900196642", 0x34}], 0x2}, 0x40011) 1.975077735s ago: executing program 2 (id=1751): listen(0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x4, 0x19, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.899545535s ago: executing program 3 (id=1753): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) dup(0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 1.843359181s ago: executing program 4 (id=1754): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) 1.831836164s ago: executing program 0 (id=1755): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) remap_file_pages(&(0x7f000012c000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) 1.720071143s ago: executing program 2 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x7c}}, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0xfffffffc, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 1.634146516s ago: executing program 3 (id=1758): timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r0, 0x409, 0x7) fcntl$addseals(r0, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(0x0, 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040000}, 0x10) 1.482370616s ago: executing program 3 (id=1760): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x2a4a1a08, 0x1ff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x109082, 0x0) write(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.309978342s ago: executing program 1 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) 1.071997855s ago: executing program 1 (id=1762): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r1}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, 0x0}}], 0x2, 0x14) shutdown(r3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002600090122bd7008faffffff7500000008003f80040022800800030047"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 901.97958ms ago: executing program 1 (id=1763): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r1, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 810.176855ms ago: executing program 3 (id=1764): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r1 = getpid() syz_pidfd_open(r1, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="370525bd7000feffffff0200000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4c854}, 0x4000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000300)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}, {&(0x7f00000003c0)="a303916238978066cac87e793838b68758066abd1f5b1c81d0f71caa6d9a501ee762e9129f58a1c13598f096dfff966de9737fb4bb22767752b7a5c932e422d6656ce10a102c81173b3b", 0x4a}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 763.835837ms ago: executing program 4 (id=1765): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009"], 0x0) 722.778778ms ago: executing program 1 (id=1766): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x7, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x1000000) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd631cce620300fe"], 0xfe1b) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl(r2, 0x4c01, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl(0xffffffffffffffff, 0x4c01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r4) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 699.664474ms ago: executing program 2 (id=1767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005b80)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x100, 0x7, 0xaf, {0x1, 0x5, 0x7, 0x2, 0x0, 0xf, 0xa734, 0x200, 0x95b0, 0x8000, 0x101, r4, r5, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x4, @any, 0x1d}, 0xe) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r7, &(0x7f0000000840)='8\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') write(r8, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029", 0x3b) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000000a40)='dummy_udc.0', 0xb) 159.249937ms ago: executing program 3 (id=1768): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) dup(0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 82.213588ms ago: executing program 1 (id=1769): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, 0x0, 0x0) 81.144188ms ago: executing program 2 (id=1770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002b40)={0x2020}, 0x2020) 0s ago: executing program 1 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): speed USB device number 3 using dummy_hcd [ 82.597396][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 82.879071][ T4320] usb 2-1: unable to read config index 0 descriptor/all [ 83.003213][ T4320] usb 2-1: can't read configurations, error -71 [ 83.019313][ T7] usb 1-1: USB disconnect, device number 2 [ 83.146903][ T4434] kAFS: No cell specified [ 83.351535][ T4440] Config c/1 of g1 needs at least one function. [ 83.373485][ T4440] udc dummy_udc.0: failed to start g1: -22 [ 83.399845][ T4440] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 83.517725][ T4440] UDC core: g1: couldn't find an available UDC or it's busy [ 84.471545][ T4452] Zero length message leads to an empty skb [ 84.618747][ T4460] netlink: 14 bytes leftover after parsing attributes in process `syz.2.26'. [ 84.743064][ T26] audit: type=1326 audit(1790773271.358:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.0.29" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f118919e159 code=0x0 [ 84.797345][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.805841][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.825839][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.485356][ T4460] bond0 (unregistering): Released all slaves [ 85.513356][ T126] cfg80211: failed to load regulatory.db [ 85.527378][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 85.555310][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.618321][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.657268][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.689039][ T7] usb 4-1: Product: syz [ 85.896025][ T4475] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 85.902923][ T4475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.911898][ T4475] vhci_hcd vhci_hcd.0: Device attached [ 86.127794][ T4317] vhci_hcd: vhci_device speed not set [ 86.197236][ T4317] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 86.619550][ T4472] ======================================================= [ 86.619550][ T4472] WARNING: The mand mount option has been deprecated and [ 86.619550][ T4472] and is ignored by this kernel. Remove the mand [ 86.619550][ T4472] option from the mount to silence this warning. [ 86.619550][ T4472] ======================================================= [ 86.682434][ T4479] vhci_hcd: connection reset by peer [ 86.690362][ T9] vhci_hcd: stop threads [ 86.694985][ T9] vhci_hcd: release socket [ 86.740491][ T9] vhci_hcd: disconnect device [ 87.771348][ T7] usb 4-1: Manufacturer: syz [ 87.776003][ T7] usb 4-1: SerialNumber: syz [ 87.790411][ T7] usb 4-1: config 0 descriptor?? [ 87.867698][ T4492] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.939114][ T7] usb 4-1: can't set config #0, error -71 [ 87.946604][ T7] usb 4-1: USB disconnect, device number 3 [ 87.987406][ T4290] Bluetooth: hci4: command 0x0405 tx timeout [ 88.031124][ T4496] loop8: detected capacity change from 0 to 16384 [ 91.357390][ T4317] vhci_hcd: vhci_device speed not set [ 91.685451][ T4525] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 91.685451][ T4525] [ 91.704134][ T4525] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 91.718428][ T4525] CIFS: Attempting to mount \\172.20.20.170\share [ 92.088291][ T956] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.161287][ T4536] netlink: 'syz.2.42': attribute type 4 has an invalid length. [ 92.317301][ T956] usb 5-1: Using ep0 maxpacket: 16 [ 92.962499][ T4525] CIFS: VFS: cifs_mount failed w/return code = -112 [ 93.569438][ T4542] Bluetooth: MGMT ver 1.22 [ 93.597967][ T4542] Bluetooth: hci0: service_discovery: too big uuid_count value 48427 [ 94.785099][ T956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.803929][ T956] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 94.843664][ T956] usb 5-1: can't read configurations, error -71 [ 97.236077][ T4557] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 97.236077][ T4557] [ 97.250084][ T4557] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 97.263069][ T4557] CIFS: Attempting to mount \\172.20.20.170\share [ 97.717310][ T4557] CIFS: VFS: error -4 create cifsd thread [ 97.723839][ T4557] CIFS: VFS: cifs_mount failed w/return code = -4 [ 98.309899][ T4569] file system registered [ 98.312779][ T4569] unloading [ 98.361145][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.368770][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.381314][ T4565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.157156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.417187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 99.610860][ T4583] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 99.617425][ T4583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.625558][ T4585] vhci_hcd: xmit failed -107 [ 99.632916][ T4583] vhci_hcd vhci_hcd.0: Device attached [ 99.642190][ T4327] vhci_hcd: stop threads [ 99.647018][ T4327] vhci_hcd: release socket [ 99.657921][ T4327] vhci_hcd: disconnect device [ 100.707161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 101.186667][ T4613] device syzkaller0 entered promiscuous mode [ 101.527056][ T4617] file system registered [ 101.540263][ T4617] unloading [ 102.356586][ T4642] file system registered [ 102.509224][ T4642] unloading [ 102.991359][ T4661] FAULT_INJECTION: forcing a failure. [ 102.991359][ T4661] name failslab, interval 1, probability 0, space 0, times 0 [ 103.023862][ T4661] CPU: 0 PID: 4661 Comm: syz.4.86 Not tainted syzkaller #0 [ 103.031125][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.041201][ T4661] Call Trace: [ 103.044497][ T4661] [ 103.047448][ T4661] dump_stack_lvl+0x188/0x24e [ 103.052149][ T4661] ? show_regs_print_info+0x12/0x12 [ 103.057372][ T4661] ? load_image+0x410/0x410 [ 103.061899][ T4661] ? __might_sleep+0xd0/0xd0 [ 103.066502][ T4661] ? __lock_acquire+0x7c40/0x7c40 [ 103.071551][ T4661] should_fail_ex+0x390/0x4c0 [ 103.076258][ T4661] should_failslab+0x5/0x20 [ 103.080784][ T4661] slab_pre_alloc_hook+0x59/0x300 [ 103.085835][ T4661] kmem_cache_alloc+0x56/0x2f0 [ 103.090611][ T4661] ? __alloc_file+0x25/0x230 [ 103.095223][ T4661] __alloc_file+0x25/0x230 [ 103.099658][ T4661] alloc_empty_file+0x90/0x180 [ 103.104438][ T4661] alloc_file+0x5b/0x5f0 [ 103.108705][ T4661] alloc_file_pseudo+0x180/0x200 [ 103.113666][ T4661] ? alloc_empty_file_noaccount+0x80/0x80 [ 103.119412][ T4661] ? alloc_fd+0x590/0x640 [ 103.123775][ T4661] sock_alloc_file+0xb3/0x240 [ 103.128496][ T4661] __sys_socket+0x12d/0x190 [ 103.133028][ T4661] __x64_sys_socket+0x76/0x80 [ 103.137731][ T4661] do_syscall_64+0x4c/0xa0 [ 103.142168][ T4661] ? clear_bhb_loop+0x60/0xb0 [ 103.146867][ T4661] ? clear_bhb_loop+0x60/0xb0 [ 103.151567][ T4661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.157487][ T4661] RIP: 0033:0x7fc64a19e159 [ 103.161921][ T4661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.181551][ T4661] RSP: 002b:00007fc64b134028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.187742][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.189970][ T4661] RAX: ffffffffffffffda RBX: 00007fc64a426090 RCX: 00007fc64a19e159 [ 103.189988][ T4661] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 103.189998][ T4661] RBP: 00007fc64a23506b R08: 0000000000000000 R09: 0000000000000000 [ 103.190009][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.229819][ T4661] R13: 00007fc64a426128 R14: 00007fc64a426090 R15: 00007ffc7543f758 [ 103.237824][ T4661] [ 103.392448][ T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.415345][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.453976][ T22] usb 4-1: Product: syz [ 103.478725][ T22] usb 4-1: Manufacturer: syz [ 103.492103][ T22] usb 4-1: SerialNumber: syz [ 103.614076][ T4675] netlink: 128 bytes leftover after parsing attributes in process `syz.2.92'. [ 103.686048][ T22] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.603849][ T4699] file system registered [ 104.625999][ T4699] unloading [ 104.668705][ T4693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.710011][ T4693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.867508][ T22] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 104.880419][ T22] ath9k_htc: Failed to initialize the device [ 104.933132][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 104.975345][ T22] usb 4-1: USB disconnect, device number 4 [ 105.332113][ T4356] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.517215][ T4356] usb 5-1: Using ep0 maxpacket: 8 [ 105.545342][ T4356] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.739323][ T4356] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.837169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 105.857155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 105.867159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 105.877152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 105.887152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 106.777573][ T4356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 106.797214][ T4356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 106.827246][ T4356] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 106.836369][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.897956][ T4356] hub 5-1:1.0: bad descriptor, ignoring hub [ 106.903922][ T4356] hub: probe of 5-1:1.0 failed with error -5 [ 106.927665][ T4356] cdc_wdm 5-1:1.0: skipping garbage [ 106.932975][ T4356] cdc_wdm 5-1:1.0: skipping garbage [ 106.955288][ T4356] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 106.977342][ T4356] cdc_wdm 5-1:1.0: Unknown control protocol [ 107.027410][ T956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.227359][ T956] usb 2-1: Using ep0 maxpacket: 32 [ 107.238177][ T956] usb 2-1: config index 0 descriptor too short (expected 13339, got 27) [ 107.283225][ T956] usb 2-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 107.324286][ T956] usb 2-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 107.394999][ T956] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.450015][ T956] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.503331][ T4713] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 107.517946][ T956] usb 2-1: Product: syz [ 107.559801][ T956] usb 2-1: Manufacturer: syz [ 107.609057][ T956] usb 2-1: SerialNumber: syz [ 109.575582][ T956] usb 2-1: USB disconnect, device number 5 [ 109.888847][ T4356] usb 5-1: USB disconnect, device number 5 [ 109.939152][ T4825] overlayfs: missing 'lowerdir' [ 110.747277][ T956] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.937406][ T956] usb 3-1: Using ep0 maxpacket: 16 [ 110.946530][ T956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.967993][ T956] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.002643][ T4855] fuse: Unknown parameter 'grou00000000000000000000' [ 111.009581][ T956] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.044577][ T956] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 111.076202][ T956] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.096364][ T956] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 111.144184][ T956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.432181][ T956] usb 3-1: config 0 descriptor?? [ 113.641820][ T4868] overlayfs: missing 'lowerdir' [ 114.154419][ T956] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 114.490165][ T956] usb 3-1: USB disconnect, device number 2 [ 114.693131][ T4883] fido_id[4883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.708034][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.927303][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 114.949569][ T22] usb 4-1: config index 0 descriptor too short (expected 13339, got 27) [ 114.984255][ T22] usb 4-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 115.217201][ T22] usb 4-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 115.330779][ T22] usb 4-1: string descriptor 0 read error: -71 [ 115.362672][ T4939] fuse: Bad value for 'fd' [ 115.466707][ T22] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.536947][ T22] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.824543][ T22] usb 4-1: can't set config #108, error -71 [ 115.867033][ T22] usb 4-1: USB disconnect, device number 5 [ 116.560991][ T4953] overlayfs: missing 'lowerdir' [ 117.437143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 119.095197][ T4984] sched: RT throttling activated [ 119.277141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 121.161199][ T4997] overlayfs: missing 'lowerdir' [ 121.178689][ T4996] fuse: Unknown parameter 'grou00000000000000000000' [ 121.247210][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.407358][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 122.793365][ T4317] usb 5-1: device descriptor read/all, error -71 [ 124.521554][ T5068] fuse: Unknown parameter 'group_i00000000000000000000' [ 124.563658][ T5070] overlayfs: missing 'lowerdir' [ 125.877202][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.247268][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.457340][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 126.476448][ T4317] usb 5-1: config index 0 descriptor too short (expected 13339, got 27) [ 126.605727][ T4317] usb 5-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 126.771551][ T4317] usb 5-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 126.951018][ T4317] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 127.110384][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 127.247421][ T4317] usb 5-1: Product: syz [ 127.321979][ T4317] usb 5-1: Manufacturer: syz [ 127.399267][ T4317] usb 5-1: SerialNumber: syz [ 128.043895][ T4317] usb 5-1: USB disconnect, device number 8 [ 128.584656][ T5133] file system registered [ 128.590531][ T5133] unloading [ 129.726821][ T5152] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.617334][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.710492][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147241][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 133.159048][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.206706][ T14] usb 1-1: config 0 has no interfaces? [ 133.240983][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.287375][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.295589][ T14] usb 1-1: Product: syz [ 133.357148][ T4356] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.375343][ T14] usb 1-1: Manufacturer: syz [ 133.385308][ T14] usb 1-1: SerialNumber: syz [ 133.404098][ T14] usb 1-1: config 0 descriptor?? [ 133.557194][ T4356] usb 4-1: Using ep0 maxpacket: 16 [ 133.610476][ T5197] file system registered [ 133.616129][ T5197] unloading [ 133.928793][ T5206] fuse: Unknown parameter 'group_i00000000000000000000' [ 134.220216][ T4356] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.229284][ T4356] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.237562][ T4356] usb 4-1: can't read configurations, error -71 [ 135.688897][ T4368] usb 1-1: USB disconnect, device number 3 [ 135.888721][ T5245] file system registered [ 135.901393][ T5245] unloading [ 136.039685][ T5251] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.867295][ T5279] file system registered [ 137.888408][ T5279] unloading [ 138.317299][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.578947][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 139.599204][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.653375][ T4317] usb 1-1: config 0 has no interfaces? [ 139.730946][ T4317] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.767305][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.803174][ T4317] usb 1-1: Product: syz [ 139.805800][ T5292] fuse: Unknown parameter 'group_id00000000000000000000' [ 139.816812][ T4317] usb 1-1: Manufacturer: syz [ 139.846119][ T4317] usb 1-1: SerialNumber: syz [ 139.915422][ T4317] usb 1-1: config 0 descriptor?? [ 140.586337][ T5311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.246176][ T4317] usb 1-1: USB disconnect, device number 4 [ 141.298627][ T5337] file system registered [ 141.315609][ T5337] unloading [ 141.357496][ T5339] [U]  [ 141.360337][ T5339] [U] K{‘ [ 141.360928][ T126] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.363540][ T5339] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 141.445225][ T5342] fuse: Unknown parameter 'group_id00000000000000000000' [ 141.458761][ T5339] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 141.488013][ T5339] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 141.532065][ T5339] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 141.577192][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 141.639347][ T5339] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 141.671533][ T5339] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 141.692569][ T5339] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 141.705756][ T5339] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 141.937658][ T5339] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 142.045494][ T5339] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 142.112184][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.135539][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 142.142295][ T5339] [U] 22½“Æ©ÐÛ©X?0;3U± [ 142.158217][ T126] usb 5-1: can't read configurations, error -71 [ 142.197727][ T5339] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 142.322838][ T5339] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 142.372888][ T5366] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.386346][ T5339] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 142.413930][ T5339] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 142.469992][ T5339] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 143.439231][ T5339] [U] ¹ EC [ 143.442609][ T5339] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 143.586095][ T5339] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 145.377107][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.647474][ T5389] fuse: Bad value for 'user_id' [ 145.727247][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 145.738651][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.753709][ T22] usb 5-1: config 0 has no interfaces? [ 145.787529][ T22] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 145.796618][ T22] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 145.810537][ T22] usb 5-1: Product: syz [ 145.814751][ T22] usb 5-1: Manufacturer: syz [ 145.826992][ T22] usb 5-1: SerialNumber: syz [ 145.853052][ T22] usb 5-1: config 0 descriptor?? [ 145.937164][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.944890][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.097250][ T126] usb 4-1: device descriptor read/64, error -71 [ 146.112992][ T5408] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.127182][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 146.134140][ T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.157825][ T14] usb 1-1: config 0 has no interface number 0 [ 146.185952][ T14] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 146.196558][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.212505][ T14] usb 1-1: Product: syz [ 146.221279][ T14] usb 1-1: Manufacturer: syz [ 146.231625][ T14] usb 1-1: SerialNumber: syz [ 146.259976][ T14] usb 1-1: config 0 descriptor?? [ 146.275273][ T14] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 146.295615][ T14] usb 1-1: selecting invalid altsetting 1 [ 146.316094][ T14] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 146.357508][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.373017][ T5417] [U]  [ 146.375471][ T14] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 146.384694][ T5417] [U] K{‘ [ 146.385811][ T126] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.391551][ T5417] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 146.415139][ T14] usb 1-1: media controller created [ 146.437575][ T5417] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 146.437914][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.483424][ T5417] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 146.499298][ T5417] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 146.504247][ T22] usb 5-1: USB disconnect, device number 11 [ 146.541184][ T5417] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 146.568740][ T5417] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 146.575669][ T126] usb 4-1: device descriptor read/64, error -71 [ 146.587881][ T5417] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 146.603871][ T5417] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 146.704851][ T5417] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 146.708486][ T126] usb usb4-port1: attempt power cycle [ 146.718346][ T5417] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 146.744243][ T5417] [U] 22½“Æ©ÐÛ©X?0;3U± [ 146.750595][ T5417] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 146.780913][ T5417] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 146.800354][ T5417] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 146.817975][ T5417] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 147.427176][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.507342][ T5395] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 147.588416][ T14] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 147.656529][ T14] zl10353_read_register: readreg error (reg=127, ret==-32) [ 147.665208][ T14] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 147.683455][ T5417] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 147.688602][ T126] usb 4-1: device descriptor read/8, error -71 [ 147.703004][ T5417] [U] ¹ EC [ 147.710355][ T14] usb 1-1: USB disconnect, device number 5 [ 147.740683][ T5417] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 147.778970][ T5417] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 147.895935][ T5432] fuse: Bad value for 'user_id' [ 147.977140][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.017778][ T126] usb 4-1: device descriptor read/8, error -71 [ 148.137318][ T126] usb usb4-port1: unable to enumerate USB device [ 149.689019][ T5459] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 150.591374][ T5464] fuse: Bad value for 'user_id' [ 151.217147][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.374529][ T5477] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 152.607273][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 152.614130][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.667241][ T14] usb 5-1: config 0 has no interfaces? [ 152.690363][ T14] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.277140][ T14] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.285355][ T14] usb 5-1: Product: syz [ 154.307101][ T14] usb 5-1: Manufacturer: syz [ 154.311737][ T14] usb 5-1: SerialNumber: syz [ 154.325134][ T14] usb 5-1: config 0 descriptor?? [ 154.512481][ T14] usb 5-1: can't set config #0, error -71 [ 154.536211][ T14] usb 5-1: USB disconnect, device number 12 [ 155.376239][ T5505] fuse: Bad value for 'fd' syzkaller syzkaller login: [ 159.035039][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.043779][ T5544] fuse: Bad value for 'fd' [ 160.137192][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 160.863074][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.883511][ T14] usb 1-1: config 0 has no interfaces? [ 160.906281][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 160.928206][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 160.937640][ T14] usb 1-1: Product: syz [ 160.945705][ T14] usb 1-1: Manufacturer: syz [ 160.961242][ T14] usb 1-1: SerialNumber: syz [ 160.975135][ T14] usb 1-1: config 0 descriptor?? [ 162.542706][ T4320] usb 1-1: USB disconnect, device number 6 syzkaller syzkaller login: [ 163.722828][ T5584] fuse: Bad value for 'fd' [ 164.097390][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.607233][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 165.707320][ T4368] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.037403][ T4368] usb 1-1: Using ep0 maxpacket: 32 [ 166.623754][ T4368] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.835972][ T4368] usb 1-1: config 0 has no interfaces? [ 166.949999][ T4368] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.106023][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.207132][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.227273][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.236500][ T4368] usb 1-1: Product: syz [ 168.114042][ T4368] usb 1-1: Manufacturer: syz [ 168.119073][ T14] usb 2-1: can't read configurations, error -71 [ 168.125365][ T4368] usb 1-1: SerialNumber: syz [ 168.139527][ T4368] usb 1-1: config 0 descriptor?? [ 169.835518][ T4328] usb 1-1: USB disconnect, device number 7 [ 170.923379][ T5616] binder: 5615:5616 ioctl c0306201 2000000004c0 returned -14 [ 170.958714][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.968079][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.984636][ T5616] binder: 5615:5616 ioctl c0306201 2000000001c0 returned -14 [ 171.020717][ T5629] fuse: Bad value for 'fd' [ 174.027963][ T5662] fuse: Bad value for 'fd' [ 174.404906][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.847117][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 177.432624][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 177.440926][ T7] usb 4-1: can't read configurations, error -71 [ 177.637759][ T5684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 177.644333][ T5684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.653449][ T5684] vhci_hcd vhci_hcd.0: Device attached [ 177.661997][ T5684] binder: 5683:5684 ioctl 84009422 200000000500 returned -22 [ 177.670551][ T5684] binder: 5683:5684 ioctl 50009403 200000000900 returned -22 [ 177.703195][ T5684] binder: 5683:5684 ioctl 4018620d 0 returned -22 [ 177.847218][ T4321] vhci_hcd: vhci_device speed not set [ 179.357115][ T4321] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 179.572565][ T5704] fuse: Bad value for 'fd' [ 181.027125][ T4317] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.347708][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 181.356140][ T4317] usb 4-1: config index 0 descriptor too short (expected 13339, got 27) [ 181.475077][ T4317] usb 4-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 182.312546][ T4317] usb 4-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 182.632925][ T4317] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.717468][ T5685] vhci_hcd: connection reset by peer [ 182.723058][ T4819] vhci_hcd: stop threads [ 182.731566][ T4819] vhci_hcd: release socket [ 182.800297][ T4819] vhci_hcd: disconnect device [ 182.826395][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.881730][ T4317] usb 4-1: Product: syz [ 182.885941][ T4317] usb 4-1: Manufacturer: syz [ 182.953078][ T4317] usb 4-1: SerialNumber: syz [ 183.215980][ T4317] usb 4-1: USB disconnect, device number 14 [ 183.320386][ T5746] fuse: Invalid rootmode [ 184.567237][ T4321] vhci_hcd: vhci_device speed not set [ 186.317142][ T5769] fuse: Invalid rootmode [ 187.772158][ T4321] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.122377][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 189.138340][ T4321] usb 1-1: config index 0 descriptor too short (expected 13339, got 27) [ 189.170450][ T4321] usb 1-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 189.181821][ T4321] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 189.222503][ T4321] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.235821][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.245223][ T4321] usb 1-1: Product: syz [ 189.254518][ T4321] usb 1-1: Manufacturer: syz [ 189.271718][ T4321] usb 1-1: SerialNumber: syz [ 190.447697][ T4321] usb 1-1: USB disconnect, device number 8 [ 190.498309][ T5807] fuse: Invalid rootmode [ 193.796297][ T5843] [U]  [ 193.799103][ T5843] [U] K{‘ [ 193.842168][ T5843] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 193.898472][ T5843] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 194.017880][ T5843] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 194.075293][ T5846] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 194.152345][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.158965][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.836862][ T5843] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 194.872639][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.879185][ T5843] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 194.913581][ T5843] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 194.983473][ T5843] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 194.995325][ T5843] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 201.906678][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.952385][ T5895] Config c/1 of g1 needs at least one function. [ 201.997652][ T5895] udc dummy_udc.0: failed to start g1: -22 [ 202.051485][ T5897] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 202.068910][ T5895] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 202.743882][ T26] audit: type=1326 audit(1790773380.361:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.3.403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89e7f9e159 code=0x0 [ 202.744556][ T5889] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 202.767028][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.791310][ T5889] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 202.796635][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.808928][ T5889] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 202.825478][ T5889] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 203.041270][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.056317][ T5889] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 203.951481][ T5889] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 204.016451][ T5889] [U] 22½“Æ©Ðû©x?0;3u± [ 204.034544][ T5889] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 204.188602][ T5889] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 204.216865][ T5889] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 204.244780][ T5913] FAULT_INJECTION: forcing a failure. [ 204.244780][ T5913] name failslab, interval 1, probability 0, space 0, times 0 [ 204.267197][ T5889] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 204.267266][ T5913] CPU: 1 PID: 5913 Comm: syz.1.408 Not tainted syzkaller #0 [ 204.273405][ T5889] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 204.280658][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.303276][ T5913] Call Trace: [ 204.304985][ T5889] [U] ¹ ec [ 204.306562][ T5913] [ 204.309669][ T5889] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 204.312583][ T5913] dump_stack_lvl+0x188/0x24e [ 204.325504][ T5889] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 204.329458][ T5913] ? show_regs_print_info+0x12/0x12 [ 204.349773][ T5913] ? load_image+0x410/0x410 [ 204.354284][ T5913] ? __might_sleep+0xd0/0xd0 [ 204.358879][ T5913] ? __lock_acquire+0x7c40/0x7c40 [ 204.363913][ T5913] should_fail_ex+0x390/0x4c0 [ 204.368596][ T5913] should_failslab+0x5/0x20 [ 204.373095][ T5913] slab_pre_alloc_hook+0x59/0x300 [ 204.378119][ T5913] ? raw_ioctl+0x1c53/0x3cd0 [ 204.382714][ T5913] __kmem_cache_alloc_node+0x4f/0x270 [ 204.388084][ T5913] ? raw_ioctl+0x1c53/0x3cd0 [ 204.392668][ T5913] kmalloc_trace+0x26/0xe0 [ 204.397114][ T5913] raw_ioctl+0x1c53/0x3cd0 [ 204.401637][ T5913] ? __kmem_cache_free+0xb6/0x200 [ 204.406675][ T5913] ? tomoyo_path_number_perm+0x205/0x650 [ 204.412320][ T5913] ? tomoyo_path_number_perm+0x5a4/0x650 [ 204.417954][ T5913] ? tomoyo_path_number_perm+0x205/0x650 [ 204.423584][ T5913] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 204.429340][ T5913] ? make_qualifier+0x3b0/0x3b0 [ 204.434216][ T5913] ? bpf_lsm_file_ioctl+0x5/0x10 [ 204.439169][ T5913] ? security_file_ioctl+0x7c/0xa0 [ 204.444280][ T5913] ? make_qualifier+0x3b0/0x3b0 [ 204.449217][ T5913] __se_sys_ioctl+0xfa/0x170 [ 204.453842][ T5913] do_syscall_64+0x4c/0xa0 [ 204.458343][ T5913] ? clear_bhb_loop+0x60/0xb0 [ 204.463016][ T5913] ? clear_bhb_loop+0x60/0xb0 [ 204.467690][ T5913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.473610][ T5913] RIP: 0033:0x7feee459ddeb [ 204.478027][ T5913] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 204.497629][ T5913] RSP: 002b:00007feee5409f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.506050][ T5913] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007feee459ddeb [ 204.514028][ T5913] RDX: 00007feee540afd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 204.522001][ T5913] RBP: 00007feee540afd0 R08: 0000000000000001 R09: 00000000ffffffff [ 204.529978][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feee5409fa0 [ 204.537949][ T5913] R13: 00002000000003c0 R14: 0000000000000002 R15: 0000000000000000 [ 204.545927][ T5913] [ 204.549052][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.663193][ T5921] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 206.839114][ T5928] Config c/1 of g1 needs at least one function. [ 206.845577][ T5928] udc dummy_udc.0: failed to start g1: -22 [ 206.975844][ T5933] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 207.747668][ T5928] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 207.883535][ T5936] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 207.895087][ T5928] UDC core: g1: couldn't find an available UDC or it's busy [ 208.815035][ T5948] fuse: Unknown parameter '017777777777777777777770x0000000000000000' [ 208.915900][ T5948] ip_tables: iptables: counters copy to user failed while replacing table [ 210.581466][ T5948] hub 1-0:1.0: USB hub found [ 210.589538][ T5948] hub 1-0:1.0: 1 port detected [ 210.652909][ T5955] device syzkaller0 entered promiscuous mode [ 210.711080][ T5957] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 211.731334][ T5969] Config c/1 of g1 needs at least one function. [ 211.808406][ T5969] udc dummy_udc.0: failed to start g1: -22 [ 211.858449][ T5973] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 212.558606][ T5969] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 212.569555][ T5969] UDC core: g1: couldn't find an available UDC or it's busy [ 214.912470][ T26] audit: type=1800 audit(1790773392.531:4): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.438" name="max_speed" dev="configfs" ino=40248 res=0 errno=0 [ 215.100900][ T5998] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.240968][ T6011] Config c/1 of g1 needs at least one function. [ 216.269015][ T6011] udc dummy_udc.0: failed to start g1: -22 [ 216.275039][ T6011] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 216.286512][ T6011] UDC core: g1: couldn't find an available UDC or it's busy [ 216.400068][ T6021] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 216.547121][ T4317] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 217.259811][ T4317] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.050441][ T4317] usb 5-1: config 0 has no interface number 0 [ 218.056610][ T4317] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.067768][ T4317] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 218.078565][ T4317] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.087720][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.106171][ T4317] usb 5-1: config 0 descriptor?? [ 218.111887][ T6010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.173404][ T4317] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.266785][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 218.296271][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.380946][ T4317] usb 5-1: USB disconnect, device number 13 [ 218.654312][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.263370][ T6056] autofs4:pid:6056:autofs_fill_super: called with bogus options [ 220.642935][ T6071] jffs2: notice: (6071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.817095][ T4368] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.007087][ T4368] usb 4-1: Using ep0 maxpacket: 16 [ 221.158319][ T6081] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 223.141548][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.276707][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.545490][ T6080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.188140][ T4368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.229596][ T4368] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 224.284348][ T4368] usb 4-1: can't read configurations, error -71 [ 226.037767][ T6108] autofs4:pid:6108:autofs_fill_super: called with bogus options [ 226.046902][ T6110] FAULT_INJECTION: forcing a failure. [ 226.046902][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 226.090381][ T6110] CPU: 1 PID: 6110 Comm: syz.3.471 Not tainted syzkaller #0 [ 226.097731][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.107808][ T6110] Call Trace: [ 226.111102][ T6110] [ 226.114043][ T6110] dump_stack_lvl+0x188/0x24e [ 226.118748][ T6110] ? show_regs_print_info+0x12/0x12 [ 226.123970][ T6110] ? load_image+0x410/0x410 [ 226.128501][ T6110] ? __might_sleep+0xd0/0xd0 [ 226.133108][ T6110] ? __lock_acquire+0x7c40/0x7c40 [ 226.138165][ T6110] should_fail_ex+0x390/0x4c0 [ 226.142872][ T6110] should_failslab+0x5/0x20 [ 226.147397][ T6110] slab_pre_alloc_hook+0x59/0x300 [ 226.152446][ T6110] ? subdev_open+0x88/0x3e0 [ 226.156956][ T6110] __kmem_cache_alloc_node+0x4f/0x270 [ 226.162330][ T6110] ? subdev_open+0x88/0x3e0 [ 226.166829][ T6110] kmalloc_trace+0x26/0xe0 [ 226.171245][ T6110] subdev_open+0x88/0x3e0 [ 226.175571][ T6110] v4l2_open+0x201/0x340 [ 226.179816][ T6110] chrdev_open+0x585/0x5f0 [ 226.184235][ T6110] ? cd_forget+0x160/0x160 [ 226.188651][ T6110] ? fsnotify_perm+0x39b/0x550 [ 226.193410][ T6110] ? cd_forget+0x160/0x160 [ 226.197825][ T6110] do_dentry_open+0x7dd/0x10b0 [ 226.202593][ T6110] path_openat+0x2674/0x2f10 [ 226.207192][ T6110] ? verify_lock_unused+0x140/0x140 [ 226.212390][ T6110] ? do_sys_openat2+0xdd/0x4f0 [ 226.217153][ T6110] ? do_filp_open+0x420/0x420 [ 226.221834][ T6110] do_filp_open+0x1ee/0x420 [ 226.226341][ T6110] ? vfs_tmpfile+0x470/0x470 [ 226.230939][ T6110] ? _raw_spin_unlock+0x24/0x40 [ 226.235785][ T6110] ? alloc_fd+0x590/0x640 [ 226.240118][ T6110] do_sys_openat2+0x14b/0x4f0 [ 226.244790][ T6110] ? do_sys_open+0xe0/0xe0 [ 226.249214][ T6110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 226.255202][ T6110] ? lock_chain_count+0x20/0x20 [ 226.260066][ T6110] __x64_sys_openat+0x135/0x160 [ 226.264924][ T6110] do_syscall_64+0x4c/0xa0 [ 226.269343][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 226.274024][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 226.278697][ T6110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.284591][ T6110] RIP: 0033:0x7f89e7f5e98e [ 226.288999][ T6110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.308612][ T6110] RSP: 002b:00007f89e8e4ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.317026][ T6110] RAX: ffffffffffffffda RBX: 00007f89e8e4b6c0 RCX: 00007f89e7f5e98e [ 226.324987][ T6110] RDX: 0000000000000000 RSI: 00007f89e8e4ac00 RDI: ffffffffffffff9c [ 226.332948][ T6110] RBP: 00007f89e8e4ac00 R08: 0000000000000000 R09: 0000000000000000 [ 226.340909][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 226.348870][ T6110] R13: 00007f89e8226038 R14: 00007f89e8225fa0 R15: 00007ffcbf970928 [ 226.356845][ T6110] [ 226.903207][ T6124] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 229.437178][ T4372] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.669200][ T4372] usb 2-1: Using ep0 maxpacket: 16 [ 230.597894][ T6166] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 231.017286][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.587350][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 232.597104][ T4372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.606808][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.635621][ T4372] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 232.701091][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.713428][ T4372] usb 2-1: can't read configurations, error -71 [ 232.742936][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 232.808517][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 233.565236][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 233.585425][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.619125][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 233.625114][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 233.636857][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 233.642370][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 233.656875][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 233.663285][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 233.899314][ T4372] usb 5-1: USB disconnect, device number 14 [ 234.032456][ T4372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 234.064480][ T4372] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.956025][ T6200] fido_id[6200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.078784][ T6220] nvmet: Invalid value 'f' for trtype [ 238.356868][ T6239] loop2: detected capacity change from 0 to 7 [ 238.475035][ T6016] Dev loop2: unable to read RDB block 7 [ 238.484204][ T6016] loop2: AHDI p2 p3 [ 238.504223][ T6016] loop2: partition table partially beyond EOD, truncated [ 239.437986][ T6016] loop2: p3 start 335544320 is beyond EOD, truncated [ 239.450133][ T3638] Dev loop2: unable to read RDB block 7 [ 239.455739][ T3638] loop2: AHDI p2 p3 [ 241.032874][ T3638] loop2: partition table partially beyond EOD, truncated [ 241.072465][ T3638] loop2: p3 start 335544320 is beyond EOD, truncated [ 241.268249][ T6252] nvmet: Invalid value 'f' for trtype [ 244.330488][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 244.812409][ T6303] nvmet: Invalid value 'f' for trtype [ 245.394079][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.394193][ T6307] bridge0: port 2(bridge_slave_1) entered listening state [ 245.394292][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.394333][ T6307] bridge0: port 1(bridge_slave_0) entered listening state [ 245.966123][ T6307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.043112][ T6332] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 250.287635][ T6348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.541'. [ 250.296552][ T6348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.541'. [ 250.305455][ T6348] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 253.062177][ T6379] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 255.588820][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.595341][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.399247][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.643186][ T6424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.854923][ T6425] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 261.898354][ T6461] file system registered [ 261.924663][ T6461] unloading [ 262.296010][ T6473] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 265.350254][ T6514] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 267.454386][ T6526] jffs2: notice: (6526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.753110][ T6526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.596'. [ 270.244543][ T6555] comedi comedi1: reset error (fatal) [ 270.493569][ T6573] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 271.386209][ T6582] file system registered [ 271.391943][ T6582] unloading [ 271.619631][ T6592] syz.2.614 uses obsolete (PF_INET,SOCK_PACKET) [ 272.547954][ T6592] device syzkaller1 entered promiscuous mode [ 272.703851][ T6604] can0: slcan on ptm0. [ 274.347774][ T6609] can0 (unregistered): slcan off ptm0. [ 275.561633][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 275.569745][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 275.729247][ T6629] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 276.785440][ T6639] file system registered [ 276.798593][ T6639] unloading [ 277.149183][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 277.288065][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 281.352648][ T6681] file system registered [ 281.358244][ T6681] unloading [ 281.466227][ T6687] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 282.096897][ T6704] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 285.545943][ T6742] file system registered [ 285.576908][ T6742] unloading [ 285.680610][ T6750] nvmet: Invalid value 'f' for adrfam [ 285.820129][ T6751] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 289.293094][ T6800] device syzkaller0 entered promiscuous mode [ 289.738090][ T6807] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 290.531694][ T6809] device syzkaller0 entered promiscuous mode [ 291.717109][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.347035][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 293.359185][ T7] usb 3-1: config index 0 descriptor too short (expected 12827, got 27) [ 293.422479][ T7] usb 3-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 293.462168][ T7] usb 3-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 293.501437][ T7] usb 3-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 293.529789][ T7] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.561881][ T7] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.566680][ T6845] can0: slcan on ptm0. [ 293.653872][ T7] usb 3-1: Product: syz [ 293.680490][ T6854] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 293.731696][ T7] usb 3-1: Manufacturer: syz [ 293.841648][ T7] usb 3-1: SerialNumber: syz [ 294.293932][ T7] usb 3-1: USB disconnect, device number 3 [ 294.476819][ T6725] udevd[6725]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 294.570164][ T6725] udevd[6725]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 294.597691][ T6845] can0 (unregistered): slcan off ptm0. [ 297.520785][ T6913] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 297.977843][ T26] audit: type=1326 audit(1790773471.511:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 298.398236][ T26] audit: type=1326 audit(1790773471.601:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 298.677640][ T26] audit: type=1326 audit(1790773471.601:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.098295][ T26] audit: type=1326 audit(1790773471.601:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.139628][ T6922] device syzkaller0 entered promiscuous mode [ 299.178657][ T6916] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 299.213179][ T26] audit: type=1326 audit(1790773471.601:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.237890][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.367400][ T26] audit: type=1326 audit(1790773471.601:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.391238][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.552829][ T26] audit: type=1326 audit(1790773471.601:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.658283][ T26] audit: type=1326 audit(1790773471.601:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.777047][ T26] audit: type=1326 audit(1790773471.601:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.867043][ T26] audit: type=1326 audit(1790773471.601:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.3.696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e7f9e159 code=0x7ffc0000 [ 299.890874][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.108865][ T6980] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 303.803403][ T6986] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 304.260213][ T6990] device syzkaller0 entered promiscuous mode [ 304.293226][ T6992] device syzkaller0 left promiscuous mode [ 304.449555][ T4316] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.487225][ T4356] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 304.647424][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 304.661661][ T4316] usb 5-1: config index 0 descriptor too short (expected 13339, got 27) [ 304.684885][ T4356] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.735328][ T4356] usb 4-1: config 0 has no interface number 0 [ 304.819779][ T4316] usb 5-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 304.839023][ T4356] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.994254][ T4316] usb 5-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 305.026155][ T4356] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 305.162477][ T4316] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.214490][ T4356] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.340123][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.353046][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.388914][ T4316] usb 5-1: Product: syz [ 305.426462][ T4356] usb 4-1: config 0 descriptor?? [ 305.432584][ T4316] usb 5-1: Manufacturer: syz [ 305.443563][ T7003] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 305.454357][ T4316] usb 5-1: SerialNumber: syz [ 305.492579][ T4356] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 306.147012][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.154311][ C1] bridge0: topology change detected, propagating [ 306.162314][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.169575][ C1] bridge0: topology change detected, propagating [ 306.360051][ T4316] usb 5-1: USB disconnect, device number 16 [ 306.489040][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 306.513221][ T4356] usb 4-1: USB disconnect, device number 17 [ 308.427028][ T4372] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 308.439279][ T7045] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 309.407047][ T4372] usb 5-1: Using ep0 maxpacket: 32 [ 309.414171][ T4372] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 309.423794][ T4372] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 309.435121][ T4372] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 309.447614][ T4372] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 309.461175][ T4372] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.481726][ T4372] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 309.490893][ T4372] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 309.499757][ T4372] usb 5-1: Product: syz [ 309.503942][ T4372] usb 5-1: Manufacturer: syz [ 309.510311][ T4372] usb 5-1: SerialNumber: syz [ 309.516701][ T4372] usb 5-1: config 0 descriptor?? [ 309.544248][ T4372] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 309.556298][ T4372] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 309.866374][ T22] usb 5-1: USB disconnect, device number 17 [ 309.866540][ T7039] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 309.883217][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 309.916516][ T7050] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 309.943343][ T22] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 310.552308][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.758714][ T7057] device syzkaller0 entered promiscuous mode [ 310.873186][ T7064] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 312.117058][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.648035][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 313.732300][ T7] usb 2-1: config index 0 descriptor too short (expected 13339, got 27) [ 313.751308][ T7] usb 2-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 313.769777][ T7] usb 2-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 315.196301][ T7102] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 316.944582][ T7] usb 2-1: string descriptor 0 read error: -71 [ 316.969585][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.031055][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038160][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.250124][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.586094][ T7] usb 2-1: can't set config #108, error -71 [ 317.718686][ T7] usb 2-1: USB disconnect, device number 11 [ 319.516218][ T7130] device syzkaller0 left promiscuous mode [ 319.584265][ T7127] device syzkaller0 entered promiscuous mode [ 319.738702][ T7135] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 321.637785][ T7152] jffs2: notice: (7152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 321.873060][ T7145] kernel profiling enabled (shift: 9) [ 323.726570][ T7170] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 324.425890][ T7180] device syzkaller0 entered promiscuous mode [ 324.447222][ T7175] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 324.857400][ T7191] syz.0.761: attempt to access beyond end of device [ 324.857400][ T7191] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 324.926165][ T7191] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 324.936715][ T7191] device-mapper: ioctl: error adding target to table [ 325.158069][ T7210] FAULT_INJECTION: forcing a failure. [ 325.158069][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 325.197664][ T7210] CPU: 0 PID: 7210 Comm: syz.2.768 Not tainted syzkaller #0 [ 325.204989][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.215067][ T7210] Call Trace: [ 325.218367][ T7210] [ 325.221315][ T7210] dump_stack_lvl+0x188/0x24e [ 325.226012][ T7210] ? show_regs_print_info+0x12/0x12 [ 325.231231][ T7210] ? load_image+0x410/0x410 [ 325.235763][ T7210] ? __might_sleep+0xd0/0xd0 [ 325.240383][ T7210] ? __lock_acquire+0x7c40/0x7c40 [ 325.245430][ T7210] should_fail_ex+0x390/0x4c0 [ 325.250128][ T7210] should_failslab+0x5/0x20 [ 325.254642][ T7210] slab_pre_alloc_hook+0x59/0x300 [ 325.259665][ T7210] kmem_cache_alloc+0x56/0x2f0 [ 325.264421][ T7210] ? security_inode_alloc+0x30/0x110 [ 325.269697][ T7210] security_inode_alloc+0x30/0x110 [ 325.274879][ T7210] inode_init_always+0x910/0xc90 [ 325.279827][ T7210] new_inode_pseudo+0x91/0x1c0 [ 325.284762][ T7210] __sock_create+0x129/0x940 [ 325.289348][ T7210] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 325.295345][ T7210] __sys_socket+0xc4/0x190 [ 325.299756][ T7210] __x64_sys_socket+0x76/0x80 [ 325.304505][ T7210] do_syscall_64+0x4c/0xa0 [ 325.308953][ T7210] ? clear_bhb_loop+0x60/0xb0 [ 325.313624][ T7210] ? clear_bhb_loop+0x60/0xb0 [ 325.318316][ T7210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.324205][ T7210] RIP: 0033:0x7fca0539e159 [ 325.328611][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.348749][ T7210] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 325.357189][ T7210] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 325.365149][ T7210] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 325.373109][ T7210] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 325.381166][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.389511][ T7210] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 325.397486][ T7210] [ 325.417900][ T7210] socket: no more sockets [ 327.147898][ T7215] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 327.665019][ T7227] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 328.878454][ T7238] device syzkaller0 entered promiscuous mode [ 331.614526][ T7280] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 332.610225][ T7287] FAULT_INJECTION: forcing a failure. [ 332.610225][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 332.683384][ T7287] CPU: 0 PID: 7287 Comm: syz.2.789 Not tainted syzkaller #0 [ 332.690737][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.700788][ T7287] Call Trace: [ 332.704053][ T7287] [ 332.706973][ T7287] dump_stack_lvl+0x188/0x24e [ 332.711665][ T7287] ? show_regs_print_info+0x12/0x12 [ 332.716858][ T7287] ? load_image+0x410/0x410 [ 332.721353][ T7287] ? __lock_acquire+0x7c40/0x7c40 [ 332.726377][ T7287] should_fail_ex+0x390/0x4c0 [ 332.731053][ T7287] should_failslab+0x5/0x20 [ 332.735564][ T7287] slab_pre_alloc_hook+0x59/0x300 [ 332.740610][ T7287] kmem_cache_alloc_lru+0x49/0x2e0 [ 332.745714][ T7287] ? sock_alloc_inode+0x24/0xc0 [ 332.750558][ T7287] sock_alloc_inode+0x24/0xc0 [ 332.755260][ T7287] ? sockfs_init_fs_context+0xa0/0xa0 [ 332.760625][ T7287] new_inode_pseudo+0x5f/0x1c0 [ 332.765396][ T7287] __sock_create+0x129/0x940 [ 332.769981][ T7287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 332.775990][ T7287] __sys_socket+0xc4/0x190 [ 332.780421][ T7287] __x64_sys_socket+0x76/0x80 [ 332.785100][ T7287] do_syscall_64+0x4c/0xa0 [ 332.789531][ T7287] ? clear_bhb_loop+0x60/0xb0 [ 332.794200][ T7287] ? clear_bhb_loop+0x60/0xb0 [ 332.798892][ T7287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.804782][ T7287] RIP: 0033:0x7fca0539e159 [ 332.809190][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.828794][ T7287] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 332.837216][ T7287] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 332.845207][ T7287] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 332.853198][ T7287] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 332.861178][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.869141][ T7287] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 332.877156][ T7287] [ 332.929878][ T7287] socket: no more sockets [ 333.784073][ T7306] device syzkaller0 entered promiscuous mode [ 333.967188][ T6170] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 334.939286][ T6170] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.964012][ T6170] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.983776][ T6170] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 335.018362][ T6170] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.039406][ T6170] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.052918][ T6170] usb 2-1: Product: syz [ 335.091813][ T6170] usb 2-1: Manufacturer: syz [ 335.328908][ T4368] usb 2-1: USB disconnect, device number 12 [ 335.904252][ T4368] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 336.114372][ T4368] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.131543][ T4368] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.142230][ T4368] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 336.161661][ T4368] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.181170][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.190370][ T4368] usb 2-1: Product: syz [ 336.194829][ T4368] usb 2-1: Manufacturer: syz [ 338.451193][ T4328] usb 2-1: USB disconnect, device number 13 [ 338.938242][ T7393] FAULT_INJECTION: forcing a failure. [ 338.938242][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 339.011855][ T7393] CPU: 1 PID: 7393 Comm: syz.2.812 Not tainted syzkaller #0 [ 339.019208][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.029295][ T7393] Call Trace: [ 339.032585][ T7393] [ 339.035538][ T7393] dump_stack_lvl+0x188/0x24e [ 339.040249][ T7393] ? show_regs_print_info+0x12/0x12 [ 339.045473][ T7393] ? load_image+0x410/0x410 [ 339.049990][ T7393] ? __lock_acquire+0x7c40/0x7c40 [ 339.055010][ T7393] should_fail_ex+0x390/0x4c0 [ 339.060121][ T7393] should_failslab+0x5/0x20 [ 339.064626][ T7393] slab_pre_alloc_hook+0x59/0x300 [ 339.069645][ T7393] kmem_cache_alloc_lru+0x49/0x2e0 [ 339.074749][ T7393] ? sock_alloc_inode+0x24/0xc0 [ 339.079602][ T7393] sock_alloc_inode+0x24/0xc0 [ 339.084281][ T7393] ? sockfs_init_fs_context+0xa0/0xa0 [ 339.089648][ T7393] new_inode_pseudo+0x5f/0x1c0 [ 339.094432][ T7393] __sock_create+0x129/0x940 [ 339.099015][ T7393] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 339.105104][ T7393] __sys_socket+0xc4/0x190 [ 339.109524][ T7393] __x64_sys_socket+0x76/0x80 [ 339.114200][ T7393] do_syscall_64+0x4c/0xa0 [ 339.118627][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 339.123292][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 339.127973][ T7393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.133862][ T7393] RIP: 0033:0x7fca0539e159 [ 339.138271][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.157883][ T7393] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 339.166289][ T7393] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 339.174249][ T7393] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 339.182209][ T7393] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 339.190257][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.198220][ T7393] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 339.206193][ T7393] [ 340.284893][ T7393] socket: no more sockets [ 340.348192][ T7412] device syzkaller0 entered promiscuous mode [ 341.061216][ T7434] user requested TSC rate below hardware speed [ 341.153815][ T6170] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 341.357041][ T6170] usb 2-1: Using ep0 maxpacket: 16 [ 343.918044][ T6170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.943982][ T6170] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 343.967194][ T6170] usb 2-1: can't read configurations, error -71 [ 345.345829][ T7505] FAULT_INJECTION: forcing a failure. [ 345.345829][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 345.379425][ T7505] CPU: 0 PID: 7505 Comm: syz.1.837 Not tainted syzkaller #0 [ 345.386775][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.396851][ T7505] Call Trace: [ 345.400155][ T7505] [ 345.403102][ T7505] dump_stack_lvl+0x188/0x24e [ 345.407804][ T7505] ? show_regs_print_info+0x12/0x12 [ 345.413025][ T7505] ? load_image+0x410/0x410 [ 345.417579][ T7505] ? __lock_acquire+0x7c40/0x7c40 [ 345.422632][ T7505] should_fail_ex+0x390/0x4c0 [ 345.427347][ T7505] should_failslab+0x5/0x20 [ 345.431864][ T7505] slab_pre_alloc_hook+0x59/0x300 [ 345.436913][ T7505] kmem_cache_alloc_lru+0x49/0x2e0 [ 345.442034][ T7505] ? sock_alloc_inode+0x24/0xc0 [ 345.446888][ T7505] sock_alloc_inode+0x24/0xc0 [ 345.451561][ T7505] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.456927][ T7505] new_inode_pseudo+0x5f/0x1c0 [ 345.461692][ T7505] __sock_create+0x129/0x940 [ 345.466276][ T7505] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 345.472255][ T7505] __sys_socket+0xc4/0x190 [ 345.476674][ T7505] __x64_sys_socket+0x76/0x80 [ 345.481348][ T7505] do_syscall_64+0x4c/0xa0 [ 345.485753][ T7505] ? clear_bhb_loop+0x60/0xb0 [ 345.490424][ T7505] ? clear_bhb_loop+0x60/0xb0 [ 345.495091][ T7505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.500985][ T7505] RIP: 0033:0x7feee459e159 [ 345.505396][ T7505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.524996][ T7505] RSP: 002b:00007feee540c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.533407][ T7505] RAX: ffffffffffffffda RBX: 00007feee4825fa0 RCX: 00007feee459e159 [ 345.541370][ T7505] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 345.549330][ T7505] RBP: 00007feee463506b R08: 0000000000000000 R09: 0000000000000000 [ 345.557291][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.565257][ T7505] R13: 00007feee4826038 R14: 00007feee4825fa0 R15: 00007fff6fd58308 [ 345.573251][ T7505] [ 345.576442][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.583925][ T7505] socket: no more sockets [ 346.770158][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 346.770172][ T26] audit: type=1800 audit(1790773520.391:52): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.832" name="bus" dev="ramfs" ino=45312 res=0 errno=0 [ 346.990745][ T4368] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 347.179635][ T4368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.200288][ T4368] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.245916][ T4368] usb 1-1: config 1 has no interface number 0 [ 347.272017][ T4368] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.299219][ T4368] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 347.321502][ T4368] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 347.349222][ T4368] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.377265][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.427194][ T4368] usb 1-1: Product: syz [ 347.431415][ T4368] usb 1-1: Manufacturer: syz [ 347.465595][ T4368] usb 1-1: SerialNumber: syz [ 347.488991][ T7512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 347.531475][ T4368] usb 1-1: selecting invalid altsetting 1 [ 347.819739][ T4368] cdc_ncm 1-1:1.1: bind() failure [ 347.843815][ T4368] usb 1-1: USB disconnect, device number 11 [ 347.897809][ T7523] file system registered [ 347.903185][ T7523] unloading [ 349.526164][ T7549] file system registered [ 349.534133][ T7549] unloading [ 349.573353][ T7552] FAULT_INJECTION: forcing a failure. [ 349.573353][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 349.635942][ T7552] CPU: 0 PID: 7552 Comm: syz.2.853 Not tainted syzkaller #0 [ 349.643282][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.653354][ T7552] Call Trace: [ 349.656647][ T7552] [ 349.659589][ T7552] dump_stack_lvl+0x188/0x24e [ 349.664296][ T7552] ? show_regs_print_info+0x12/0x12 [ 349.669512][ T7552] ? load_image+0x410/0x410 [ 349.674023][ T7552] ? __lock_acquire+0x7c40/0x7c40 [ 349.679049][ T7552] should_fail_ex+0x390/0x4c0 [ 349.683734][ T7552] should_failslab+0x5/0x20 [ 349.688246][ T7552] slab_pre_alloc_hook+0x59/0x300 [ 349.693267][ T7552] kmem_cache_alloc_lru+0x49/0x2e0 [ 349.698372][ T7552] ? sock_alloc_inode+0x24/0xc0 [ 349.703222][ T7552] sock_alloc_inode+0x24/0xc0 [ 349.707896][ T7552] ? sockfs_init_fs_context+0xa0/0xa0 [ 349.713261][ T7552] new_inode_pseudo+0x5f/0x1c0 [ 349.718025][ T7552] __sock_create+0x129/0x940 [ 349.722610][ T7552] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 349.728587][ T7552] __sys_socket+0xc4/0x190 [ 349.733000][ T7552] __x64_sys_socket+0x76/0x80 [ 349.737670][ T7552] do_syscall_64+0x4c/0xa0 [ 349.742078][ T7552] ? clear_bhb_loop+0x60/0xb0 [ 349.746744][ T7552] ? clear_bhb_loop+0x60/0xb0 [ 349.751420][ T7552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.757316][ T7552] RIP: 0033:0x7fca0539e159 [ 349.761724][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.781322][ T7552] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 349.789731][ T7552] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 349.797691][ T7552] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 349.805650][ T7552] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 349.813610][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.821577][ T7552] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 349.829551][ T7552] [ 349.889497][ T7559] Config c/1 of g1 needs at least one function. [ 349.906063][ T7559] udc dummy_udc.0: failed to start g1: -22 [ 349.917021][ T7559] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 349.935267][ T7559] UDC core: g1: couldn't find an available UDC or it's busy [ 350.057196][ T7552] socket: no more sockets [ 352.051372][ T7599] file system registered [ 352.057636][ T7599] unloading [ 352.399607][ T7606] Config c/1 of g1 needs at least one function. [ 352.413952][ T7606] udc dummy_udc.0: failed to start g1: -22 [ 352.427109][ T7606] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 352.477786][ T7606] UDC core: g1: couldn't find an available UDC or it's busy [ 352.822558][ T7619] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 353.033212][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.086663][ T7630] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 353.607595][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'. [ 353.995164][ T7630] device dummy0 entered promiscuous mode [ 354.085719][ T7625] device dummy0 left promiscuous mode [ 354.107609][ T7625] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 354.138177][ T4487] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 354.164951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 354.203241][ T7643] file system registered [ 354.242398][ T7643] unloading [ 354.287927][ T4487] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 355.507034][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 355.580715][ T7673] FAULT_INJECTION: forcing a failure. [ 355.580715][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 355.603331][ T7673] CPU: 0 PID: 7673 Comm: syz.2.888 Not tainted syzkaller #0 [ 355.610645][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.620788][ T7673] Call Trace: [ 355.624076][ T7673] [ 355.627026][ T7673] dump_stack_lvl+0x188/0x24e [ 355.631734][ T7673] ? show_regs_print_info+0x12/0x12 [ 355.636937][ T7673] ? load_image+0x410/0x410 [ 355.641449][ T7673] ? __might_sleep+0xd0/0xd0 [ 355.646047][ T7673] ? __lock_acquire+0x7c40/0x7c40 [ 355.651074][ T7673] should_fail_ex+0x390/0x4c0 [ 355.655747][ T7673] should_failslab+0x5/0x20 [ 355.660236][ T7673] slab_pre_alloc_hook+0x59/0x300 [ 355.665253][ T7673] kmem_cache_alloc+0x56/0x2f0 [ 355.670006][ T7673] ? __alloc_file+0x25/0x230 [ 355.674588][ T7673] __alloc_file+0x25/0x230 [ 355.678992][ T7673] alloc_empty_file+0x90/0x180 [ 355.683745][ T7673] alloc_file+0x5b/0x5f0 [ 355.687999][ T7673] alloc_file_pseudo+0x180/0x200 [ 355.692925][ T7673] ? alloc_empty_file_noaccount+0x80/0x80 [ 355.698631][ T7673] ? alloc_fd+0x590/0x640 [ 355.702947][ T7673] sock_alloc_file+0xb3/0x240 [ 355.707616][ T7673] __sys_socket+0x12d/0x190 [ 355.712110][ T7673] __x64_sys_socket+0x76/0x80 [ 355.716775][ T7673] do_syscall_64+0x4c/0xa0 [ 355.721174][ T7673] ? clear_bhb_loop+0x60/0xb0 [ 355.725836][ T7673] ? clear_bhb_loop+0x60/0xb0 [ 355.730498][ T7673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.736378][ T7673] RIP: 0033:0x7fca0539e159 [ 355.740781][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.760403][ T7673] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 355.768836][ T7673] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 355.776799][ T7673] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 355.784759][ T7673] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 355.792720][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.800681][ T7673] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 355.808649][ T7673] [ 355.928396][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 355.938148][ T7] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 355.958205][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 355.987640][ T7] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 356.036888][ T7] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 356.084305][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.120653][ T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 356.130860][ T7] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 356.141867][ T7] usb 5-1: Product: syz [ 356.148357][ T7] usb 5-1: Manufacturer: syz [ 356.154648][ T7] usb 5-1: SerialNumber: syz [ 356.180354][ T7] usb 5-1: config 0 descriptor?? [ 356.214228][ T7] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 356.237776][ T7] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 356.532465][ T7659] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 356.540259][ T6170] usb 5-1: USB disconnect, device number 18 [ 356.540306][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 356.566591][ T7694] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 356.580850][ T6170] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 360.501369][ T7734] FAULT_INJECTION: forcing a failure. [ 360.501369][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 361.177418][ T7734] CPU: 0 PID: 7734 Comm: syz.2.904 Not tainted syzkaller #0 [ 361.184859][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.194919][ T7734] Call Trace: [ 361.198195][ T7734] [ 361.201147][ T7734] dump_stack_lvl+0x188/0x24e [ 361.205847][ T7734] ? show_regs_print_info+0x12/0x12 [ 361.211048][ T7734] ? load_image+0x410/0x410 [ 361.215554][ T7734] ? __might_sleep+0xd0/0xd0 [ 361.220160][ T7734] ? __lock_acquire+0x7c40/0x7c40 [ 361.225207][ T7734] should_fail_ex+0x390/0x4c0 [ 361.229895][ T7734] should_failslab+0x5/0x20 [ 361.234421][ T7734] slab_pre_alloc_hook+0x59/0x300 [ 361.239467][ T7734] kmem_cache_alloc_lru+0x49/0x2e0 [ 361.244588][ T7734] ? __d_alloc+0x2e/0x6e0 [ 361.248930][ T7734] __d_alloc+0x2e/0x6e0 [ 361.253084][ T7734] ? d_alloc_pseudo+0xe/0x70 [ 361.257668][ T7734] d_alloc_pseudo+0x19/0x70 [ 361.262163][ T7734] alloc_file_pseudo+0xe0/0x200 [ 361.267010][ T7734] ? alloc_empty_file_noaccount+0x80/0x80 [ 361.272752][ T7734] ? alloc_fd+0x590/0x640 [ 361.277099][ T7734] sock_alloc_file+0xb3/0x240 [ 361.281820][ T7734] __sys_socket+0x12d/0x190 [ 361.286330][ T7734] __x64_sys_socket+0x76/0x80 [ 361.291011][ T7734] do_syscall_64+0x4c/0xa0 [ 361.295432][ T7734] ? clear_bhb_loop+0x60/0xb0 [ 361.300104][ T7734] ? clear_bhb_loop+0x60/0xb0 [ 361.304779][ T7734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.310674][ T7734] RIP: 0033:0x7fca0539e159 [ 361.315085][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.334689][ T7734] RSP: 002b:00007fca06290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 361.343111][ T7734] RAX: ffffffffffffffda RBX: 00007fca05625fa0 RCX: 00007fca0539e159 [ 361.351077][ T7734] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 361.359041][ T7734] RBP: 00007fca0543506b R08: 0000000000000000 R09: 0000000000000000 [ 361.367009][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.374971][ T7734] R13: 00007fca05626038 R14: 00007fca05625fa0 R15: 00007ffdd16b5a78 [ 361.382946][ T7734] [ 363.304404][ T26] audit: type=1326 audit(1790773536.921:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 363.341233][ T7754] Config c/1 of g1 needs at least one function. [ 363.412254][ T7754] udc dummy_udc.0: failed to start g1: -22 [ 363.496461][ T7754] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 363.512762][ T7754] UDC core: g1: couldn't find an available UDC or it's busy [ 364.456478][ T26] audit: type=1326 audit(1790773536.971:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 364.637314][ T26] audit: type=1326 audit(1790773536.971:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 365.567634][ T26] audit: type=1326 audit(1790773536.971:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 365.729277][ T26] audit: type=1326 audit(1790773536.981:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.725189][ T26] audit: type=1326 audit(1790773536.981:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.770939][ T26] audit: type=1326 audit(1790773536.981:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.790860][ T7794] loop0: detected capacity change from 0 to 32768 [ 366.797168][ T26] audit: type=1326 audit(1790773536.981:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.827161][ T26] audit: type=1326 audit(1790773536.981:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.851942][ T26] audit: type=1326 audit(1790773537.061:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.912" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 366.948255][ T7804] FAULT_INJECTION: forcing a failure. [ 366.948255][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 366.997127][ T7804] CPU: 0 PID: 7804 Comm: syz.0.922 Not tainted syzkaller #0 [ 367.004470][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.014543][ T7804] Call Trace: [ 367.017841][ T7804] [ 367.020785][ T7804] dump_stack_lvl+0x188/0x24e [ 367.025484][ T7804] ? show_regs_print_info+0x12/0x12 [ 367.030716][ T7804] ? load_image+0x410/0x410 [ 367.035218][ T7804] ? __might_sleep+0xd0/0xd0 [ 367.039811][ T7804] ? __lock_acquire+0x7c40/0x7c40 [ 367.044846][ T7804] should_fail_ex+0x390/0x4c0 [ 367.049519][ T7804] should_failslab+0x5/0x20 [ 367.054015][ T7804] slab_pre_alloc_hook+0x59/0x300 [ 367.059044][ T7804] kmem_cache_alloc+0x56/0x2f0 [ 367.063813][ T7804] ? __alloc_file+0x25/0x230 [ 367.068392][ T7804] __alloc_file+0x25/0x230 [ 367.072794][ T7804] alloc_empty_file+0x90/0x180 [ 367.077639][ T7804] alloc_file+0x5b/0x5f0 [ 367.081872][ T7804] alloc_file_pseudo+0x180/0x200 [ 367.086796][ T7804] ? alloc_empty_file_noaccount+0x80/0x80 [ 367.092510][ T7804] ? alloc_fd+0x590/0x640 [ 367.096839][ T7804] sock_alloc_file+0xb3/0x240 [ 367.101513][ T7804] __sys_socket+0x12d/0x190 [ 367.106016][ T7804] __x64_sys_socket+0x76/0x80 [ 367.110720][ T7804] do_syscall_64+0x4c/0xa0 [ 367.115172][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 367.119852][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 367.124546][ T7804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.130441][ T7804] RIP: 0033:0x7f118919e159 [ 367.134894][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.154502][ T7804] RSP: 002b:00007f118a146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 367.162920][ T7804] RAX: ffffffffffffffda RBX: 00007f1189425fa0 RCX: 00007f118919e159 [ 367.170902][ T7804] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 367.178863][ T7804] RBP: 00007f118923506b R08: 0000000000000000 R09: 0000000000000000 [ 367.186875][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.194841][ T7804] R13: 00007f1189426038 R14: 00007f1189425fa0 R15: 00007ffc26de10d8 [ 367.202870][ T7804] [ 367.309993][ T7802] device-mapper: table: 248:0: : unknown target type [ 367.316818][ T7802] device-mapper: ioctl: error adding target to table [ 367.767037][ T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 367.967124][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 367.980056][ T14] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 367.995012][ T7827] Config c/1 of g1 needs at least one function. [ 368.005520][ T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 368.012781][ T7827] udc dummy_udc.0: failed to start g1: -22 [ 368.029992][ T7827] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 368.040808][ T14] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 368.051709][ T7827] UDC core: g1: couldn't find an available UDC or it's busy [ 368.084655][ T14] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 368.129604][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.155386][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 368.180915][ T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 368.204327][ T14] usb 5-1: Product: syz [ 368.215625][ T14] usb 5-1: Manufacturer: syz [ 368.224334][ T14] usb 5-1: SerialNumber: syz [ 368.253225][ T14] usb 5-1: config 0 descriptor?? [ 368.311988][ T14] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 368.363435][ T14] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 370.331922][ T7851] loop0: detected capacity change from 0 to 32768 [ 371.011567][ T7853] device-mapper: table: 248:0: : unknown target type [ 371.028699][ T7853] device-mapper: ioctl: error adding target to table [ 371.187855][ T7862] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 373.268244][ T7886] Config c/1 of g1 needs at least one function. [ 373.288137][ T7886] udc dummy_udc.0: failed to start g1: -22 [ 373.294063][ T7886] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 373.377501][ T7886] UDC core: g1: couldn't find an available UDC or it's busy [ 373.998275][ T7817] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 374.555664][ T4317] usb 5-1: USB disconnect, device number 19 [ 374.580678][ T4317] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 374.607544][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 374.804884][ T7906] loop0: detected capacity change from 0 to 32768 [ 375.664517][ T7906] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 375.705625][ T7906] device-mapper: ioctl: error adding target to table [ 375.815692][ T7914] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 376.728882][ T7931] Config c/1 of g1 needs at least one function. [ 376.747234][ T7931] udc dummy_udc.0: failed to start g1: -22 [ 376.753105][ T7931] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 376.786711][ T7931] UDC core: g1: couldn't find an available UDC or it's busy [ 376.857130][ T4368] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 377.047121][ T4368] usb 2-1: Using ep0 maxpacket: 8 [ 377.054881][ T4368] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 377.082562][ T4368] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.117192][ T4368] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.160493][ T4368] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.187094][ T4368] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.231070][ T4368] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.271360][ T4368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.645083][ T4368] usb 2-1: usb_control_msg returned -32 [ 377.654924][ T4368] usbtmc 2-1:16.0: can't read capabilities [ 378.052890][ T4368] usb 2-1: USB disconnect, device number 16 [ 378.468924][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.475271][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.495783][ T7953] loop0: detected capacity change from 0 to 32768 [ 378.537274][ T7942] user requested TSC rate below hardware speed [ 378.672483][ T7953] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 379.970230][ T7975] Config c/1 of g1 needs at least one function. [ 379.978835][ T7975] udc dummy_udc.0: failed to start g1: -22 [ 379.985548][ T7975] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 380.757575][ T7975] UDC core: g1: couldn't find an available UDC or it's busy [ 380.916591][ T7976] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 386.258617][ T8035] MPTCP: kernel_bind error, err=-98 [ 386.400655][ T8037] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 388.705861][ T8066] MPTCP: kernel_bind error, err=-98 [ 389.356212][ T8074] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 391.377164][ T4316] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 391.579645][ T4316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.636607][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.720011][ T4316] usb 3-1: config 1 has no interface number 0 [ 391.780372][ T4316] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.911361][ T4316] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 392.056824][ T4316] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 392.181837][ T4316] usb 3-1: string descriptor 0 read error: -71 [ 392.216727][ T4316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.293003][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.350458][ T4316] usb 3-1: can't set config #1, error -71 [ 392.374877][ T8117] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 392.412325][ T4316] usb 3-1: USB disconnect, device number 4 [ 393.487045][ T8131] FAULT_INJECTION: forcing a failure. [ 393.487045][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 393.563199][ T8131] CPU: 0 PID: 8131 Comm: syz.0.1019 Not tainted syzkaller #0 [ 393.570645][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.580722][ T8131] Call Trace: [ 393.584017][ T8131] [ 393.586963][ T8131] dump_stack_lvl+0x188/0x24e [ 393.591663][ T8131] ? show_regs_print_info+0x12/0x12 [ 393.596885][ T8131] ? load_image+0x410/0x410 [ 393.601419][ T8131] ? __might_sleep+0xd0/0xd0 [ 393.606027][ T8131] ? __lock_acquire+0x7c40/0x7c40 [ 393.611171][ T8131] should_fail_ex+0x390/0x4c0 [ 393.615926][ T8131] should_failslab+0x5/0x20 [ 393.620479][ T8131] slab_pre_alloc_hook+0x59/0x300 [ 393.625542][ T8131] kmem_cache_alloc+0x56/0x2f0 [ 393.630332][ T8131] ? security_inode_alloc+0x30/0x110 [ 393.635651][ T8131] security_inode_alloc+0x30/0x110 [ 393.640792][ T8131] inode_init_always+0x910/0xc90 [ 393.645757][ T8131] new_inode_pseudo+0x91/0x1c0 [ 393.650558][ T8131] __sock_create+0x129/0x940 [ 393.655170][ T8131] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 393.661182][ T8131] __sys_socket+0xc4/0x190 [ 393.665626][ T8131] __x64_sys_socket+0x76/0x80 [ 393.670326][ T8131] do_syscall_64+0x4c/0xa0 [ 393.674783][ T8131] ? clear_bhb_loop+0x60/0xb0 [ 393.679487][ T8131] ? clear_bhb_loop+0x60/0xb0 [ 393.684181][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.690101][ T8131] RIP: 0033:0x7f118919e159 [ 393.694527][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.714243][ T8131] RSP: 002b:00007f118a146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 393.722681][ T8131] RAX: ffffffffffffffda RBX: 00007f1189425fa0 RCX: 00007f118919e159 [ 393.730675][ T8131] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 393.738663][ T8131] RBP: 00007f118923506b R08: 0000000000000000 R09: 0000000000000000 [ 393.746649][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.754637][ T8131] R13: 00007f1189426038 R14: 00007f1189425fa0 R15: 00007ffc26de10d8 [ 393.762644][ T8131] [ 394.275272][ T8131] socket: no more sockets [ 394.493164][ T8158] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 396.663725][ T8180] user requested TSC rate below hardware speed [ 397.199632][ T8187] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 398.919894][ T8206] FAULT_INJECTION: forcing a failure. [ 398.919894][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 398.933691][ T8206] CPU: 1 PID: 8206 Comm: syz.0.1044 Not tainted syzkaller #0 [ 398.941095][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.951143][ T8206] Call Trace: [ 398.954408][ T8206] [ 398.957324][ T8206] dump_stack_lvl+0x188/0x24e [ 398.962002][ T8206] ? show_regs_print_info+0x12/0x12 [ 398.967184][ T8206] ? load_image+0x410/0x410 [ 398.971676][ T8206] ? __might_sleep+0xd0/0xd0 [ 398.976253][ T8206] ? __lock_acquire+0x7c40/0x7c40 [ 398.981265][ T8206] should_fail_ex+0x390/0x4c0 [ 398.985960][ T8206] should_failslab+0x5/0x20 [ 398.990460][ T8206] slab_pre_alloc_hook+0x59/0x300 [ 398.995514][ T8206] kmem_cache_alloc+0x56/0x2f0 [ 399.000393][ T8206] ? security_inode_alloc+0x30/0x110 [ 399.005708][ T8206] security_inode_alloc+0x30/0x110 [ 399.010877][ T8206] inode_init_always+0x910/0xc90 [ 399.015848][ T8206] new_inode_pseudo+0x91/0x1c0 [ 399.020745][ T8206] __sock_create+0x129/0x940 [ 399.025371][ T8206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 399.031392][ T8206] __sys_socket+0xc4/0x190 [ 399.035844][ T8206] __x64_sys_socket+0x76/0x80 [ 399.040559][ T8206] do_syscall_64+0x4c/0xa0 [ 399.045003][ T8206] ? clear_bhb_loop+0x60/0xb0 [ 399.049699][ T8206] ? clear_bhb_loop+0x60/0xb0 [ 399.054400][ T8206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.060330][ T8206] RIP: 0033:0x7f118919e159 [ 399.064770][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.084404][ T8206] RSP: 002b:00007f118a146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 399.092875][ T8206] RAX: ffffffffffffffda RBX: 00007f1189425fa0 RCX: 00007f118919e159 [ 399.100881][ T8206] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 399.108894][ T8206] RBP: 00007f118923506b R08: 0000000000000000 R09: 0000000000000000 [ 399.116896][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.124897][ T8206] R13: 00007f1189426038 R14: 00007f1189425fa0 R15: 00007ffc26de10d8 [ 399.132933][ T8206] [ 399.153132][ T8206] socket: no more sockets [ 400.992244][ T8230] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 401.180741][ T8239] overlayfs: failed to clone upperpath [ 402.266286][ T8267] overlayfs: failed to clone upperpath [ 402.335401][ T8265] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 404.707142][ T8302] overlayfs: failed to clone upperpath [ 404.818104][ T8306] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 407.165587][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 407.165597][ T26] audit: type=1326 audit(1790773580.781:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.264945][ T26] audit: type=1326 audit(1790773580.831:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.364783][ T26] audit: type=1326 audit(1790773580.831:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.462586][ T26] audit: type=1326 audit(1790773580.831:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.553996][ T26] audit: type=1326 audit(1790773580.831:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.643706][ T26] audit: type=1326 audit(1790773580.841:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.750315][ T26] audit: type=1326 audit(1790773580.851:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.774286][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.818043][ T26] audit: type=1326 audit(1790773580.851:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.842003][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.948390][ T26] audit: type=1326 audit(1790773580.851:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 407.972306][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.978653][ T26] audit: type=1326 audit(1790773580.851:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.1094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca0539e159 code=0x7ffc0000 [ 408.438392][ T8363] Config c/1 of g1 needs at least one function. [ 408.462327][ T8363] udc dummy_udc.0: failed to start g1: -22 [ 408.488803][ T8363] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 408.516383][ T8363] UDC core: g1: couldn't find an available UDC or it's busy [ 408.597000][ T4328] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 408.807140][ T4328] usb 3-1: Using ep0 maxpacket: 32 [ 408.818229][ T4328] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 408.832497][ T4328] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 408.861630][ T4328] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 408.896998][ T4328] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 408.947033][ T4328] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.962841][ T4328] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 408.970909][ T4321] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 408.992159][ T4328] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 409.033695][ T4328] usb 3-1: Product: syz [ 409.040602][ T4328] usb 3-1: Manufacturer: syz [ 409.045338][ T4328] usb 3-1: SerialNumber: syz [ 409.074898][ T4328] usb 3-1: config 0 descriptor?? [ 409.091533][ T4328] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 409.125072][ T4328] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 409.197153][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 409.411495][ T8359] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 409.422990][ T8272] usb 3-1: USB disconnect, device number 5 [ 409.423143][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 409.485853][ T8389] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 409.509148][ T8272] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 411.044751][ T4321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.067058][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 411.114226][ T4321] usb 1-1: can't read configurations, error -71 [ 411.726661][ T8436] Config c/1 of g1 needs at least one function. [ 411.739293][ T8436] udc dummy_udc.0: failed to start g1: -22 [ 411.745245][ T8436] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 411.768241][ T8436] UDC core: g1: couldn't find an available UDC or it's busy [ 413.573876][ T8464] Config c/1 of g1 needs at least one function. [ 413.580564][ T8464] udc dummy_udc.0: failed to start g1: -22 [ 413.587151][ T8464] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 413.597595][ T8464] UDC core: g1: couldn't find an available UDC or it's busy [ 413.646320][ T8460] user requested TSC rate below hardware speed [ 413.720577][ T8468] Config c/1 of g1 needs at least one function. [ 413.732692][ T8468] udc dummy_udc.0: failed to start g1: -22 [ 413.754209][ T8468] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 413.792461][ T8468] UDC core: g1: couldn't find an available UDC or it's busy [ 414.841569][ T4321] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 415.967111][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 415.973949][ T4321] usb 1-1: config index 0 descriptor too short (expected 13339, got 27) [ 416.012310][ T4321] usb 1-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 416.043321][ T4321] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 416.083514][ T4321] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.107350][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.135893][ T4321] usb 1-1: Product: syz [ 416.140401][ T4321] usb 1-1: Manufacturer: syz [ 416.145011][ T4321] usb 1-1: SerialNumber: syz [ 416.390419][ T4321] usb 1-1: USB disconnect, device number 14 [ 424.059595][ T4316] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 424.268496][ T4316] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.282110][ T4316] usb 1-1: config 0 has no interface number 0 [ 424.303842][ T4316] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 424.334188][ T4316] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 424.384578][ T4316] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.429394][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.476959][ T4316] usb 1-1: config 0 descriptor?? [ 424.488936][ T8601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.518682][ T4316] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 424.726119][ T4316] usb 1-1: USB disconnect, device number 15 [ 429.085638][ T8737] overlayfs: failed to resolve './file1': -2 [ 430.415186][ T8272] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 430.619636][ T8272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.640346][ T8272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 430.684663][ T8272] usb 1-1: config 1 has no interface number 0 [ 430.698000][ T8272] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.745878][ T8774] overlayfs: failed to clone upperpath [ 430.752794][ T8272] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 430.783199][ T8272] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 430.826658][ T8272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.876271][ T8272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.901844][ T8272] usb 1-1: Product: syz [ 430.916380][ T8272] usb 1-1: Manufacturer: syz [ 430.924250][ T8272] usb 1-1: SerialNumber: syz [ 430.938259][ T8745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.963652][ T8272] usb 1-1: selecting invalid altsetting 1 [ 431.154736][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1242'. [ 431.178066][ T8272] cdc_ncm 1-1:1.1: bind() failure [ 431.219093][ T8272] usb 1-1: USB disconnect, device number 16 [ 431.221752][ T8787] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 431.367498][ T8789] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 435.122137][ T8875] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 435.477303][ T8896] overlayfs: failed to clone upperpath [ 436.819927][ T8947] overlayfs: failed to clone upperpath [ 440.106835][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113298][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.639661][ T9158] user requested TSC rate below hardware speed [ 445.074287][ T9180] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 445.866798][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1371'. [ 446.254381][ T9221] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 446.522296][ T9230] overlayfs: failed to clone upperpath [ 446.551837][ T9228] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 447.142825][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 448.122740][ T9278] overlayfs: failed to clone upperpath [ 450.429581][ T9321] overlayfs: failed to clone upperpath [ 451.971821][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 452.319375][ T9373] 9pnet_fd: Insufficient options for proto=fd [ 453.483996][ T9399] overlayfs: failed to clone upperpath [ 454.407820][ T9433] fuse: Unknown parameter 'group_id00000000000000000000' [ 454.879858][ T9443] overlayfs: failed to clone upperpath [ 456.836150][ T9509] overlayfs: failed to clone upperpath [ 457.480410][ T9529] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 457.893306][ T9549] overlayfs: failed to clone upperpath [ 458.575477][ T9575] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 458.953112][ T9584] overlayfs: failed to clone upperpath [ 459.348200][ T9598] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 460.127243][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 460.127256][ T26] audit: type=1326 audit(1790773633.751:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.2.1499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca0539e159 code=0x0 [ 461.141755][ T9650] MPTCP: kernel_bind error, err=-98 [ 461.270335][ T9652] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 462.925546][ T9693] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 463.260017][ T9708] MPTCP: kernel_bind error, err=-98 [ 464.343185][ T9735] fuse: Bad value for 'user_id' [ 464.536367][ T9741] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 464.862629][ T9755] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 465.240149][ T9766] fuse: Bad value for 'fd' [ 465.557820][ T9775] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 466.701569][ T9800] fuse: Bad value for 'fd' [ 467.739125][ T9814] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 468.443637][ T9848] fuse: Bad value for 'fd' [ 469.427960][ T9858] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 470.004837][ T9884] fuse: Bad value for 'fd' [ 470.130853][ T9888] MPTCP: kernel_bind error, err=-98 [ 470.481091][ T9900] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 470.962825][ T9925] fuse: Bad value for 'fd' [ 471.294042][ T9932] MPTCP: kernel_bind error, err=-98 [ 472.896338][ T9972] MPTCP: kernel_bind error, err=-98 [ 473.730071][ T9999] MPTCP: kernel_bind error, err=-98 [ 475.330632][T10061] 9pnet_fd: Insufficient options for proto=fd [ 475.993039][T10086] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 476.822139][T10118] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 478.193880][T10154] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.203154][T10154] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.212109][T10154] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.220860][T10154] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.259448][T10154] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.268531][T10154] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.277951][T10154] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.286921][T10154] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.384090][T10155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.393024][T10155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.401880][T10155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.410677][T10155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.514660][T10155] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.524013][T10155] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.533397][T10155] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.542321][T10155] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.221663][T10186] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 479.221663][T10186] [ 479.235450][T10186] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 479.248399][T10186] CIFS: Attempting to mount \\172.20.20.170\share [ 479.890413][T10186] CIFS: VFS: cifs_mount failed w/return code = -112 [ 481.408629][T10244] syz.1.1734 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 483.992832][T10311] mmap: syz.0.1755 (10311) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 484.958688][T10311] [ 484.961078][T10311] ====================================================== [ 484.968102][T10311] WARNING: possible circular locking dependency detected [ 484.975143][T10311] syzkaller #0 Not tainted [ 484.979575][T10311] ------------------------------------------------------ [ 484.986596][T10311] syz.0.1755/10311 is trying to acquire lock: [ 484.992667][T10311] ffff88802e7ffa80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 485.003412][T10311] [ 485.003412][T10311] but task is already holding lock: [ 485.010774][T10311] ffff88807282b5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 485.020804][T10311] [ 485.020804][T10311] which lock already depends on the new lock. [ 485.020804][T10311] [ 485.031224][T10311] [ 485.031224][T10311] the existing dependency chain (in reverse order) is: [ 485.040243][T10311] [ 485.040243][T10311] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 485.047819][T10311] down_read_killable+0x4c/0x340 [ 485.053285][T10311] mmap_read_lock_killable+0x1d/0x60 [ 485.059076][T10311] lock_mm_and_find_vma+0x2b1/0x2f0 [ 485.064791][T10311] do_user_addr_fault+0x2e8/0xb20 [ 485.070417][T10311] exc_page_fault+0x60/0x100 [ 485.075518][T10311] asm_exc_page_fault+0x22/0x30 [ 485.080904][T10311] fault_in_readable+0x13e/0x1f0 [ 485.086353][T10311] fault_in_iov_iter_readable+0xbf/0x2f0 [ 485.093018][T10311] generic_perform_write+0x1f1/0x5c0 [ 485.098824][T10311] __generic_file_write_iter+0x148/0x2a0 [ 485.104962][T10311] generic_file_write_iter+0xab/0x2e0 [ 485.110846][T10311] vfs_write+0x482/0x9a0 [ 485.115602][T10311] ksys_write+0x14d/0x260 [ 485.120446][T10311] do_syscall_64+0x4c/0xa0 [ 485.125369][T10311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.131798][T10311] [ 485.131798][T10311] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 485.140476][T10311] __lock_acquire+0x2d18/0x7c40 [ 485.145861][T10311] lock_acquire+0x1bb/0x4a0 [ 485.150872][T10311] down_write+0x36/0x60 [ 485.155545][T10311] process_measurement+0x3af/0x1c40 [ 485.161251][T10311] ima_file_mmap+0xe9/0x140 [ 485.166261][T10311] __se_sys_remap_file_pages+0x55a/0x7b0 [ 485.172496][T10311] do_syscall_64+0x4c/0xa0 [ 485.177430][T10311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.183832][T10311] [ 485.183832][T10311] other info that might help us debug this: [ 485.183832][T10311] [ 485.194043][T10311] Possible unsafe locking scenario: [ 485.194043][T10311] [ 485.201476][T10311] CPU0 CPU1 [ 485.206818][T10311] ---- ---- [ 485.212163][T10311] lock(&mm->mmap_lock); [ 485.216472][T10311] lock(&sb->s_type->i_mutex_key#13); [ 485.224463][T10311] lock(&mm->mmap_lock); [ 485.231314][T10311] lock(&sb->s_type->i_mutex_key#13); [ 485.236776][T10311] [ 485.236776][T10311] *** DEADLOCK *** [ 485.236776][T10311] [ 485.244922][T10311] 1 lock held by syz.0.1755/10311: [ 485.250009][T10311] #0: ffff88807282b5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 485.260440][T10311] [ 485.260440][T10311] stack backtrace: [ 485.266325][T10311] CPU: 1 PID: 10311 Comm: syz.0.1755 Not tainted syzkaller #0 [ 485.273762][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.283808][T10311] Call Trace: [ 485.287082][T10311] [ 485.290007][T10311] dump_stack_lvl+0x188/0x24e [ 485.294679][T10311] ? load_image+0x410/0x410 [ 485.299174][T10311] ? show_regs_print_info+0x12/0x12 [ 485.304364][T10311] ? print_circular_bug+0x12b/0x1a0 [ 485.309559][T10311] check_noncircular+0x296/0x330 [ 485.314488][T10311] ? look_up_lock_class+0x75/0x140 [ 485.319585][T10311] ? add_chain_block+0x9b0/0x9b0 [ 485.324534][T10311] ? lockdep_lock+0xf1/0x1f0 [ 485.329116][T10311] ? __lock_acquire+0x1465/0x7c40 [ 485.334129][T10311] ? _find_first_zero_bit+0xd2/0x100 [ 485.339406][T10311] __lock_acquire+0x2d18/0x7c40 [ 485.344253][T10311] ? ima_match_policy+0x10d/0x21b0 [ 485.349349][T10311] ? __lock_acquire+0x7c40/0x7c40 [ 485.354386][T10311] ? __lock_acquire+0x1465/0x7c40 [ 485.359420][T10311] ? verify_lock_unused+0x140/0x140 [ 485.364607][T10311] ? ima_match_policy+0x10d/0x21b0 [ 485.369702][T10311] ? ima_match_policy+0x211c/0x21b0 [ 485.374883][T10311] lock_acquire+0x1bb/0x4a0 [ 485.379396][T10311] ? process_measurement+0x3af/0x1c40 [ 485.384755][T10311] ? __might_sleep+0xd0/0xd0 [ 485.389325][T10311] ? finish_task_switch+0x262/0x8e0 [ 485.394519][T10311] ? read_lock_is_recursive+0x10/0x10 [ 485.399879][T10311] ? ima_get_action+0x71/0xa0 [ 485.404544][T10311] down_write+0x36/0x60 [ 485.408685][T10311] ? process_measurement+0x3af/0x1c40 [ 485.414042][T10311] process_measurement+0x3af/0x1c40 [ 485.419245][T10311] ? ima_file_mmap+0x140/0x140 [ 485.423998][T10311] ? aa_file_perm+0x112/0xf00 [ 485.428658][T10311] ? mtree_load+0x100/0xa70 [ 485.433148][T10311] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 485.439295][T10311] ima_file_mmap+0xe9/0x140 [ 485.443783][T10311] ? ima_file_free+0x3e0/0x3e0 [ 485.448532][T10311] ? common_file_perm+0x171/0x1c0 [ 485.453560][T10311] ? bpf_lsm_mmap_file+0x5/0x10 [ 485.458396][T10311] ? security_mmap_file+0x11b/0x180 [ 485.463579][T10311] __se_sys_remap_file_pages+0x55a/0x7b0 [ 485.469199][T10311] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 485.474927][T10311] ? lock_chain_count+0x20/0x20 [ 485.479779][T10311] ? lockdep_hardirqs_on+0x94/0x140 [ 485.484984][T10311] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 485.490722][T10311] do_syscall_64+0x4c/0xa0 [ 485.495126][T10311] ? clear_bhb_loop+0x60/0xb0 [ 485.499787][T10311] ? clear_bhb_loop+0x60/0xb0 [ 485.504653][T10311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.510567][T10311] RIP: 0033:0x7f118919e159 [ 485.514971][T10311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.534570][T10311] RSP: 002b:00007f118a125028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 485.542968][T10311] RAX: ffffffffffffffda RBX: 00007f1189426090 RCX: 00007f118919e159 [ 485.550961][T10311] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 000020000012c000 [ 485.558929][T10311] RBP: 00007f118923506b R08: 0000000000000020 R09: 0000000000000000 [ 485.566893][T10311] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 485.574857][T10311] R13: 00007f1189426128 R14: 00007f1189426090 R15: 00007ffc26de10d8 [ 485.583951][T10311]