last executing test programs: 3m6.187160903s ago: executing program 0 (id=232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b2}) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r3, 0x3b93, &(0x7f0000000140)="2000000000000000efbeadde03") 3m6.129475481s ago: executing program 0 (id=233): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = getpid() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2d, 0x107, 0x70bd2a, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}}, 0x4008030) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) (async, rerun: 64) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x26, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff3}) 3m5.127586675s ago: executing program 0 (id=239): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x9204, 0x0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x5453, 0x0) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x14, 0x0, "4e96001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) read$FUSE(r0, 0x0, 0x0) 3m4.843726408s ago: executing program 0 (id=243): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x9, 0x2, 0x103175aa37fff7f9, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a003400020202020202000008003500ca"], 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x8041) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0x9, &(0x7f0000001600)={&(0x7f0000001680)=ANY=[], 0xb8}}, 0x40880) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="14fa48083c003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r7], 0xfe33) 3m3.931327831s ago: executing program 0 (id=252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b2}) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x2, r3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r4, 0x3b93, &(0x7f0000000140)="2000000000000000efbeadde03") 3m3.585660347s ago: executing program 0 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './proc/thread-self/fail-nth\x00'}) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x20400) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000380)=@x86={0x4, 0x0, 0x1c, 0x0, 0x5, 0x4, 0x59, 0x9, 0xd5, 0x8, 0x1, 0xc6, 0x0, 0x7fff, 0x9, 0x1, 0xa0, 0x5, 0xfc, '\x00', 0x3, 0x89}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r8, 0x2, 0x5004) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000280)={0x0, 0x0, 0xeb}) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000003, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x9, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x729, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0xffff, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x6, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0xffff, 0x1000, 0x0, 0x11, 0x1, 0x6, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x92e, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0xffffffff, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x40c, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x400006]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) 3m3.244426478s ago: executing program 32 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './proc/thread-self/fail-nth\x00'}) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x20400) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000380)=@x86={0x4, 0x0, 0x1c, 0x0, 0x5, 0x4, 0x59, 0x9, 0xd5, 0x8, 0x1, 0xc6, 0x0, 0x7fff, 0x9, 0x1, 0xa0, 0x5, 0xfc, '\x00', 0x3, 0x89}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r8, 0x2, 0x5004) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000280)={0x0, 0x0, 0xeb}) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000003, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x9, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x729, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0xffff, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x6, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0xffff, 0x1000, 0x0, 0x11, 0x1, 0x6, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x92e, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0xffffffff, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x40c, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x400006]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) 2.683876647s ago: executing program 1 (id=1566): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}, 0x1, 0x401000000000000}, 0x0) 2.629044289s ago: executing program 1 (id=1569): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b80)={0x84, &(0x7f00000016c0)={0x20, 0xb, 0x6, "71360c3bb31c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="20112600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x2, 0x3, 0x2022, 0x1, 0x1}, 0x30, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[], 0x0) 2.303617557s ago: executing program 2 (id=1573): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ff00ff00000024fc00001ff80000", 0x1c) 2.215925351s ago: executing program 2 (id=1574): socket(0x8, 0x80000, 0xfb) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/flush\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='1\n', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x6, 0x9000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='mtd0\x00', &(0x7f00000002c0)='configfs\x00', 0x1001044, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='y\x10\xea\x7f\x8cZ7`_\x00\x00\x00\x00\xcf\x00\b\x00D\xcbg^\x00\x00\x00\x00\xd5\x00@\x04\xe2)\x11\xe5m\xd6\xe9\x00'/59, 0x0) ftruncate(r1, 0x1000006) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0x180) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c72d71f01feffffffffffff"]) 2.132691634s ago: executing program 2 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r4, 0x403, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x19) r5 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000030000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021102000000001400810005"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc02010111240201010200000000000000ffffffff09240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(r5, 0x4, 0x400) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_usb_connect(0x3, 0x67b, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0xa6, 0xf1, 0x50, 0x40, 0x19d2, 0x130, 0x72bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x669, 0x3, 0x7, 0x4, 0x0, 0x5b, "", [{{0x9, 0x4, 0x1, 0x3, 0x3, 0xa0, 0x3c, 0x6, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "223893f416"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xe1, 0xe68, 0x9, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x9, 0x40, 0x6}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5a, 0x8, "", "fc89"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x4, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7e0, 0xe, 0x6c, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x4, 0xa, 0x8, "59e85639"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0xf, "f615f6612567ff"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0xad, "9c74096775"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x18, 0x1, 0xac, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xf7, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0xbc4}, @generic={0x78, 0xe935b7ac8c762b5b, "885c2bf5f3d0988109fdb0ff57b2d21ed3ce614f5480495af1449c857f0cdbd753ac6f78ab0f6a3d9d37994fe02a4a7a385191ff860644becafe38c64ff5395d7409035d9b3bc386c2caca79bbfb637ef13e82d77a38958c841b2145d75088f9c39c9c2f8b1aaaaa8ff356782f5693d5e8c67fb471ab"}]}}]}}, {{0x9, 0x4, 0xd6, 0x6, 0x5, 0x80, 0xa0, 0xb9, 0x4, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x2, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xe, 0x6, 0x7}, @generic={0xca, 0x1, "fda90284bfa8a184d93a29f65e877d795747ad72eb51efca0b7649f198f6c722c8caabb4f957f45192012075e3afb20231dad8ef75a4fdce9608656fc4005a6077053ef9a24159d60ab91a0756fffd25c410ccf8fde91f5889c1fc9f93a8736ab3abe7a1246b8ad51995e4519b053d55630fc3e712b852c26618d7c29e55148c4d82268ad54d3fce68b02781f3e7b885e512edfbc79ab494d74359bc4a87e1ab5e508f815d09a4b9a9fcc4a66ed6c50dfc9ca955751d178e61bf85903e2f7567562b4ad2e70221ba"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x81, 0x5, 0x6, [@generic={0x68, 0x7, "9dee873757ad28d105ff83746ba42194fdb6f18a403c1c8a07afd2b1382f105f95135d8d85c45cb41e4235632d1d904e09489c531e808d7720eaf7cc26ebfbb620fa67b78dc5a38517fd6db56f2f8c12629e7847b3eecd0e86cedfacfc7bd7879a7ab07a0f12"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x6, 0x10, 0x5, [@generic={0x100, 0xe, "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"}]}}]}}, {{0x9, 0x4, 0x46, 0x3, 0x9, 0x3, 0x23, 0x2, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "cf969cdad5"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x0, 0x80}, [@mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x80, 0x0, 0x0, 0x40, 0x5}]}, @generic={0x61, 0x11, "9c11fa84f989a740d011e99bc152c4a7dd932a6d23b9047803308c8d6263306744c788e9926aeecd3d66bc069e0591b8656f007adc44ca510334937094b0cf3767f6787c44cdf01ecb284e94c76a2c60b6fdb5c34efb64125338c39b4d4442"}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4a, 0x4}, @generic={0xb0, 0x9, "faf1842b1f7cadb6239ed4a777160a7d3cd85b881255179db42b7561243b730f6df3cbb7281c99eb7250387764f1933296afb5b9d1477d12edd17961c66ef762b83d8cbc0d1619f1f15bb91da2686fba9a1ce9ae3adf7ab1aa06d97b6bc742253e7aeb81f579beb38971354379a46aaa0b66c6ee7fec4224c4b38d6eedbb53018ab1e7a066ca9096ab0b44a4d3f51da4fdc230f85caaa050b45e13732b1da91f81ca0bc40b2ff8cbd7a14dcd4c04"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0x3, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x0, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0x1, 0x6, [@generic={0x2a, 0x20, "7231800b86c4f32b781ed0de511ec5ea169163ecbdb321861a7531859020461bf6ddb0f08d2617f5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0x2, 0x62}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x6, 0xe}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x10, 0x0, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x81}, @generic={0xc2, 0x21, "a2bda10e85fbd5b6637e03f3261b1b87e5ca96b6015fcda22e69de4f6c93a7731279978716ff541d0373d4b3102f83839c07901266679d9b34e9036ecb7a4bc2d25b08717b55125b6215f8dc77eb3feca4d843309f57ea5d5900e37950f1131a89db476ad475c0a24912afc0ab404564b29ddc72f3132b7ebf6dfbf5793a466f8973db3b0905b6421ccf51b78e5a629cff85c1b8b0efde30058c12a406e2fde8fbcd4de905eba40d9520b01591b1a4899ba623736d867660da2d0e781821debe"}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x4, 0x1, 0x6, 0xff, 0x3}, 0x1a, &(0x7f0000000d00)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xb, 0xa}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0xb, 0xbcb, 0x96}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1404}}]}) sendto$inet(r6, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20030, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.979871705s ago: executing program 4 (id=1577): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0xffa1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) 1.930066778s ago: executing program 1 (id=1579): r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r6, &(0x7f0000000000)='4', 0x4b) utimensat(r6, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x77359400}}, 0x100) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000140)="fce7f42ca431f01225a6ff27961d0012610fbc4af48e0fb31ee6b9ec68a2d97c367d36", 0x23}, {&(0x7f0000001080)="1cbc497abaf7463fd98c45af165b4f15cf7a2202e7c4c3a48eac2fa94e22914124c5259198841484502da3b1ab2a620d959487bcf43e9432ba6c187c86a756a0c3a481a2afef567c4da3aec29da9635e16cdd5ab63de75c0de9fd460a8a5ef4d713483df20413692c992d0e9a7e8b05f0063a895744c06fcd563cf25070a6416762d581db4f8faa96b7647e750bb0e35b61df7e62e2928d799be0d231290efab2e2616d9597ceedf927663a53f90ef9b35708db5da662f8ebf0238674f6be4829e0cbd369d651f3dc3d161f1a67f0bdb6b1948d91aa2b973af18eb767901a55ab8a087f90e7772c07e23b8243e304c88caa67b10302f43f005d28ab900", 0xfd}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1}, 0x10001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x8000000}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x0, 0xac}}, 0xf0}}, 0x40) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) (async) write(r6, &(0x7f0000000000)='4', 0x4b) (async) utimensat(r6, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x77359400}}, 0x100) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r7) (async) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async) accept4(r9, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000140)="fce7f42ca431f01225a6ff27961d0012610fbc4af48e0fb31ee6b9ec68a2d97c367d36", 0x23}, {&(0x7f0000001080)="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", 0xfd}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1}, 0x10001) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x8000000}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x0, 0xac}}, 0xf0}}, 0x40) (async) 1.691794135s ago: executing program 4 (id=1580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x1a00, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) 1.670182485s ago: executing program 3 (id=1581): socket(0x8, 0x80000, 0xfb) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e201", 0x3}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/flush\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)='1\n', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x6, 0x9000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='mtd0\x00', &(0x7f00000002c0)='configfs\x00', 0x1001044, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000001c0)='y\x10\xea\x7f\x8cZ7`_\x00\x00\x00\x00\xcf\x00\b\x00D\xcbg^\x00\x00\x00\x00\xd5\x00@\x04\xe2)\x11\xe5m\xd6\xe9\x00'/59, 0x0) ftruncate(r2, 0x1000006) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c72d71f01feffffffffffff"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.636461562s ago: executing program 4 (id=1582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081000000000000800000000600fd", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.252562856s ago: executing program 4 (id=1583): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20008b88) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 1.249882259s ago: executing program 3 (id=1584): socket(0x8, 0x80000, 0xfb) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e201", 0x3}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/flush\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='1\n', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x6, 0x9000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='mtd0\x00', &(0x7f00000002c0)='configfs\x00', 0x1001044, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='y\x10\xea\x7f\x8cZ7`_\x00\x00\x00\x00\xcf\x00\b\x00D\xcbg^\x00\x00\x00\x00\xd5\x00@\x04\xe2)\x11\xe5m\xd6\xe9\x00'/59, 0x0) ftruncate(r1, 0x1000006) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0x180) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c72d71f01feffffffffffff"]) 1.021419084s ago: executing program 2 (id=1585): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00b69f00000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b0000170083"], 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000000c0)=[0x170000, 0x5a]) (async) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000000c0)=[0x170000, 0x5a]) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x15, 0x2, "6da2"}, 0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x6000, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r9, 0x0, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x1, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r6, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0), 0x0) syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) (async) syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) 907.712184ms ago: executing program 1 (id=1586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xffffffff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000900)="dc0eace9d2746dd060c96439d24a9c21707c020324630388d22cb7e0a55596c6ed990e9211ccf6d4e6c2028ec9e104ae96206002171db824fc9683d1c237d7a3a734e9ce80de42e8a2f5c8f228aca9c6"}) 905.532436ms ago: executing program 3 (id=1587): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xffffffffffffff80, 0x9, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sec/apparmor/policy/namespaces\x00', 0x2801fa28e3db7d4e) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x10400, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000040)="b1bc8a1d2e44bee321bb48e7f8c1044d5159bf360d3686d729059001908d19713cc23440", 0x55601ead18c28461, 0x0, 0x0, 0x0) setuid(0xee01) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x9, 0x9, 0x80000001, 0x80}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffc, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x2, 0x5, 0x40000003, 0x5, 0x5, 0xfffffffb, 0x8, 0xfd55, 0xc000, 0x5, r5, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x1f}}}, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@nullb, r5, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat(r7, &(0x7f0000000300)='./sec/apparmor/policy/namespaces\x00', 0x400040, 0x112) shmctl$IPC_SET(r2, 0x1, &(0x7f00000000c0)={{0x2, r5, 0xee00, r5, 0x0, 0x2, 0x4}, 0x7, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r9 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close(r10) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r10) shmctl$SHM_UNLOCK(r2, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/policy/namespaces\x00', 0x1ed) 722.377281ms ago: executing program 1 (id=1588): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000440)={0x29, &(0x7f00000002c0)=[{0x46, '\x00', @buffer={"d5be873ef77347648692bb1cf93de2a2db676aeff0df7baeb95338a07f92ca7d", 0x20}, 0xf58}]}) r2 = socket$kcm(0x10, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2009) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880827fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003b00f3030000fff20000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x70bd2d, 0x0, {0x1a, 0x3, 0x0, 0x4, {0xfffc, 0x4e22, [0x2, 0xffffffff], [0x803, 0x0, 0x38, 0x1], 0x0, [0x1, 0x7fffffff]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x200040c4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x298}}, 0x20000005) 627.461612ms ago: executing program 3 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x2400, 0x0, {0x1, 0x0, 0x45}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x3}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 600.015253ms ago: executing program 4 (id=1590): writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)="8bcceb21", 0x4}], 0x1) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x10000000, &(0x7f0000003700)={0x77359400}) 419.290719ms ago: executing program 1 (id=1591): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) listen(r0, 0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000d40)) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ftruncate(0xffffffffffffffff, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0008000ae4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x5b8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socket(0xa, 0x3, 0xff) close(0xffffffffffffffff) 374.401345ms ago: executing program 3 (id=1592): syz_ublk_setup_io_uring(0xed4, &(0x7f0000000340)={0x0, 0x0, 0x20000, 0x0, 0x1e5}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e80)={[0x9, 0xfffffffffffffffe, 0x2e, 0xa4e, 0x8, 0xffff, 0x1, 0x7, 0x6, 0x8000, 0x10, 0xfbc, 0x100, 0x1, 0x7c8, 0x9], 0xa000, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x7, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x810000000000000) 233.381149ms ago: executing program 4 (id=1593): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002380)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002480)=0xe8) (async, rerun: 64) getresuid(&(0x7f0000002540)=0x0, &(0x7f0000002580), &(0x7f00000025c0)) (async, rerun: 64) r5 = getegid() (async) lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000002f80), 0x200400, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002840)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002940)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000002a40)=0xe8) (async) r9 = getgid() getresuid(&(0x7f0000002b80), &(0x7f0000002bc0), &(0x7f0000002c00)=0x0) (async, rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', 0x4000, 0x200, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000000080)="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", 0x2000, &(0x7f0000002ec0)={&(0x7f0000002080)={0x50, 0x0, 0xa, {0x7, 0x2d, 0x3, 0x4004000, 0x410f, 0x3ade, 0x3, 0x67119f40, 0x0, 0x0, 0x1, 0xc}}, &(0x7f0000002100)={0x18, 0xffffffffffffffda, 0x4, {0x2}}, &(0x7f0000002140)={0x18, 0x0, 0x8}, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, 0x6, {0x3}}, &(0x7f00000021c0)={0x18, 0x0, 0x81, {0x8001}}, &(0x7f0000002200)={0x28, 0xfffffffffffffffe, 0x3, {{0x104, 0x7fffffff, 0x1, r2}}}, &(0x7f0000002240)={0x60, 0xfffffffffffffffe, 0x9, {{0x0, 0x3fc00000, 0xb, 0x0, 0x4, 0x1, 0x9, 0x1}}}, &(0x7f00000022c0)={0x18, 0x0, 0x1, {0x5}}, &(0x7f0000002300)={0x1a, 0x0, 0xa, {'/dev/uhid\x00'}}, &(0x7f0000002340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x1}}, &(0x7f00000024c0)={0x78, 0x0, 0x3, {0xca, 0x101, 0x0, {0x0, 0x8000000000000001, 0x592e, 0x9, 0x10, 0x2, 0x8001, 0x3ff, 0x4, 0xa000, 0x3, r3, 0x0, 0x3, 0x79}}}, &(0x7f0000002600)={0x90, 0x0, 0xf, {0x5, 0x2, 0x0, 0x7, 0x0, 0x825, {0x2, 0x3, 0x0, 0x2, 0xa6e, 0x6, 0x40, 0x2, 0x2, 0x0, 0x1, r4, r5, 0x1000, 0xfffffffd}}}, &(0x7f00000026c0)={0x90, 0x0, 0x100000000, [{0x1, 0x0, 0xa, 0x51, '/dev/uhid\x00'}, {0x6, 0xe, 0x0, 0x3}, {0x8, 0x6, 0xa, 0xf, '/dev/uhid\x00'}, {0x4, 0xff, 0x0, 0x3}]}, &(0x7f0000002880)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x0, 0x1, 0x776e, 0x3, 0x0, 0x8, {0x3, 0x5, 0x3, 0xadbf, 0x2, 0x2, 0xc, 0x2, 0x8c, 0x1000, 0x7, r6, r7, 0x3, 0xb}}, {0x2, 0xa, 0x1, 0x4, '^'}}]}, &(0x7f0000002a80)={0xa0, 0x0, 0x4f, {{0x6, 0x0, 0x9, 0x100, 0x1, 0x4, {0x2, 0xeab1, 0x2, 0x1, 0x3, 0x9, 0x786, 0x0, 0x7, 0x2000, 0x8001, r8, r9, 0x4, 0xa5}}, {0x0, 0x10}}}, &(0x7f0000002b40)={0x20, 0x0, 0xfff, {0x5, 0x4, 0x800, 0xc3b7}}, &(0x7f0000002d80)={0x130, 0xfffffffffffffffe, 0x29d, {0x1, 0x7, 0x0, '\x00', {0x800, 0x6, 0x0, 0x3, r10, r11, 0x4000, '\x00', 0xf, 0x5, 0x8, 0x9, {0x6, 0x160}, {0x7f, 0x81d9}, {0x100000001, 0x4}, {0x1d, 0x3}, 0x5db7, 0x4, 0x3, 0x1}}}}) 167.817009ms ago: executing program 2 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005a6010006"], 0x1c}}, 0x0) 156.024182ms ago: executing program 3 (id=1595): socket(0x8, 0x80000, 0xfb) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e201", 0x3}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/flush\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='1\n', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x6, 0x9000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='mtd0\x00', &(0x7f00000002c0)='configfs\x00', 0x1001044, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='y\x10\xea\x7f\x8cZ7`_\x00\x00\x00\x00\xcf\x00\b\x00D\xcbg^\x00\x00\x00\x00\xd5\x00@\x04\xe2)\x11\xe5m\xd6\xe9\x00'/59, 0x0) ftruncate(r1, 0x1000006) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0x180) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c72d71f01feffffffffffff"]) 0s ago: executing program 2 (id=1596): r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x11010, r1, 0xceddd000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) r2 = eventfd(0xc) (async) r3 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x1, 0x671, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0x141}}}, &(0x7f0000000200)) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f00000002c0)={r3, 0xffff, 0x70, &(0x7f0000000240)={0x70, 0x8, {0x1d, 0xa, 0xc, 0xea, 0x5, 0x3, 0x6, 0xb3, 0xfe}, {0x9, 0xfffffff8, 0x0, 0x0, 0x43}, {0x6, 0x6, 0x2, 0x80000000}, {0x7, 0xac0c, 0x4}}}) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x10) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000003c0)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x181c40, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) (async) ioctl$TIOCSBRK(r2, 0x5427) accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000500)={0x3, r5, 'id0\x00'}) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000580)={'\x00', 0x3e, 0x1, 0x8}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000600), 0x80000001, 0x20400) r9 = fcntl$dupfd(r6, 0x406, r8) ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f0000000640)=0x5) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000680)={0x8}) (async) ioctl$SNDRV_PCM_IOCTL_START(r7, 0x4142, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2120000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2cc, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="772cf032efd7", {0xe, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @tdls_setup_resp={0xc, 0x1, 0x15, 0xfb, @val=0xc390, @void, @void, @void}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x21a, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0xf}, @device_a, @broadcast, @from_mac=@device_b, {0x7, 0xa}, @broadcast}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2d1c}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @random="d06905d50ffe", {0x0, 0x9}, @value=@ver_80211n={0x0, 0x4468}}, 0x3c, @val={0x8c, 0x18, {0xb77, "c0b898b2bb23", @long="3300559f608733caf3af48bd1698b1f7"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40048d0}, 0x8000) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x20, &(0x7f0000000b80)={'trans=virtio,', {[{@access_user}, {@cachetag={'cachetag', 0x3d, '\xd9'}}, {@afid={'afid', 0x3d, 0xa}}, {@version_L}, {@directio}, {@access_client}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffd7c8}}, {@pcr={'pcr', 0x3d, 0xc}}]}}) (async) ioctl$SW_SYNC_IOC_INC(r9, 0x40045701, &(0x7f0000000c40)=0xf2a9) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000c80)={0x6573, 0x2, 0x100, "13ea93dfb7c9b50fdb7510a40973d7191d1f9e2b993373ab059f303c560b141b", 0x20493859}) (async) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000cc0)={0x101, 0x3d74, 0x8, 0xd}) (async) ioctl$CEC_ADAP_G_PHYS_ADDR(r9, 0x80026101, &(0x7f0000000d00)) kernel console output (not intermixed with test programs): sb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.014109][ T27] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 176.015650][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.015665][ T27] usb 5-1: Product: syz [ 176.015674][ T27] usb 5-1: Manufacturer: syz [ 176.015683][ T27] usb 5-1: SerialNumber: syz [ 176.079872][ T192] usb 2-1: device descriptor read/64, error -71 [ 176.112660][ T5694] usb 3-1: device descriptor read/64, error -71 [ 176.157864][ T8100] 9p: Bad value for 'rfdno' [ 176.223021][ T5694] usb usb3-port1: attempt power cycle [ 176.231743][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.232505][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.322492][ T192] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 176.452478][ T192] usb 2-1: device descriptor read/64, error -71 [ 176.464168][ C1] usb 5-1: received EP1 urb->status = -2 [ 176.465114][ T27] usb 5-1: unable to init card! (ret=-110) [ 176.466961][ T27] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 176.562506][ T5694] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 176.562773][ T192] usb usb2-port1: attempt power cycle [ 176.583999][ T5694] usb 3-1: device descriptor read/8, error -71 [ 176.665353][ T5701] usb 5-1: USB disconnect, device number 28 [ 176.747979][ T8104] overlay: ./file0 is not a directory [ 176.822550][ T5694] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 176.855539][ T5694] usb 3-1: device descriptor read/8, error -71 [ 176.902465][ T192] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 176.923004][ T192] usb 2-1: device descriptor read/8, error -71 [ 176.963655][ T5694] usb usb3-port1: unable to enumerate USB device [ 177.162471][ T192] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 177.184116][ T192] usb 2-1: device descriptor read/8, error -71 [ 177.216408][ T8111] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 177.245447][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.292924][ T192] usb usb2-port1: unable to enumerate USB device [ 177.829242][ T8119] Need at least one configuration in g1. [ 177.829431][ T8119] udc dummy_udc.0: failed to start g1: -22 [ 177.829445][ T8119] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 177.830545][ T8119] UDC core: g1: couldn't find an available UDC or it's busy [ 177.862116][ T8119] qnx6: unable to read the first superblock [ 177.913860][ T5624] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 177.988602][ T8129] snd_dummy snd_dummy.0: control 1:0:99:syz1:6 is already present [ 178.242371][ T5701] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 178.392370][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 178.393161][ T5701] usb 5-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 178.395786][ T5701] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 178.395804][ T5701] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 178.395816][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 178.395830][ T5701] usb 5-1: config 1 has no interface number 0 [ 178.395855][ T5701] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.395871][ T5701] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 178.395896][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.420757][ T5701] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 178.611596][ T5701] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 178.855855][ T5708] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 179.012662][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 179.013628][ T5708] usb 3-1: New USB device found: idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 179.014715][ T5708] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 179.014731][ T5708] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 179.014743][ T5708] usb 3-1: config 127 has no interface number 1 [ 179.014784][ T5708] usb 3-1: config 127 interface 171 has no altsetting 0 [ 179.016706][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.016721][ T5708] usb 3-1: Product: syz [ 179.016746][ T5708] usb 3-1: Manufacturer: syz [ 179.016755][ T5708] usb 3-1: SerialNumber: syz [ 179.142337][ T5773] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 179.238627][ T5708] xr_serial 3-1:127.171: xr_serial converter detected [ 179.240113][ T5708] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 179.240163][ T5708] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 179.251378][ T5708] usb 3-1: USB disconnect, device number 40 [ 179.270605][ T5708] xr_serial 3-1:127.171: device disconnected [ 179.293432][ T5773] usb 2-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00 [ 179.296860][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.296926][ T5773] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.296966][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.325629][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.512797][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.513375][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.645664][ T5708] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 179.730857][ T5773] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 179.730893][ T5773] dvb_ttusb_budget: ttusb_init_controller: error [ 179.730906][ T5773] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 179.850016][ T5773] DVB: Unable to find symbol stv0299_attach() [ 179.896667][ T8169] syzkaller1: entered promiscuous mode [ 179.896721][ T8169] syzkaller1: entered allmulticast mode [ 179.931382][ T5773] DVB: Unable to find symbol tda8083_attach() [ 179.931397][ T5773] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 180.068966][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 180.113388][ T8180] netlink: 'syz.3.728': attribute type 4 has an invalid length. [ 180.262344][ T8186] loop5: detected capacity change from 0 to 7 [ 180.272780][ T8186] Dev loop5: unable to read RDB block 7 [ 180.272853][ T8186] loop5: AHDI p1 p3 p4 [ 180.272905][ T8186] loop5: partition table partially beyond EOD, truncated [ 180.273398][ T8186] loop5: p1 size 100663296 extends beyond EOD, truncated [ 180.305933][ T8186] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 180.336627][ T8188] fuse: fd is not a fuse device [ 180.409031][ T8186] Dev loop5: unable to read RDB block 7 [ 180.409060][ T8186] loop5: AHDI p1 p3 p4 [ 180.409080][ T8186] loop5: partition table partially beyond EOD, truncated [ 180.409567][ T8186] loop5: p1 size 100663296 extends beyond EOD, truncated [ 180.419365][ T8186] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 180.498083][ T8186] FAULT_INJECTION: forcing a failure. [ 180.498083][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 180.498119][ T8186] CPU: 1 UID: 0 PID: 8186 Comm: syz.2.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.498138][ T8186] Tainted: [L]=SOFTLOCKUP [ 180.498144][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.498152][ T8186] Call Trace: [ 180.498158][ T8186] [ 180.498163][ T8186] dump_stack_lvl+0xe8/0x150 [ 180.498200][ T8186] should_fail_ex+0x3eb/0x540 [ 180.498225][ T8186] should_failslab+0xa8/0x100 [ 180.498245][ T8186] __kmalloc_node_noprof+0xfb/0x720 [ 180.498270][ T8186] ? fifo_init+0x3ed/0x6d0 [ 180.498282][ T8186] ? qdisc_alloc+0x92/0x9d0 [ 180.498294][ T8186] ? qdisc_alloc+0x92/0x9d0 [ 180.498306][ T8186] ? __pfx_fifo_init+0x10/0x10 [ 180.498323][ T8186] qdisc_alloc+0x92/0x9d0 [ 180.498359][ T8186] qdisc_create_dflt+0x8e/0x4e0 [ 180.498382][ T8186] ets_qdisc_change+0xd36/0x2510 [ 180.498416][ T8186] ? __pfx_ets_qdisc_change+0x10/0x10 [ 180.498468][ T8186] ? tcf_block_get+0x67/0xa0 [ 180.498486][ T8186] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 180.498511][ T8186] ? ets_qdisc_init+0x82/0x530 [ 180.498529][ T8186] ? __pfx_ets_qdisc_init+0x10/0x10 [ 180.498550][ T8186] qdisc_create+0xc23/0x1450 [ 180.498570][ T8186] ? lockdep_rtnl_is_held+0x26/0x40 [ 180.498588][ T8186] ? qdisc_lookup+0x364/0x6c0 [ 180.498610][ T8186] tc_modify_qdisc+0x17af/0x2390 [ 180.498632][ T8186] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 180.498655][ T8186] ? __local_bh_enable_ip+0xd6/0x140 [ 180.498712][ T8186] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 180.498730][ T8186] rtnetlink_rcv_msg+0x7b9/0xc00 [ 180.498758][ T8186] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 180.498771][ T8186] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.498787][ T8186] ? __copy_skb_header+0xa3/0x4a0 [ 180.498801][ T8186] ? __asan_memcpy+0x40/0x70 [ 180.498832][ T8186] netlink_rcv_skb+0x226/0x4a0 [ 180.498854][ T8186] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.498875][ T8186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.498910][ T8186] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.498923][ T8186] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.498939][ T8186] netlink_unicast+0x7bd/0x940 [ 180.498960][ T8186] netlink_sendmsg+0x7c3/0xae0 [ 180.499001][ T8186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.499027][ T8186] ? apparmor_socket_sendmsg+0x98/0x360 [ 180.499048][ T8186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.499069][ T8186] sock_sendmsg_nosec+0x14e/0x190 [ 180.499085][ T8186] sock_write_iter+0x2de/0x3e0 [ 180.499100][ T8186] ? __pfx_sock_write_iter+0x10/0x10 [ 180.499118][ T8186] ? bpf_lsm_file_permission+0x9/0x20 [ 180.499148][ T8186] ? security_file_permission+0x75/0x260 [ 180.499176][ T8186] vfs_write+0x612/0xba0 [ 180.499201][ T8186] ? __pfx_vfs_write+0x10/0x10 [ 180.499225][ T8186] ? __fget_files+0x3a2/0x420 [ 180.499238][ T8186] ? __fget_files+0x2a/0x420 [ 180.499253][ T8186] ? fdget+0x1ac/0x250 [ 180.499270][ T8186] ksys_write+0x150/0x270 [ 180.499302][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 180.499331][ T8186] do_syscall_64+0x166/0x520 [ 180.499349][ T8186] ? trace_irq_disable+0x3b/0x140 [ 180.499366][ T8186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.499385][ T8186] ? clear_bhb_loop+0x70/0xc0 [ 180.499399][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.499413][ T8186] RIP: 0033:0x7fb32979e159 [ 180.499455][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.499473][ T8186] RSP: 002b:00007fb32a6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.499495][ T8186] RAX: ffffffffffffffda RBX: 00007fb329a25fa0 RCX: 00007fb32979e159 [ 180.499511][ T8186] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000b [ 180.499524][ T8186] RBP: 00007fb32983506b R08: 0000000000000000 R09: 0000000000000000 [ 180.499538][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.499550][ T8186] R13: 00007fb329a26038 R14: 00007fb329a25fa0 R15: 00007ffd02c316f8 [ 180.499580][ T8186] [ 180.991503][ T5701] usb 5-1: USB disconnect, device number 29 [ 181.008670][ T5701] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 181.201285][ T54] Bluetooth: hci0: Malformed LE Event: 0x1d [ 181.453055][ T5773] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 181.512200][ T5701] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 181.602656][ T5773] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 181.603606][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.603627][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.603668][ T5773] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.605622][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.605678][ T5773] usb 3-1: Product: syz [ 181.605692][ T5773] usb 3-1: Manufacturer: syz [ 181.605706][ T5773] usb 3-1: SerialNumber: syz [ 181.611988][ T5773] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 181.612034][ T5773] cdc_ncm 3-1:1.0: bind() failure [ 181.692172][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 181.693047][ T5701] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 181.694356][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.694390][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.695559][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.695588][ T5701] usb 5-1: SerialNumber: syz [ 181.708173][ T5701] usb 5-1: 0:2 : does not exist [ 181.843862][ T5708] usb 2-1: USB disconnect, device number 43 [ 182.262138][ T5708] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 182.316483][ T8205] FAULT_INJECTION: forcing a failure. [ 182.316483][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 182.316515][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.4.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.316544][ T8205] Tainted: [L]=SOFTLOCKUP [ 182.316552][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.316565][ T8205] Call Trace: [ 182.316572][ T8205] [ 182.316581][ T8205] dump_stack_lvl+0xe8/0x150 [ 182.316608][ T8205] should_fail_ex+0x3eb/0x540 [ 182.316634][ T8205] should_failslab+0xa8/0x100 [ 182.316657][ T8205] __kmalloc_cache_noprof+0x9e/0x600 [ 182.316677][ T8205] ? __kasan_kmalloc+0x93/0xb0 [ 182.316695][ T8205] ? snd_seq_pool_new+0x51/0x1b0 [ 182.316714][ T8205] ? snd_seq_pool_new+0x51/0x1b0 [ 182.316734][ T8205] ? __kmalloc_cache_noprof+0x148/0x600 [ 182.316758][ T8205] snd_seq_pool_new+0x51/0x1b0 [ 182.316780][ T8205] seq_create_client1+0x6a/0x620 [ 182.316806][ T8205] snd_seq_open+0x41/0x4e0 [ 182.316827][ T8205] chrdev_open+0x4d9/0x600 [ 182.316849][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 182.316871][ T8205] ? devcgroup_check_permission+0x31/0x8f0 [ 182.316896][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 182.316914][ T8205] do_dentry_open+0x80e/0x1360 [ 182.316943][ T8205] vfs_open_consume+0x4a/0x350 [ 182.316961][ T8205] ? path_openat+0x148a/0x1da0 [ 182.316982][ T8205] path_openat+0x14a6/0x1da0 [ 182.317019][ T8205] do_file_open+0x23e/0x4a0 [ 182.317043][ T8205] ? __pfx_do_file_open+0x10/0x10 [ 182.317082][ T8205] ? _raw_spin_unlock+0x28/0x50 [ 182.317101][ T8205] ? alloc_fd+0x6af/0x760 [ 182.317130][ T8205] do_sys_openat2+0x115/0x200 [ 182.317151][ T8205] ? __se_sys_futex+0x3a8/0x450 [ 182.317171][ T8205] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.317197][ T8205] ? rcu_is_watching+0x16/0xb0 [ 182.317222][ T8205] __x64_sys_openat+0x138/0x170 [ 182.317246][ T8205] do_syscall_64+0x166/0x520 [ 182.317265][ T8205] ? trace_irq_disable+0x3b/0x140 [ 182.317283][ T8205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.317304][ T8205] ? clear_bhb_loop+0x70/0xc0 [ 182.317325][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.317353][ T8205] RIP: 0033:0x7ff1c559e159 [ 182.317372][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.317390][ T8205] RSP: 002b:00007ff1c6449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.317411][ T8205] RAX: ffffffffffffffda RBX: 00007ff1c5825fa0 RCX: 00007ff1c559e159 [ 182.317428][ T8205] RDX: 0000000000060240 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 182.317443][ T8205] RBP: 00007ff1c563506b R08: 0000000000000000 R09: 0000000000000000 [ 182.317456][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.317468][ T8205] R13: 00007ff1c5826038 R14: 00007ff1c5825fa0 R15: 00007ffdcca5e9f8 [ 182.317499][ T8205] [ 182.516470][ T5708] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.533945][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.533999][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.648025][ T5708] usb 2-1: config 0 descriptor?? [ 182.649315][ T5701] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 182.657703][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 182.717630][ T5701] usb 5-1: USB disconnect, device number 30 [ 182.755735][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.053172][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.053824][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 183.054647][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 183.055628][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 183.057562][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 183.058146][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 183.146661][ T8220] cgroup: Invalid name [ 183.261572][ T8207] Need at least one configuration in g1. [ 183.278856][ T8207] udc dummy_udc.0: failed to start g1: -22 [ 183.278879][ T8207] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 183.299464][ T8224] loop8: detected capacity change from 0 to 16384 [ 183.329373][ T8207] UDC core: g1: couldn't find an available UDC or it's busy [ 183.371526][ T5708] pwc: recv_control_msg error -71 req 02 val 2100 [ 183.380497][ T5708] pwc: recv_control_msg error -71 req 04 val 1500 [ 183.381328][ T5708] pwc: recv_control_msg error -71 req 02 val 2500 [ 183.384298][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 183.387265][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 183.391665][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 183.398934][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 183.405036][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 183.407964][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.436100][ T5708] pwc: Registered as video103. [ 183.450303][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 183.476835][ T5708] usb 2-1: USB disconnect, device number 44 [ 183.549109][ T8236] netlink: 56 bytes leftover after parsing attributes in process `syz.3.749'. [ 183.882097][ T192] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 184.032935][ T192] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 184.036525][ T192] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 184.036548][ T192] usb 5-1: Product: syz [ 184.036562][ T192] usb 5-1: SerialNumber: syz [ 184.041668][ T192] usb 5-1: config 0 descriptor?? [ 184.274786][ T192] usb 5-1: USB disconnect, device number 31 [ 184.429942][ T8252] syzkaller1: entered promiscuous mode [ 184.429958][ T8252] syzkaller1: entered allmulticast mode [ 184.555675][ T8254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.754'. [ 184.716431][ T5773] usb 3-1: USB disconnect, device number 41 [ 184.832315][ T192] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 184.961993][ T192] usb 2-1: device descriptor read/64, error -71 [ 185.051945][ T5694] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 185.072021][ T5773] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 185.201920][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 185.201921][ T192] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 185.202063][ T5773] usb 3-1: device descriptor read/64, error -71 [ 185.202457][ T5694] usb 5-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.203433][ T5694] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 185.205077][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.205093][ T5694] usb 5-1: Product: syz [ 185.205103][ T5694] usb 5-1: Manufacturer: syz [ 185.205112][ T5694] usb 5-1: SerialNumber: syz [ 185.208506][ T5694] r8152-cfgselector 5-1: Unknown version 0x0000 [ 185.208526][ T5694] r8152-cfgselector 5-1: config 0 descriptor?? [ 185.331963][ T192] usb 2-1: device descriptor read/64, error -71 [ 185.442832][ T192] usb usb2-port1: attempt power cycle [ 185.461939][ T5773] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 185.591947][ T5773] usb 3-1: device descriptor read/64, error -71 [ 185.618031][ T5694] r8152-cfgselector 5-1: Unknown version 0x0000 [ 185.618439][ T5694] r8152-cfgselector 5-1: No union descriptors [ 185.627390][ T5694] r8152-cfgselector 5-1: USB disconnect, device number 32 [ 185.702665][ T5773] usb usb3-port1: attempt power cycle [ 185.781887][ T192] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 185.802401][ T192] usb 2-1: device descriptor read/8, error -71 [ 186.041890][ T5773] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 186.042008][ T192] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 186.069146][ T192] usb 2-1: device descriptor read/8, error -71 [ 186.079292][ T5773] usb 3-1: device descriptor read/8, error -71 [ 186.172956][ T192] usb usb2-port1: unable to enumerate USB device [ 186.311916][ T5773] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 186.332314][ T5773] usb 3-1: device descriptor read/8, error -71 [ 186.391933][ T5701] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 186.442544][ T5773] usb usb3-port1: unable to enumerate USB device [ 186.542365][ T5701] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 186.543187][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.543202][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.543228][ T5701] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.543270][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.753306][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.755717][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.764325][ T5773] usb 5-1: USB disconnect, device number 33 [ 187.294908][ T8274] IPVS: Error connecting to the multicast addr [ 187.495101][ T8272] syzkaller1: entered promiscuous mode [ 187.495130][ T8272] syzkaller1: entered allmulticast mode [ 187.831071][ T8289] syzkaller1: entered promiscuous mode [ 187.831095][ T8289] syzkaller1: entered allmulticast mode [ 187.944189][ T33] audit: type=1800 audit(1700000050.153:4): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.770" name="bus" dev="tmpfs" ino=449 res=0 errno=-22 [ 188.083136][ T5773] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 188.231778][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 188.232349][ T5773] usb 2-1: New USB device found: idVendor=044e, idProduct=120c, bcdDevice=0.00 [ 188.234064][ T5773] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 188.234102][ T5773] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.234127][ T5773] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 188.234152][ T5773] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.234181][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.236605][ T5773] usb 2-1: config 0 descriptor?? [ 188.353418][ T27] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 188.507660][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.507731][ T27] usb 5-1: New USB device found: idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 188.529573][ T27] usb 5-1: config 66 has an invalid interface number: 107 but max is 1 [ 188.529624][ T27] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 188.529643][ T27] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 188.529663][ T27] usb 5-1: config 66 has no interface number 0 [ 188.529689][ T27] usb 5-1: config 66 interface 107 has no altsetting 0 [ 188.550641][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.550753][ T27] usb 5-1: Product: syz [ 188.550790][ T27] usb 5-1: Manufacturer: syz [ 188.550827][ T27] usb 5-1: SerialNumber: syz [ 188.683356][ T5773] hid_parser_main: 27 callbacks suppressed [ 188.683387][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683439][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683466][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683491][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683517][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683542][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683590][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683616][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683641][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683666][ T5773] hid-alps 0003:044E:120C.000B: unknown main item tag 0x0 [ 188.683754][ T5773] hid-alps 0003:044E:120C.000B: unbalanced collection at end of report description [ 188.684500][ T5773] hid-alps 0003:044E:120C.000B: parse failed [ 188.684616][ T5773] hid-alps 0003:044E:120C.000B: probe with driver hid-alps failed with error -22 [ 188.845703][ T27] usb 5-1: USB disconnect, device number 34 [ 188.872678][ T5773] usb 2-1: USB disconnect, device number 49 [ 188.962948][ T8322] jffs2: notice: (8322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.981110][ T8322] overlayfs: failed to clone upperpath [ 189.223034][ T8330] 8021q: VLANs not supported on ip6tnl0 [ 189.563858][ C0] syz_tun: tun_net_xmit 86 [ 189.738638][ T8345] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 190.156937][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 190.537914][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 190.601781][ C0] syz_tun: tun_net_xmit 86 [ 190.616189][ T192] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 190.770109][ T192] usb 5-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 190.785421][ T192] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.785468][ T192] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 190.785494][ T192] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 190.785517][ T192] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 190.785540][ T192] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 190.785563][ T192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.785587][ T192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.785608][ T192] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 190.789989][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.790012][ T192] usb 5-1: Product: syz [ 190.790026][ T192] usb 5-1: Manufacturer: syz [ 190.790041][ T192] usb 5-1: SerialNumber: syz [ 190.914332][ T8357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.914463][ T8357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.914561][ T8357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.914659][ T8357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.954244][ T192] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 190.955097][ T192] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 190.977749][ T192] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 191.033374][ T192] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 191.056053][ T192] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 191.083097][ T192] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 191.194701][ T192] usb 5-1: USB disconnect, device number 35 [ 191.272981][ T192] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 191.316312][ T192] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 191.352937][ T192] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 191.394195][ T192] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 191.396062][ T192] keyspan 5-1:1.0: device disconnected [ 191.571527][ T5773] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 191.641679][ C0] syz_tun: tun_net_xmit 86 [ 191.939224][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 191.939760][ T5773] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 191.960950][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.960972][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.961013][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 191.961039][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 191.961078][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.987256][ T5773] hub 3-1:1.0: bad descriptor, ignoring hub [ 191.987314][ T5773] hub 3-1:1.0: probe with driver hub failed with error -5 [ 191.988609][ T5773] cdc_wdm 3-1:1.0: skipping garbage [ 191.988639][ T5773] cdc_wdm 3-1:1.0: skipping garbage [ 192.171534][ T192] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 192.230306][ T5773] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 192.230326][ T5773] cdc_wdm 3-1:1.0: Unknown control protocol [ 192.341546][ T5701] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 192.341860][ T192] usb 2-1: Using ep0 maxpacket: 16 [ 192.345584][ T192] usb 2-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 192.346540][ T192] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 192.350652][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.350674][ T192] usb 2-1: Product: syz [ 192.350688][ T192] usb 2-1: Manufacturer: syz [ 192.350702][ T192] usb 2-1: SerialNumber: syz [ 192.493752][ T5701] usb 5-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 192.495148][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.495178][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.495239][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.589071][ T5701] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 192.615014][ T5701] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 192.804959][ T5773] usb 3-1: USB disconnect, device number 46 [ 192.807674][ T8384] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 192.930421][ T27] usb 5-1: USB disconnect, device number 36 [ 192.966663][ T27] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 192.967581][ T27] metro_usb 5-1:1.0: device disconnected [ 193.049924][ T8398] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 193.049950][ T8398] CIFS mount error: No usable UNC path provided in device string! [ 193.049950][ T8398] [ 193.050153][ T8398] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.192345][ T192] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 193.349447][ T192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.349525][ T192] usb 2-1: device firmware changed [ 193.387837][ T192] usb 2-1: USB disconnect, device number 50 [ 193.761874][ T5701] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 193.793074][ T8415] 8021q: VLANs not supported on wg2 [ 193.832532][ T192] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 193.922073][ T5701] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 193.924292][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.924322][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.927140][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 193.927164][ T5701] usb 3-1: Product: syz [ 193.927179][ T5701] usb 3-1: Manufacturer: syz [ 193.997094][ T5701] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 194.012280][ T192] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.014898][ T192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.014948][ T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.019744][ T192] usb 5-1: config 0 descriptor?? [ 194.060662][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.060807][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.076918][ T192] pwc: Askey VC010 type 2 USB webcam detected. [ 194.408671][ T8433] openvswitch: netlink: IP tunnel dst address not specified [ 194.428511][ T8433] syz_tun: tun_net_xmit 42 [ 194.479653][ T192] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.480946][ T192] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.495144][ T5708] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 194.503371][ T192] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.504267][ T192] pwc: recv_control_msg error -32 req 04 val 1000 [ 194.505010][ T192] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.505696][ T192] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.508315][ T192] pwc: recv_control_msg error -32 req 02 val 2000 [ 194.509039][ T192] pwc: recv_control_msg error -32 req 02 val 2100 [ 194.509753][ T192] pwc: recv_control_msg error -32 req 04 val 1500 [ 194.510428][ T192] pwc: recv_control_msg error -32 req 02 val 2500 [ 194.511110][ T192] pwc: recv_control_msg error -32 req 02 val 2400 [ 194.514206][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.520763][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.601095][ T192] pwc: recv_control_msg error -32 req 02 val 2600 [ 194.612532][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.613088][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.637948][ T192] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.638484][ T192] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.639309][ T192] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.639887][ T192] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.669016][ T5708] usb 2-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 194.679214][ T5708] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.679265][ T5708] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.679288][ T5708] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 194.679348][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.736559][ T192] pwc: Registered as video103. [ 194.738398][ T8427] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 194.757510][ T192] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 194.798588][ T192] usb 5-1: USB disconnect, device number 37 [ 195.039648][ T8441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.823'. [ 195.481306][ C0] syz_tun: tun_net_xmit 42 [ 195.567892][ T5708] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 195.581742][ T5708] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input28 [ 196.261578][ T5701] usb 3-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 196.278305][ T5701] usb 3-1: USB disconnect, device number 47 [ 196.315541][ T5701] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 196.319724][ T5701] mos7840 3-1:1.0: device disconnected [ 196.521250][ C0] syz_tun: tun_net_xmit 42 [ 196.962954][ T8466] 9p: Bad value for 'rfdno' [ 197.026090][ T8470] usb usb9: usbfs: process 8470 (syz.4.833) did not claim interface 0 before use [ 197.072110][ T8470] kernel read not supported for file / 7诚)雜摟!Q忲欹fs鮨{T噐)rеO殬2:"繲+蜔v|嵳睤vc帗刂犈6襵鉩: (pid: 8470 comm: syz.4.833) [ 197.072842][ T33] audit: type=1800 audit(1700000059.283:5): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.833" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=22168 res=0 errno=-22 [ 197.075236][ T33] audit: type=1326 audit(1700000059.283:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.833" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c559e159 code=0x0 [ 197.212431][ T5773] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 197.361135][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 197.361768][ T5773] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.363237][ T5773] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 197.363284][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.363299][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.363314][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.363329][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.363374][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.594543][ T5701] usb 2-1: USB disconnect, device number 51 [ 197.595532][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 197.636471][ T5773] usb 3-1: usb_control_msg returned -32 [ 197.636513][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 197.797584][ T8478] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 197.967944][ T8481] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.028178][ T8484] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 198.114841][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.114862][ T8489] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.118166][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.118787][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.119670][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.119685][ T8489] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.127240][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.127280][ T8489] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.128215][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.128248][ T8489] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.136235][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.152515][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.176442][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.178613][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.178651][ T8489] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.200222][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.204123][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.207940][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.209024][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.218543][ T8489] netlink: 'syz.1.839': attribute type 22 has an invalid length. [ 198.226887][ T5701] usb 3-1: USB disconnect, device number 48 [ 198.412296][ T192] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 198.573442][ T192] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 198.574366][ T192] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 198.574388][ T192] usb 2-1: config 0 has no interface number 0 [ 198.574425][ T192] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 198.577382][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.577406][ T192] usb 2-1: Product: syz [ 198.577420][ T192] usb 2-1: Manufacturer: syz [ 198.577434][ T192] usb 2-1: SerialNumber: syz [ 198.588987][ T192] usb 2-1: config 0 descriptor?? [ 198.591272][ T8491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 198.606574][ T192] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.672056][ T5708] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 198.807797][ T5708] usb 5-1: device descriptor read/64, error -71 [ 198.811146][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 198.833383][ T192] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.848245][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.848648][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.893190][ T192] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.895386][ T8501] MTD: Couldn't look up './dev/mtdblock0': -2 [ 199.025708][ T192] usb 2-1: USB disconnect, device number 52 [ 199.068942][ T5708] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 199.076785][ T192] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 199.116943][ T192] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 199.119306][ T192] quatech2 2-1:0.51: device disconnected [ 199.173175][ C0] syz_tun: tun_net_xmit 86 [ 199.202079][ T5708] usb 5-1: device descriptor read/64, error -71 [ 199.312283][ T5708] usb usb5-port1: attempt power cycle [ 199.661030][ T5708] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 199.681594][ T5708] usb 5-1: device descriptor read/8, error -71 [ 199.846564][ T8519] xt_IDLETIMER: label is empty or not nul-terminated [ 199.961188][ T5708] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 199.981772][ T5708] usb 5-1: device descriptor read/8, error -71 [ 200.091630][ T5708] usb usb5-port1: unable to enumerate USB device [ 200.201149][ C0] syz_tun: tun_net_xmit 86 [ 200.250606][ T8529] serio: Serial port ttyS3 [ 200.320975][ T32] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 200.447170][ C0] syz_tun: tun_net_xmit 86 [ 200.470945][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 200.478295][ T32] usb 2-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 200.480171][ T32] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 200.480188][ T32] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 200.480201][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 200.480215][ T32] usb 2-1: config 1 has no interface number 0 [ 200.480241][ T32] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.480259][ T32] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 200.480285][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.549308][ T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 200.725201][ T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 200.864262][ T8536] FAULT_INJECTION: forcing a failure. [ 200.864262][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 200.864297][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.2.856 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 200.864327][ T8536] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 200.864337][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.864349][ T8536] Call Trace: [ 200.864357][ T8536] [ 200.864366][ T8536] dump_stack_lvl+0xe8/0x150 [ 200.864394][ T8536] should_fail_ex+0x3eb/0x540 [ 200.864421][ T8536] should_failslab+0xa8/0x100 [ 200.864445][ T8536] __kmalloc_cache_noprof+0x9e/0x600 [ 200.864468][ T8536] ? __request_region+0x5f/0x1a0 [ 200.864487][ T8536] ? __request_region+0x5f/0x1a0 [ 200.864514][ T8536] __request_region+0x5f/0x1a0 [ 200.864538][ T8536] __comedi_check_request_region+0xd0/0x260 [ 200.864564][ T8536] comedi_check_request_region+0x3c/0xc0 [ 200.864590][ T8536] das16m1_attach+0x72/0xb10 [ 200.864612][ T8536] ? __raw_spin_lock_init+0x45/0x100 [ 200.864637][ T8536] comedi_device_attach+0x52d/0x720 [ 200.864664][ T8536] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 200.864703][ T8536] ? kasan_quarantine_put+0xbb/0x1f0 [ 200.864723][ T8536] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 200.864762][ T8536] ? do_vfs_ioctl+0x116f/0x1530 [ 200.864786][ T8536] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.864841][ T8536] ? __fget_files+0x2a/0x420 [ 200.864865][ T8536] ? __fget_files+0x2a/0x420 [ 200.864895][ T8536] ? __fget_files+0x2a/0x420 [ 200.864917][ T8536] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.864936][ T8536] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 200.864957][ T8536] __se_sys_ioctl+0xfc/0x170 [ 200.864979][ T8536] do_syscall_64+0x166/0x520 [ 200.864998][ T8536] ? trace_irq_disable+0x3b/0x140 [ 200.865015][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.865035][ T8536] ? clear_bhb_loop+0x70/0xc0 [ 200.865057][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.865077][ T8536] RIP: 0033:0x7fb32979e159 [ 200.865095][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.865115][ T8536] RSP: 002b:00007fb32a6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.865137][ T8536] RAX: ffffffffffffffda RBX: 00007fb329a25fa0 RCX: 00007fb32979e159 [ 200.865151][ T8536] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 200.865172][ T8536] RBP: 00007fb32a6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.865184][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.865196][ T8536] R13: 00007fb329a26038 R14: 00007fb329a25fa0 R15: 00007ffd02c316f8 [ 200.865227][ T8536] [ 200.865263][ T8536] comedi comedi2: das16m1: I/O port conflict (0x140,16) [ 201.241076][ C0] syz_tun: tun_net_xmit 86 [ 201.290304][ T8541] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 201.345576][ T8541] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.480996][ C0] syz_tun: tun_net_xmit 86 [ 201.803171][ T32] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 202.259666][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.270482][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.285736][ T8574] 9p: Bad value for 'wfdno' [ 202.480786][ T5701] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 202.520964][ C0] syz_tun: tun_net_xmit 86 [ 202.630769][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 202.631534][ T5701] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 202.633310][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.666693][ T5701] usb 5-1: config 0 descriptor?? [ 202.892367][ T5701] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 202.938640][ T5701] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 202.938669][ T5701] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 203.052316][ T8577] syz_tun: tun_net_xmit 42 [ 203.162481][ T192] usb 2-1: USB disconnect, device number 53 [ 203.168467][ T192] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 203.641578][ T192] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 203.791426][ T192] usb 2-1: Using ep0 maxpacket: 16 [ 203.792096][ T192] usb 2-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 203.793304][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.793346][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.795805][ T192] usb 2-1: config 0 descriptor?? [ 203.920717][ T5057] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 204.013303][ T192] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 204.073007][ T5057] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.075732][ T5057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.113476][ T5057] usb 3-1: config 0 descriptor?? [ 204.120791][ C0] syz_tun: tun_net_xmit 42 [ 204.411815][ T10] usb 2-1: USB disconnect, device number 54 [ 204.533581][ T5057] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 204.536216][ T5057] [drm:udl_init] *ERROR* Selecting channel failed [ 204.602103][ T5057] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 204.602135][ T5057] [drm] Initialized udl on minor 1 [ 204.640753][ T5057] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.649663][ T5057] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 204.679974][ T5057] usb 3-1: USB disconnect, device number 49 [ 205.070842][ T5057] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 205.090982][ T8612] FAULT_INJECTION: forcing a failure. [ 205.090982][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.091013][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.1.879 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 205.091043][ T8612] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 205.091053][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.091065][ T8612] Call Trace: [ 205.091074][ T8612] [ 205.091082][ T8612] dump_stack_lvl+0xe8/0x150 [ 205.091109][ T8612] should_fail_ex+0x3eb/0x540 [ 205.091136][ T8612] _copy_to_user+0x31/0xb0 [ 205.091158][ T8612] simple_read_from_buffer+0xe1/0x170 [ 205.091186][ T8612] proc_fail_nth_read+0x1bb/0x230 [ 205.091211][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.091236][ T8612] ? rw_verify_area+0x24a/0x4c0 [ 205.091259][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.091280][ T8612] vfs_read+0x213/0xa80 [ 205.091305][ T8612] ? __pfx___mutex_lock+0x10/0x10 [ 205.091326][ T8612] ? __pfx_vfs_read+0x10/0x10 [ 205.091348][ T8612] ? __fget_files+0x2a/0x420 [ 205.091367][ T8612] ? __fget_files+0x3a2/0x420 [ 205.091385][ T8612] ? __fget_files+0x2a/0x420 [ 205.091421][ T8612] ? fdget+0x1ac/0x250 [ 205.091448][ T8612] ksys_read+0x150/0x270 [ 205.091470][ T8612] ? __pfx_ksys_read+0x10/0x10 [ 205.091489][ T8612] ? __pfx_v4l2_ioctl+0x10/0x10 [ 205.091520][ T8612] do_syscall_64+0x166/0x520 [ 205.091540][ T8612] ? trace_irq_disable+0x3b/0x140 [ 205.091558][ T8612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.091579][ T8612] ? clear_bhb_loop+0x70/0xc0 [ 205.091602][ T8612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.091623][ T8612] RIP: 0033:0x7f9ce3d5e98e [ 205.091642][ T8612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.091660][ T8612] RSP: 002b:00007f9ce4c00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.091682][ T8612] RAX: ffffffffffffffda RBX: 00007f9ce4c016c0 RCX: 00007f9ce3d5e98e [ 205.091704][ T8612] RDX: 000000000000000f RSI: 00007f9ce4c010a0 RDI: 0000000000000004 [ 205.091718][ T8612] RBP: 00007f9ce4c01090 R08: 0000000000000000 R09: 0000000000000000 [ 205.091731][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.091743][ T8612] R13: 00007f9ce4026038 R14: 00007f9ce4025fa0 R15: 00007ffc624c7408 [ 205.091776][ T8612] [ 205.160854][ C0] syz_tun: tun_net_xmit 42 [ 205.360606][ T5057] usb 3-1: Invalid ep0 maxpacket: 64 [ 205.491191][ T5057] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 205.622963][ T192] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 205.647343][ T5057] usb 3-1: Invalid ep0 maxpacket: 64 [ 205.647588][ T5057] usb usb3-port1: attempt power cycle [ 205.671460][ T8616] fuse: fd is not a fuse device [ 205.781273][ T192] usb 2-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=1.00 [ 205.782964][ T192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.783022][ T192] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 205.783066][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.935730][ T54] Bluetooth: hci0: connection err: -111 [ 205.936641][ T54] Bluetooth: hci0: Unable to find connection for big 0xff [ 205.980655][ T5057] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 206.001333][ T5057] usb 3-1: Invalid ep0 maxpacket: 64 [ 206.130567][ T5057] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 206.151655][ T5057] usb 3-1: Invalid ep0 maxpacket: 64 [ 206.153458][ T5057] usb usb3-port1: unable to enumerate USB device [ 206.206082][ T192] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 206.206098][ T192] dvb_ttusb_budget: ttusb_init_controller: error [ 206.206110][ T192] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 206.286608][ T192] DVB: Unable to find symbol stv0299_attach() [ 206.334587][ T192] DVB: Unable to find symbol tda8083_attach() [ 206.334606][ T192] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 206.520953][ C0] syz_tun: tun_net_xmit 86 [ 206.646287][ T5773] usb 2-1: USB disconnect, device number 55 [ 207.263069][ T192] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 207.392127][ T192] usb 3-1: device descriptor read/64, error -71 [ 207.560611][ C0] syz_tun: tun_net_xmit 86 [ 207.630602][ T192] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 207.760737][ T192] usb 3-1: device descriptor read/64, error -71 [ 207.852015][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 207.871915][ T192] usb usb3-port1: attempt power cycle [ 207.990845][ T10] usb 2-1: device descriptor read/64, error -71 [ 208.213405][ T192] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 208.230871][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 208.242734][ T192] usb 3-1: device descriptor read/8, error -71 [ 208.380527][ T10] usb 2-1: device descriptor read/64, error -71 [ 208.480413][ T192] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 208.498306][ T10] usb usb2-port1: attempt power cycle [ 208.506449][ T192] usb 3-1: device descriptor read/8, error -71 [ 208.600622][ C0] syz_tun: tun_net_xmit 86 [ 208.615820][ T192] usb usb3-port1: unable to enumerate USB device [ 208.830731][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 208.852728][ T10] usb 2-1: device descriptor read/8, error -71 [ 209.090511][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 209.111578][ T10] usb 2-1: device descriptor read/8, error -71 [ 209.220676][ T10] usb usb2-port1: unable to enumerate USB device [ 210.430407][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 210.594431][ T10] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 210.609871][ T10] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 210.609895][ T10] usb 3-1: config 1 has no interface number 0 [ 210.629197][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.629222][ T10] usb 3-1: Product: syz [ 210.629237][ T10] usb 3-1: Manufacturer: syz [ 210.629253][ T10] usb 3-1: SerialNumber: syz [ 210.673424][ T10] usb 3-1: 3:1 : does not exist [ 210.673445][ T10] usb 3-1: 3:2 : does not exist [ 210.927058][ T8703] openvswitch: netlink: Flow key attribute not present in set flow. [ 211.099158][ T8707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 211.121724][ T8707] FAULT_INJECTION: forcing a failure. [ 211.121724][ T8707] name failslab, interval 1, probability 0, space 0, times 0 [ 211.121756][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.1.914 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 211.121787][ T8707] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 211.121796][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.121810][ T8707] Call Trace: [ 211.121818][ T8707] [ 211.121834][ T8707] dump_stack_lvl+0xe8/0x150 [ 211.121862][ T8707] should_fail_ex+0x3eb/0x540 [ 211.121889][ T8707] should_failslab+0xa8/0x100 [ 211.121911][ T8707] ? __pfx_fuse_fill_super+0x10/0x10 [ 211.121934][ T8707] __kmalloc_cache_noprof+0x9e/0x600 [ 211.121957][ T8707] ? sget_fc+0x78f/0x1a60 [ 211.121975][ T8707] ? sget_fc+0x78f/0x1a60 [ 211.122000][ T8707] ? __pfx_fuse_fill_super+0x10/0x10 [ 211.122023][ T8707] sget_fc+0x78f/0x1a60 [ 211.122053][ T8707] ? __pfx_set_anon_super_fc+0x10/0x10 [ 211.122076][ T8707] ? __pfx_sget_fc+0x10/0x10 [ 211.122103][ T8707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.122128][ T8707] ? __pfx_fuse_fill_super+0x10/0x10 [ 211.122150][ T8707] get_tree_nodev+0x2a/0x150 [ 211.122173][ T8707] fuse_get_tree+0x29d/0x3b0 [ 211.122197][ T8707] vfs_get_tree+0x92/0x2a0 [ 211.122221][ T8707] do_new_mount+0x319/0xdc0 [ 211.122248][ T8707] ? __pfx_do_new_mount+0x10/0x10 [ 211.122272][ T8707] ? ns_capable+0x84/0xe0 [ 211.122294][ T8707] ? path_mount+0x647/0x1050 [ 211.122318][ T8707] ? user_path_at+0xd4/0x160 [ 211.122347][ T8707] __se_sys_mount+0x31d/0x420 [ 211.122384][ T8707] ? __pfx___se_sys_mount+0x10/0x10 [ 211.122409][ T8707] ? __x64_sys_mount+0x20/0xc0 [ 211.122431][ T8707] do_syscall_64+0x166/0x520 [ 211.122450][ T8707] ? trace_irq_disable+0x3b/0x140 [ 211.122468][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.122489][ T8707] ? clear_bhb_loop+0x70/0xc0 [ 211.122511][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.122531][ T8707] RIP: 0033:0x7f9ce3d9e159 [ 211.122550][ T8707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.122568][ T8707] RSP: 002b:00007f9ce4c01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.122591][ T8707] RAX: ffffffffffffffda RBX: 00007f9ce4025fa0 RCX: 00007f9ce3d9e159 [ 211.122607][ T8707] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 211.122621][ T8707] RBP: 00007f9ce3e3506b R08: 00002000000002c0 R09: 0000000000000000 [ 211.122635][ T8707] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 211.122647][ T8707] R13: 00007f9ce4026038 R14: 00007f9ce4025fa0 R15: 00007ffc624c7408 [ 211.122678][ T8707] [ 211.444357][ T8712] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 211.672460][ T8718] syzkaller1: entered promiscuous mode [ 211.672484][ T8718] syzkaller1: entered allmulticast mode [ 211.896668][ T8727] FAULT_INJECTION: forcing a failure. [ 211.896668][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 211.896709][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.1.922 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 211.896739][ T8727] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 211.896749][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.896761][ T8727] Call Trace: [ 211.896769][ T8727] [ 211.896777][ T8727] dump_stack_lvl+0xe8/0x150 [ 211.896810][ T8727] should_fail_ex+0x3eb/0x540 [ 211.896835][ T8727] should_failslab+0xa8/0x100 [ 211.896855][ T8727] ? alloc_empty_file+0x5b/0x1d0 [ 211.896875][ T8727] kmem_cache_alloc_noprof+0x9c/0x600 [ 211.896896][ T8727] ? stack_depot_save_flags+0x33/0x7f0 [ 211.896915][ T8727] ? alloc_empty_file+0x5b/0x1d0 [ 211.896934][ T8727] ? kmem_cache_alloc_noprof+0x151/0x600 [ 211.896957][ T8727] alloc_empty_file+0x5b/0x1d0 [ 211.896977][ T8727] path_openat+0x9d/0x1da0 [ 211.897011][ T8727] do_file_open+0x23e/0x4a0 [ 211.897034][ T8727] ? __pfx_do_file_open+0x10/0x10 [ 211.897073][ T8727] ? _raw_spin_unlock+0x28/0x50 [ 211.897092][ T8727] ? alloc_fd+0x6af/0x760 [ 211.897120][ T8727] do_sys_openat2+0x115/0x200 [ 211.897139][ T8727] ? __se_sys_futex+0x3a8/0x450 [ 211.897160][ T8727] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.897180][ T8727] ? ksys_write+0x242/0x270 [ 211.897199][ T8727] ? __pfx___se_sys_futex+0x10/0x10 [ 211.897219][ T8727] ? __pfx_ksys_write+0x10/0x10 [ 211.897241][ T8727] __x64_sys_openat+0x138/0x170 [ 211.897264][ T8727] do_syscall_64+0x166/0x520 [ 211.897283][ T8727] ? trace_irq_disable+0x3b/0x140 [ 211.897300][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.897320][ T8727] ? clear_bhb_loop+0x70/0xc0 [ 211.897342][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.897362][ T8727] RIP: 0033:0x7f9ce3d5e98e [ 211.897382][ T8727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.897400][ T8727] RSP: 002b:00007f9ce4c00f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.897422][ T8727] RAX: ffffffffffffffda RBX: 00007f9ce4c016c0 RCX: 00007f9ce3d5e98e [ 211.897438][ T8727] RDX: 0000000000000000 RSI: 00007f9ce3e347a6 RDI: ffffffffffffff9c [ 211.897453][ T8727] RBP: 00007f9ce3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 211.897466][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.897478][ T8727] R13: 00007f9ce4026038 R14: 00007f9ce4025fa0 R15: 00007ffc624c7408 [ 211.897507][ T8727] [ 212.297754][ T8732] __nla_validate_parse: 125 callbacks suppressed [ 212.297838][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 212.505924][ T54] Bluetooth: hci0: ISO packet for unknown connection handle 201 [ 212.570256][ T5057] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 212.664850][ T8734] could not allocate digest TFM handle sha384-arm64 [ 212.723254][ T5057] usb 2-1: New USB device found: idVendor=054c, idProduct=09cc, bcdDevice=0.00 [ 212.724828][ T5057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.724863][ T5057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.724888][ T5057] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.724932][ T5057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.739415][ T5057] usb 2-1: config 0 descriptor?? [ 213.112997][ T192] usb 3-1: USB disconnect, device number 58 [ 213.195721][ T5057] hid_parser_main: 4 callbacks suppressed [ 213.195741][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.195770][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.195794][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.195817][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.195840][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.195864][ T5057] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 213.273820][ T5057] playstation 0003:054C:09CC.000D: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 213.278881][ T8741] dvmrp0: entered allmulticast mode [ 213.385443][ T5057] playstation 0003:054C:09CC.000D: Invalid reportID received, expected 18 got 93 [ 213.385471][ T5057] playstation 0003:054C:09CC.000D: Failed to retrieve DualShock4 pairing info: -22 [ 213.385521][ T5057] playstation 0003:054C:09CC.000D: Failed to get MAC address from DualShock4 [ 213.385537][ T5057] playstation 0003:054C:09CC.000D: Failed to create dualshock4. [ 213.427909][ T5057] playstation 0003:054C:09CC.000D: probe with driver playstation failed with error -22 [ 213.583834][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 213.614989][ T192] usb 2-1: USB disconnect, device number 60 [ 213.680164][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 213.880638][ C0] syz_tun: tun_net_xmit 86 [ 214.134573][ T8755] validate_nla: 56 callbacks suppressed [ 214.134593][ T8755] netlink: 'syz.3.931': attribute type 22 has an invalid length. [ 214.134608][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 214.692310][ T192] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 214.837085][ T8772] netlink: 128 bytes leftover after parsing attributes in process `syz.4.938'. [ 214.837111][ T8772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.865638][ T192] usb 2-1: Using ep0 maxpacket: 32 [ 214.871514][ T192] usb 2-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 214.882520][ T192] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 214.882543][ T192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.882562][ T192] usb 2-1: config 0 has no interface number 0 [ 214.882596][ T192] usb 2-1: config 0 interface 196 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.882621][ T192] usb 2-1: config 0 interface 196 has no altsetting 0 [ 214.928497][ C0] syz_tun: tun_net_xmit 86 [ 214.940225][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.940247][ T192] usb 2-1: Product: syz [ 214.940262][ T192] usb 2-1: Manufacturer: syz [ 214.940277][ T192] usb 2-1: SerialNumber: syz [ 214.947171][ T192] usb 2-1: config 0 descriptor?? [ 214.971706][ T5694] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 214.997578][ T192] ipheth 2-1:0.196: Unable to find alternate settings interface [ 215.006168][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 215.131960][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 215.136202][ T5694] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 215.151156][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.151230][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.151331][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.204792][ T5694] usb 3-1: config 0 descriptor?? [ 215.234878][ T5773] usb 2-1: USB disconnect, device number 61 [ 215.247593][ T5694] hub 3-1:0.0: USB hub found [ 215.426472][ T5694] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 215.670163][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.670610][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.703887][ T5694] usbhid 3-1:0.0: can't add hid device: -71 [ 215.703982][ T5694] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.752054][ T5694] usb 3-1: USB disconnect, device number 59 [ 215.960176][ C0] syz_tun: tun_net_xmit 86 [ 216.187661][ T8799] comedi comedi2: comedi_config --init_data is deprecated [ 217.049888][ T192] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 217.204764][ T192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.204821][ T192] usb 3-1: New USB device found: idVendor=0fe9, idProduct=db71, bcdDevice=b5.00 [ 217.205794][ T192] usb 3-1: config 100 has an invalid interface number: 40 but max is 0 [ 217.205817][ T192] usb 3-1: config 100 has no interface number 0 [ 217.205844][ T192] usb 3-1: config 100 interface 40 has no altsetting 0 [ 217.264985][ T192] usb 3-1: string descriptor 0 read error: -22 [ 217.265257][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.302220][ T192] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 217.302268][ T192] usb 3-1: setting power ON [ 217.302285][ T192] dvb-usb: bulk message failed: -22 (2/0) [ 217.335793][ T192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.349089][ T192] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 217.349139][ T192] usb 3-1: media controller created [ 217.379310][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.407948][ T192] cxusb: set interface failed [ 217.407965][ T192] dvb-usb: bulk message failed: -22 (1/0) [ 217.407983][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 217.408001][ T192] usb 3-1: bluebird_gpio_write failed. [ 217.408025][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 217.408041][ T192] usb 3-1: bluebird_gpio_write failed. [ 217.427082][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 217.427105][ T192] usb 3-1: bluebird_gpio_write failed. [ 217.427120][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 217.427135][ T192] usb 3-1: bluebird_gpio_write failed. [ 217.462578][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 217.462603][ T192] usb 3-1: bluebird_gpio_write failed. [ 217.462824][ T192] dvb-usb: bulk message failed: -22 (5/0) [ 217.462845][ T192] zl10353_read_register: readreg error (reg=127, ret==-121) [ 217.590759][ T192] DVB: Unable to find symbol mt352_attach() [ 217.590777][ T192] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 217.860176][ T192] rc_core: IR keymap rc-dvico-portable not found [ 217.860195][ T192] Registered IR keymap rc-empty [ 217.867332][ T192] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 217.896721][ T8837] FAULT_INJECTION: forcing a failure. [ 217.896721][ T8837] name failslab, interval 1, probability 0, space 0, times 0 [ 217.896756][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.1.953 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 217.896794][ T8837] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 217.896803][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.896830][ T8837] Call Trace: [ 217.896838][ T8837] [ 217.896846][ T8837] dump_stack_lvl+0xe8/0x150 [ 217.896874][ T8837] should_fail_ex+0x3eb/0x540 [ 217.896901][ T8837] should_failslab+0xa8/0x100 [ 217.896924][ T8837] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 217.896949][ T8837] ? __d_alloc+0x37/0x7f0 [ 217.896966][ T8837] ? __d_alloc+0x37/0x7f0 [ 217.896991][ T8837] __d_alloc+0x37/0x7f0 [ 217.897015][ T8837] d_alloc_pseudo+0x21/0xc0 [ 217.897036][ T8837] alloc_path_pseudo+0x107/0x220 [ 217.897061][ T8837] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 217.897083][ T8837] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.897121][ T8837] alloc_file_pseudo+0xa8/0x1e0 [ 217.897143][ T8837] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 217.897163][ T8837] ? _raw_spin_unlock+0x28/0x50 [ 217.897189][ T8837] sock_alloc_file+0xb8/0x2e0 [ 217.897208][ T8837] ? __sys_socket+0x12b/0x1b0 [ 217.897229][ T8837] __sys_socket+0x13f/0x1b0 [ 217.897259][ T8837] __x64_sys_socket+0x7a/0x90 [ 217.897279][ T8837] do_syscall_64+0x166/0x520 [ 217.897314][ T8837] ? trace_irq_disable+0x3b/0x140 [ 217.897333][ T8837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.897355][ T8837] ? clear_bhb_loop+0x70/0xc0 [ 217.897377][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.897399][ T8837] RIP: 0033:0x7f9ce3d9e159 [ 217.897418][ T8837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.897446][ T8837] RSP: 002b:00007f9ce4c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 217.897467][ T8837] RAX: ffffffffffffffda RBX: 00007f9ce4025fa0 RCX: 00007f9ce3d9e159 [ 217.897482][ T8837] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 217.897494][ T8837] RBP: 00007f9ce3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 217.897507][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.897519][ T8837] R13: 00007f9ce4026038 R14: 00007f9ce4025fa0 R15: 00007ffc624c7408 [ 217.897549][ T8837] [ 217.940973][ T192] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29 [ 218.158505][ T192] dvb-usb: schedule remote query interval to 100 msecs. [ 218.158531][ T192] usb 3-1: setting power OFF [ 218.158548][ T192] dvb-usb: bulk message failed: -22 (2/0) [ 218.158562][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 218.158578][ T192] usb 3-1: bluebird_gpio_write failed. [ 218.158589][ T192] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 218.199736][ T192] usb 3-1: USB disconnect, device number 60 [ 218.379675][ T192] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 218.571580][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 218.842704][ T192] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 218.998740][ T192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.998790][ T192] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 219.018267][ T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.018295][ T192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.044309][ T192] usb 3-1: string descriptor 0 read error: -22 [ 219.044427][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.085299][ T192] usb 3-1: selecting invalid altsetting 1 [ 219.086003][ T192] usb 3-1: unit 3 not found! [ 219.282192][ T192] usb 3-1: unit 0 not found! [ 219.393589][ T8863] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 219.423784][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.958'. [ 219.456953][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.958'. [ 219.546315][ T192] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.754822][ T8869] FAULT_INJECTION: forcing a failure. [ 219.754822][ T8869] name failslab, interval 1, probability 0, space 0, times 0 [ 219.754857][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.1.961 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 219.754887][ T8869] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 219.754896][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.754909][ T8869] Call Trace: [ 219.754917][ T8869] [ 219.754926][ T8869] dump_stack_lvl+0xe8/0x150 [ 219.754953][ T8869] should_fail_ex+0x3eb/0x540 [ 219.754980][ T8869] should_failslab+0xa8/0x100 [ 219.755004][ T8869] __kvmalloc_node_noprof+0x171/0x820 [ 219.755029][ T8869] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 219.755052][ T8869] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 219.755083][ T8869] __nf_hook_entries_try_shrink+0x34e/0x720 [ 219.755116][ T8869] __nf_unregister_net_hook+0x488/0x710 [ 219.755147][ T8869] nf_unregister_net_hook+0x9a/0xf0 [ 219.755170][ T8869] nf_tables_abort+0x6a8f/0x8bb0 [ 219.755212][ T8869] ? __pfx_nf_tables_abort+0x10/0x10 [ 219.755243][ T8869] ? kasan_quarantine_put+0xbb/0x1f0 [ 219.755271][ T8869] ? kfree+0x1c5/0x650 [ 219.755288][ T8869] ? nfnetlink_rcv+0x16fd/0x28c0 [ 219.755312][ T8869] nfnetlink_rcv+0x1f30/0x28c0 [ 219.755365][ T8869] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.755426][ T8869] ? skb_clone+0x246/0x3a0 [ 219.755459][ T8869] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.755480][ T8869] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.755506][ T8869] netlink_unicast+0x7bd/0x940 [ 219.755537][ T8869] netlink_sendmsg+0x7c3/0xae0 [ 219.755563][ T8869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.755591][ T8869] ? apparmor_socket_sendmsg+0x98/0x360 [ 219.755621][ T8869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.755641][ T8869] sock_sendmsg_nosec+0x14e/0x190 [ 219.755666][ T8869] ____sys_sendmsg+0x54e/0x850 [ 219.755692][ T8869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.755722][ T8869] ? import_iovec+0x73/0xa0 [ 219.755745][ T8869] ___sys_sendmsg+0x2a5/0x360 [ 219.755764][ T8869] ? __lock_acquire+0x747/0x2de0 [ 219.755789][ T8869] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.755814][ T8869] ? futex_wait+0x2a2/0x390 [ 219.755862][ T8869] ? __fget_files+0x3a2/0x420 [ 219.755881][ T8869] ? __fget_files+0x2a/0x420 [ 219.755909][ T8869] __x64_sys_sendmsg+0x1b1/0x290 [ 219.755934][ T8869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.755974][ T8869] do_syscall_64+0x166/0x520 [ 219.755994][ T8869] ? trace_irq_disable+0x3b/0x140 [ 219.756012][ T8869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.756033][ T8869] ? clear_bhb_loop+0x70/0xc0 [ 219.756055][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.756076][ T8869] RIP: 0033:0x7f9ce3d9e159 [ 219.756096][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.756114][ T8869] RSP: 002b:00007f9ce4c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.756136][ T8869] RAX: ffffffffffffffda RBX: 00007f9ce4025fa0 RCX: 00007f9ce3d9e159 [ 219.756151][ T8869] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 219.756164][ T8869] RBP: 00007f9ce3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 219.756177][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.756190][ T8869] R13: 00007f9ce4026038 R14: 00007f9ce4025fa0 R15: 00007ffc624c7408 [ 219.756222][ T8869] [ 220.456977][ T8876] 0x000000000000-0x000000010000 : "" [ 220.551619][ T8876] ftl_cs: FTL header not found. [ 220.673770][ T8880] PKCS8: Unsupported PKCS#8 version [ 220.674458][ T8880] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 220.950036][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.950852][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.317422][ T8901] netlink: 3 bytes leftover after parsing attributes in process `syz.1.967'. [ 222.001004][ T8922] jffs2: notice: (8922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 222.606335][ T8947] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 222.619717][ T33] audit: type=1326 audit(1700000084.835:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.2.976" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb32979e159 code=0x0 [ 223.597214][ T8952] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.597543][ T54] Bluetooth: hci3: Malformed LE Event: 0x1d [ 223.898951][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 224.338859][ T8970] jffs2: notice: (8970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.604737][ T8983] netlink: ct family unspecified [ 224.604776][ T8983] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.680388][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 224.836567][ T8990] /dev/nullb0: Can't lookup blockdev [ 224.910746][ T8994] Bluetooth: ISO socket layer initialized [ 224.913842][ T54] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 225.025733][ T8997] fuse: fd is not a fuse device [ 225.239474][ T32] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 225.369585][ T54] Bluetooth: hci0: Malformed LE Event: 0x1d [ 225.395679][ T32] usb 2-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 225.401329][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.401458][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 225.401535][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 225.401604][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 225.401703][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.488605][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 225.488636][ T32] usb 2-1: Product: syz [ 225.488652][ T32] usb 2-1: Manufacturer: syz [ 225.488668][ T32] usb 2-1: SerialNumber: syz [ 225.526883][ T32] usb 2-1: config 0 descriptor?? [ 225.562115][ T9006] jffs2: notice: (9006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.642067][ T8606] wlan1: Trigger new scan to find an IBSS to join [ 225.746166][ T32] radio-si470x 2-1:0.0: DeviceID=0xb122 ChipID=0x0000 [ 225.746215][ T32] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 225.948638][ T32] radio-si470x 2-1:0.0: software version 177, hardware version 34 [ 225.948674][ T32] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 226.149764][ T32] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 226.149827][ T32] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 226.150192][ T32] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 226.150525][ T32] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 226.203217][ T32] usb 2-1: USB disconnect, device number 62 [ 226.947660][ T9036] jffs2: notice: (9036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.130067][ T5693] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 227.270177][ T9046] fuse: fd is not a fuse device [ 227.284279][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 227.284967][ T5693] usb 2-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 227.286326][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 227.286355][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 227.286380][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 227.286404][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 227.286429][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 227.316107][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.316132][ T5693] usb 2-1: Product: syz [ 227.316147][ T5693] usb 2-1: Manufacturer: syz [ 227.316180][ T5693] usb 2-1: SerialNumber: syz [ 227.387395][ T5693] usb 2-1: config 0 descriptor?? [ 227.841860][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 227.841915][ T5693] input input30: Device does not respond to id packet M [ 227.844963][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 227.845012][ T5693] input input30: Device does not respond to id packet P [ 228.254739][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 228.254792][ T5693] input input30: Device does not respond to id packet B [ 228.255414][ T5693] input input30: Device does not respond to id packet N [ 228.457310][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 228.458037][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 228.458426][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 228.461335][ T5693] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 228.478648][ T5693] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 228.513865][ T5693] usb 2-1: USB disconnect, device number 63 [ 228.679799][ T8604] wlan1: Trigger new scan to find an IBSS to join [ 228.917511][ T9072] jffs2: notice: (9072) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.240820][ C0] syz_tun: tun_net_xmit 86 [ 229.287699][ T54] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 229.400932][ T9087] UBIFS error (pid: 9087): cannot open "ubi0_0", error -19 [ 229.402780][ T9087] UBIFS error (pid: 9087): cannot open "ubi0:0", error -19 [ 229.404148][ T9087] UBIFS error (pid: 9087): cannot open "ubi0", error -19 [ 229.501512][ T1008] IPVS: starting estimator thread 0... [ 229.506754][ T9093] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 229.589104][ T9094] IPVS: using max 34 ests per chain, 81600 per kthread [ 229.626516][ T9097] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 229.685698][ T9082] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.827889][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 229.881526][ C0] syz_tun: tun_net_xmit 86 [ 230.115417][ T9109] jffs2: notice: (9109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.289220][ C0] syz_tun: tun_net_xmit 86 [ 230.478171][ T9121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.489338][ T1008] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.489380][ T1008] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.489412][ T1008] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.489445][ T1008] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.572628][ T9121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.747463][ T9125] fuse: fd is not a fuse device [ 230.899144][ T5693] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 230.919248][ C0] syz_tun: tun_net_xmit 86 [ 231.052302][ T5693] usb 2-1: New USB device found: idVendor=0421, idProduct=1234, bcdDevice=1.00 [ 231.053246][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.053307][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.078230][ T5693] cdc_phonet 2-1:1.0: probe with driver cdc_phonet failed with error -22 [ 231.166681][ C0] syz_tun: tun_net_xmit 86 [ 231.270802][ T192] usb 2-1: USB disconnect, device number 64 [ 231.319270][ C0] syz_tun: tun_net_xmit 86 [ 231.641251][ T8604] wlan1: Trigger new scan to find an IBSS to join [ 231.959195][ C0] syz_tun: tun_net_xmit 86 [ 231.982353][ T9146] jffs2: notice: (9146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.135194][ T9151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.209385][ C0] syz_tun: tun_net_xmit 86 [ 232.213652][ T192] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 232.360299][ T192] usb 2-1: New USB device found: idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 232.361339][ T192] usb 2-1: config 254 has an invalid interface number: 94 but max is 0 [ 232.361365][ T192] usb 2-1: config 254 has no interface number 0 [ 232.361406][ T192] usb 2-1: config 254 interface 94 altsetting 16 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 232.361434][ T192] usb 2-1: config 254 interface 94 altsetting 16 bulk endpoint 0xC has invalid maxpacket 32 [ 232.361458][ T192] usb 2-1: config 254 interface 94 has no altsetting 0 [ 232.364039][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.364064][ T192] usb 2-1: Product: syz [ 232.364079][ T192] usb 2-1: Manufacturer: syz [ 232.364093][ T192] usb 2-1: SerialNumber: syz [ 232.394868][ T9147] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 232.551776][ T1022] wlan1: Creating new IBSS network, BSSID 9e:e2:90:78:bc:2c [ 232.686384][ T192] usb 2-1: USB disconnect, device number 65 [ 233.239418][ C0] syz_tun: tun_net_xmit 86 [ 233.409530][ T192] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 233.554147][ T9183] comedi comedi3: fl512: I/O base address not correctly aligned [ 233.562398][ T192] usb 2-1: Using ep0 maxpacket: 16 [ 233.566634][ T192] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 233.582950][ T192] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.582988][ T192] usb 2-1: config 0 has no interface number 0 [ 233.583027][ T192] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.583053][ T192] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.583075][ T192] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.583101][ T192] usb 2-1: config 0 interface 1 has no altsetting 0 [ 233.583134][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.603696][ T192] usb 2-1: config 0 descriptor?? [ 233.645369][ T8604] wlan1: Trigger new scan to find an IBSS to join [ 233.662272][ T192] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 233.872555][ T9189] syz_tun: tun_net_xmit 42 [ 233.984450][ T9190] fuse: Bad value for 'fd' [ 234.052927][ T192] elan 0003:04F3:074D.000E: failed to start in urb: -90 [ 234.235950][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1045'. [ 234.254943][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 234.455584][ T192] elan 0003:04F3:074D.000E: Set report error for parm 7: -71 [ 234.480597][ T192] elan 0003:04F3:074D.000E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 234.480630][ T192] elan 0003:04F3:074D.000E: Input device is not registered [ 234.542350][ T192] elan 0003:04F3:074D.000E: probe with driver elan failed with error -119 [ 234.560580][ T192] usb 2-1: USB disconnect, device number 66 [ 234.634444][ T9205] fido_id[9205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 234.919162][ C1] syz_tun: tun_net_xmit 42 [ 235.000742][ C0] syz_tun: tun_net_xmit 86 [ 235.001613][ C0] syz_tun: tun_net_xmit 86 [ 235.409119][ T192] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 235.559868][ T192] usb 2-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 235.560943][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 235.560969][ T192] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 235.560993][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 235.561015][ T192] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 235.561053][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.564722][ T192] usb 2-1: config 0 descriptor?? [ 235.776871][ T192] hdpvr 2-1:0.0: firmware version 0x12 dated 継򂧥訠綍D奮jvi0 [ 235.776871][ T192] 喢洃阷Y [ 235.959091][ C1] syz_tun: tun_net_xmit 42 [ 236.040206][ C0] syz_tun: tun_net_xmit 86 [ 236.040470][ C0] syz_tun: tun_net_xmit 86 [ 236.118649][ T9231] jffs2: notice: (9231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.279892][ C0] syz_tun: tun_net_xmit 86 [ 236.679908][ T8606] wlan1: Trigger new scan to find an IBSS to join [ 237.039239][ T5057] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.060319][ T5057] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.079276][ C0] syz_tun: tun_net_xmit 86 [ 237.079521][ C0] syz_tun: tun_net_xmit 86 [ 237.106658][ T5057] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 237.319342][ C0] syz_tun: tun_net_xmit 86 [ 237.322685][ T192] hdpvr 2-1:0.0: Could not setup controls [ 237.340591][ T192] hdpvr 2-1:0.0: registering videodev failed [ 237.347142][ T5057] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.371749][ T192] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 237.375363][ T192] usb 2-1: USB disconnect, device number 67 [ 237.402025][ T5057] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 237.591299][ T8606] wlan1: Creating new IBSS network, BSSID 4e:76:c7:94:aa:45 [ 237.819760][ T9260] ceph: No mds server is up or the cluster is laggy [ 237.823917][ T9257] ceph: No mds server is up or the cluster is laggy [ 237.911472][ T192] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.917521][ T192] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 237.990189][ T5057] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 238.139863][ T5057] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 238.142971][ T5057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.142996][ T5057] usb 2-1: Product: syz [ 238.143011][ T5057] usb 2-1: Manufacturer: syz [ 238.143025][ T5057] usb 2-1: SerialNumber: syz [ 238.146360][ T5057] usb 2-1: config 0 descriptor?? [ 238.189610][ T5057] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 238.193309][ T5057] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.226142][ T5057] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 238.226193][ T5057] usb 2-1: media controller created [ 238.267440][ T5057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.359305][ C0] syz_tun: tun_net_xmit 86 [ 238.413206][ T5057] DVB: Unable to find symbol mt352_attach() [ 238.497814][ T5057] DVB: Unable to find symbol nxt6000_attach() [ 238.497832][ T5057] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 238.522843][ T5057] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 238.525502][ T5057] dvb-usb: schedule remote query interval to 1000 msecs. [ 238.525522][ T5057] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 238.525539][ T5057] dvb-usb: bulk message failed: -22 (7/0) [ 238.525555][ T5057] dvb-usb: bulk message failed: -22 (7/0) [ 238.600584][ T9287] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 238.600584][ T9287] program syz.4.1079 not setting count and/or reply_len properly [ 238.696061][ T9286] echo interval is out of bounds [ 238.696061][ T9286] [ 238.696282][ T9286] CIFS: VFS: echo interval is out of bounds [ 238.806787][ T5057] usb 2-1: USB disconnect, device number 68 [ 238.840445][ C0] syz_tun: tun_net_xmit 86 [ 238.928109][ T5057] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 239.241596][ T9294] comedi comedi3: fl512: I/O base address not correctly aligned [ 239.508347][ T9301] overlayfs: failed to clone upperpath [ 239.762831][ T9306] sg_write: data in/out 306688/136 bytes for SCSI command 0x0-- guessing data in; [ 239.762831][ T9306] program syz.4.1086 not setting count and/or reply_len properly [ 239.889569][ C0] syz_tun: tun_net_xmit 86 [ 239.908129][ T9314] kvm: user requested TSC rate below hardware speed [ 239.956659][ T9319] comedi comedi3: fl512: I/O base address not correctly aligned [ 240.068691][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 240.373331][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.376332][ T9329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.409157][ T54] Bluetooth: hci1: unexpected event for opcode 0x200a [ 240.412832][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.569183][ T5693] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 240.719026][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 240.719705][ T5693] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 240.745824][ T5693] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.745856][ T5693] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.773329][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.773353][ T5693] usb 2-1: Product: syz [ 240.773368][ T5693] usb 2-1: Manufacturer: syz [ 240.773383][ T5693] usb 2-1: SerialNumber: syz [ 240.776965][ T5693] usb 2-1: config 0 descriptor?? [ 240.844665][ T9343] coredump: 1139(syz.3.1097): Core dump to core aborted: cannot preserve file permissions [ 240.919235][ C0] syz_tun: tun_net_xmit 86 [ 240.920506][ T9348] coredump: 1144(syz.3.1097): Core dump to core aborted: cannot preserve file permissions [ 241.054723][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 241.090147][ T5693] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 241.128256][ T5693] imon:send_packet: packet tx failed (-71) [ 241.140027][ T5693] imon 2-1:0.0: panel buttons/knobs setup failed [ 241.220984][ T5693] rc_core: IR keymap rc-imon-pad not found [ 241.221000][ T5693] Registered IR keymap rc-empty [ 241.221882][ T5693] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 241.221900][ T5693] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 241.225852][ T5693] imon:send_packet: packet tx failed (-71) [ 241.266204][ T5693] imon 2-1:0.0: remote input dev register failed [ 241.267281][ T5693] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 241.328190][ T5693] imon 2-1:0.0: unable to initialize intf0, err 0 [ 241.338938][ T5693] usb 2-1: USB disconnect, device number 69 [ 241.342894][ T9356] fuse: Bad value for 'fd' [ 241.649055][ T5693] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 241.803182][ T5693] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 241.804193][ T5693] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 241.804223][ T5693] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 241.804250][ T5693] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.806561][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.806583][ T5693] usb 2-1: Product: syz [ 241.806597][ T5693] usb 2-1: Manufacturer: syz [ 241.806611][ T5693] usb 2-1: SerialNumber: syz [ 241.830537][ T5693] usb 2-1: config 0 descriptor?? [ 241.860931][ T9327] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 242.081138][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 242.100268][ T5693] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 242.337941][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 242.401639][ T5693] rc_core: IR keymap rc-imon-pad not found [ 242.401656][ T5693] Registered IR keymap rc-empty [ 242.401725][ T5693] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 242.401743][ T5693] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 242.512191][ T5693] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 242.515813][ T5693] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 242.543746][ T5693] imon 2-1:0.0: iMON device (15c2:0045) on usb<2:70> initialized [ 242.720716][ T5694] usb 2-1: USB disconnect, device number 70 [ 243.227192][ T9383] jffs2: notice: (9383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 243.761436][ T9415] comedi comedi3: fl512: I/O base address not correctly aligned [ 243.864671][ T9422] overlay: Unknown parameter 'subj_user' [ 243.866546][ T9422] FAULT_INJECTION: forcing a failure. [ 243.866546][ T9422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.866578][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.1.1119 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 243.866625][ T9422] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 243.866634][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.866648][ T9422] Call Trace: [ 243.866656][ T9422] [ 243.866665][ T9422] dump_stack_lvl+0xe8/0x150 [ 243.866693][ T9422] should_fail_ex+0x3eb/0x540 [ 243.866721][ T9422] strncpy_from_user+0x36/0x2c0 [ 243.866747][ T9422] do_getname+0x77/0x250 [ 243.866771][ T9422] do_sys_openat2+0xce/0x200 [ 243.866795][ T9422] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.866822][ T9422] ? do_user_addr_fault+0xd3f/0x1480 [ 243.866849][ T9422] __x64_sys_openat+0x138/0x170 [ 243.866874][ T9422] do_syscall_64+0x166/0x520 [ 243.866895][ T9422] ? trace_irq_disable+0x3b/0x140 [ 243.866914][ T9422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.866937][ T9422] ? clear_bhb_loop+0x70/0xc0 [ 243.866961][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.866983][ T9422] RIP: 0033:0x7f9ce3d5e98e [ 243.867003][ T9422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.867022][ T9422] RSP: 002b:00007f9ce4bfeea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.867045][ T9422] RAX: ffffffffffffffda RBX: 00007f9ce4c016c0 RCX: 00007f9ce3d5e98e [ 243.867061][ T9422] RDX: 0000000000000002 RSI: 00007f9ce3e3440a RDI: ffffffffffffff9c [ 243.867076][ T9422] RBP: 00007f9ce3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 243.867090][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 243.867104][ T9422] R13: 0000200000000180 R14: 0000000000000005 R15: 00007ffc624c7408 [ 243.867135][ T9422] [ 244.170729][ T33] audit: type=1326 audit(2000000014.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1119" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce3d9e159 code=0x0 [ 244.242009][ T9427] syzkaller0: entered promiscuous mode [ 244.242034][ T9427] syzkaller0: entered allmulticast mode [ 244.553378][ T9427] syzkaller0: left promiscuous mode [ 244.600433][ C0] syz_tun: tun_net_xmit 86 [ 245.020010][ T5057] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 245.149060][ T5057] usb 2-1: device descriptor read/64, error -71 [ 245.394456][ T5057] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 245.524808][ T5057] usb 2-1: device descriptor read/64, error -71 [ 245.637921][ T5057] usb usb2-port1: attempt power cycle [ 245.639402][ C0] syz_tun: tun_net_xmit 86 [ 245.991176][ T5057] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 246.017032][ T5057] usb 2-1: device descriptor read/8, error -71 [ 246.249968][ T5057] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 246.283122][ T5057] usb 2-1: device descriptor read/8, error -71 [ 246.392282][ T5057] usb usb2-port1: unable to enumerate USB device [ 246.682118][ C0] syz_tun: tun_net_xmit 86 [ 247.034775][ T9433] jffs2: notice: (9433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.359835][ T9440] kvm: user requested TSC rate below hardware speed [ 247.361075][ T9440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 247.622021][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 247.767359][ T9460] jffs2: notice: (9460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.339976][ T5057] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 248.373352][ T9475] fuse: Bad value for 'fd' [ 248.494950][ T5057] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 248.495940][ T5057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.495986][ T5057] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.511106][ T5057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.511129][ T5057] usb 2-1: Product: syz [ 248.511142][ T5057] usb 2-1: Manufacturer: syz [ 248.511157][ T5057] usb 2-1: SerialNumber: syz [ 248.602431][ T54] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 248.696632][ T9482] bridge0: port 3(veth0_to_bridge) entered blocking state [ 248.697135][ T9482] bridge0: port 3(veth0_to_bridge) entered disabled state [ 248.697400][ T9482] veth0_to_bridge: entered allmulticast mode [ 248.724748][ T9482] veth0_to_bridge: entered promiscuous mode [ 248.726763][ T9482] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.747313][ T9482] bridge0: port 3(veth0_to_bridge) entered blocking state [ 248.747605][ T9482] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 250.046505][ T5693] usb 2-1: USB disconnect, device number 75 [ 250.654650][ T9498] openvswitch: netlink: IP tunnel dst address not specified [ 250.724119][ T9500] jffs2: notice: (9500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.790313][ T54] Bluetooth: hci2: unexpected event for opcode 0x203d [ 250.793631][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 251.379104][ T5693] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 251.424905][ T9525] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 251.424941][ T9525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.511453][ T54] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 251.529059][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 251.529947][ T5693] usb 2-1: New USB device found: idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 251.531130][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.531159][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.531182][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.531223][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.534502][ T5693] usb 2-1: config 0 descriptor?? [ 251.941529][ T5693] hid (null): unknown global tag 0xe [ 251.948358][ T5693] shield 0003:0955:7214.000F: unknown global tag 0xe [ 251.948379][ T5693] shield 0003:0955:7214.000F: item 0 0 1 14 parsing failed [ 251.972102][ T5693] shield 0003:0955:7214.000F: Parse failed [ 251.972231][ T5693] shield 0003:0955:7214.000F: probe with driver shield failed with error -22 [ 252.149179][ T5693] usb 2-1: USB disconnect, device number 76 [ 252.188613][ T9536] jffs2: notice: (9536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.468450][ T9544] tipc: Can't bind to reserved service type 1 [ 252.784750][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.787944][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.000364][ T5693] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 253.127553][ T9564] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 253.127577][ T9564] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 253.160091][ T5693] usb 2-1: New USB device found: idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 253.161352][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.163963][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.163988][ T5693] usb 2-1: Product: syz [ 253.164002][ T5693] usb 2-1: Manufacturer: syz [ 253.164017][ T5693] usb 2-1: SerialNumber: syz [ 253.167096][ T5693] usb 2-1: config 0 descriptor?? [ 253.222421][ T5693] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 253.223602][ T5693] sonixb 2-1:0.0: Error reading register 00: -32 [ 254.576947][ T9594] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 255.486236][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.486458][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.824905][ T192] usb 2-1: USB disconnect, device number 77 [ 257.116072][ T9651] jffs2: notice: (9651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.617856][ T9672] syz_tun: tun_net_xmit 42 [ 257.683650][ T9671] netlink: 'syz.3.1206': attribute type 12 has an invalid length. [ 257.776779][ T9680] FAULT_INJECTION: forcing a failure. [ 257.776779][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 257.776810][ T9680] CPU: 1 UID: 0 PID: 9680 Comm: syz.1.1209 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 257.776846][ T9680] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 257.776854][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.776866][ T9680] Call Trace: [ 257.776874][ T9680] [ 257.776882][ T9680] dump_stack_lvl+0xe8/0x150 [ 257.776907][ T9680] should_fail_ex+0x3eb/0x540 [ 257.776931][ T9680] should_failslab+0xa8/0x100 [ 257.776951][ T9680] __kvmalloc_node_noprof+0x171/0x820 [ 257.776972][ T9680] ? __kvmalloc_node_noprof+0x340/0x820 [ 257.776990][ T9680] ? io_alloc_cache_init+0x42/0x140 [ 257.777007][ T9680] ? io_alloc_cache_init+0x42/0x140 [ 257.777030][ T9680] io_alloc_cache_init+0x42/0x140 [ 257.777050][ T9680] io_ring_ctx_alloc+0x57d/0xb80 [ 257.777076][ T9680] io_uring_create+0x50/0x980 [ 257.777097][ T9680] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 257.777115][ T9680] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.777136][ T9680] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 257.777169][ T9680] ? __pfx_ksys_write+0x10/0x10 [ 257.777197][ T9680] do_syscall_64+0x166/0x520 [ 257.777215][ T9680] ? trace_irq_disable+0x3b/0x140 [ 257.777231][ T9680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.777250][ T9680] ? clear_bhb_loop+0x70/0xc0 [ 257.777269][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.777288][ T9680] RIP: 0033:0x7f9ce3d9e159 [ 257.777306][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.777322][ T9680] RSP: 002b:00007f9ce4c00ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 257.777342][ T9680] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f9ce3d9e159 [ 257.777355][ T9680] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000e26 [ 257.777367][ T9680] RBP: 0000000000000000 R08: 0000200000003040 R09: 0000000000000000 [ 257.777379][ T9680] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 257.777390][ T9680] R13: 0000000000000090 R14: 00007f9ce4c00fd8 R15: 0000000000000000 [ 257.777417][ T9680] [ 258.409651][ T9694] jffs2: notice: (9694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.679072][ C1] syz_tun: tun_net_xmit 42 [ 258.729690][ T9709] overlayfs: failed to clone upperpath [ 259.513611][ T9731] jffs2: notice: (9731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 259.719060][ C1] syz_tun: tun_net_xmit 42 [ 259.724755][ T9741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1227'. [ 259.902979][ T9748] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1231'. [ 259.960870][ C0] syz_tun: tun_net_xmit 86 [ 260.327858][ T9759] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 260.327883][ T9759] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1233'. [ 260.693747][ T9771] jffs2: notice: (9771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 260.999247][ C0] syz_tun: tun_net_xmit 86 [ 261.241091][ C0] syz_tun: tun_net_xmit 86 [ 261.954215][ T9806] jffs2: notice: (9806) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.039196][ C0] syz_tun: tun_net_xmit 86 [ 262.279287][ C0] syz_tun: tun_net_xmit 86 [ 262.524120][ C0] syz_tun: tun_net_xmit 86 [ 262.700087][ T9820] fuse: fd is not a fuse device [ 262.705855][ T9820] fuse: fd is not a fuse device [ 263.275105][ T9820] orangefs_mount: mount request failed with -4 [ 263.319491][ C0] syz_tun: tun_net_xmit 86 [ 263.559454][ C0] syz_tun: tun_net_xmit 86 [ 264.440005][ C0] syz_tun: tun_net_xmit 86 [ 264.599341][ C0] syz_tun: tun_net_xmit 86 [ 265.086463][ T1008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.479243][ C0] syz_tun: tun_net_xmit 86 [ 265.753596][ T5701] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 265.753659][ T5701] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 265.793120][ T5701] usb 5-1: USB disconnect, device number 42 [ 266.519169][ C0] syz_tun: tun_net_xmit 86 [ 266.855161][ T9929] Invalid ELF header len 2 [ 267.008525][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1293'. [ 267.319742][ C0] syz_tun: tun_net_xmit 86 [ 267.488890][ T9957] fuse: fd is not a fuse device [ 267.639805][ C0] syz_tun: tun_net_xmit 86 [ 267.706425][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 268.254338][ T9977] fuse: fd is not a fuse device [ 268.256988][ T54] Bluetooth: hci0: Malformed LE Event: 0x1d [ 268.359255][ C0] syz_tun: tun_net_xmit 86 [ 268.679205][ C0] syz_tun: tun_net_xmit 86 [ 269.399245][ C0] syz_tun: tun_net_xmit 86 [ 269.677891][T10014] fuse: fd is not a fuse device [ 269.686344][ T54] Bluetooth: hci3: Malformed LE Event: 0x1d [ 269.729203][ C0] syz_tun: tun_net_xmit 86 [ 270.490568][T10029] jffs2: notice: (10029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.156499][T10042] fuse: fd is not a fuse device [ 271.157507][ T54] Bluetooth: hci1: Malformed LE Event: 0x1d [ 273.136642][T10085] futex_wake_op: syz.3.1340 tries to shift op by -1; fix this program [ 273.185243][T10085] fuse: fd is not a fuse device [ 273.342230][T10087] raw_sendmsg: syz.2.1341 forgot to set AF_INET. Fix it! [ 273.474994][T10090] fuse: fd is not a fuse device [ 273.484559][ T54] Bluetooth: hci2: Malformed LE Event: 0x1d [ 274.679631][ C0] syz_tun: tun_net_xmit 86 [ 275.184816][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1352'. [ 275.228006][T10124] fuse: fd is not a fuse device [ 275.228522][ T54] Bluetooth: hci1: Malformed LE Event: 0x1d [ 275.719264][ C0] syz_tun: tun_net_xmit 86 [ 276.486606][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 276.616006][ T54] Bluetooth: hci2: Malformed LE Event: 0x1d [ 276.759262][ C0] syz_tun: tun_net_xmit 86 [ 277.095880][T10182] netlink: 'syz.1.1371': attribute type 12 has an invalid length. [ 277.570001][T10205] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:4 [ 277.576306][T10205] fuse: Unknown parameter 'fd軏2#X婊.>!憬 丮*隔' [ 277.949720][ T54] Bluetooth: hci3: Malformed LE Event: 0x1d [ 278.248849][T10217] netlink: 'syz.4.1383': attribute type 75 has an invalid length. [ 279.159915][ C0] syz_tun: tun_net_xmit 86 [ 279.793487][ T54] Bluetooth: hci1: Malformed LE Event: 0x1d [ 280.199358][ C0] syz_tun: tun_net_xmit 86 [ 280.655437][T10260] openvswitch: netlink: IP tunnel dst address not specified [ 280.865731][ T54] Bluetooth: hci0: Malformed LE Event: 0x1d [ 281.030700][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1407'. [ 281.032237][T10275] tipc: Started in network mode [ 281.032276][T10275] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 281.032846][T10275] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 281.033099][T10275] tipc: Enabled bearer , priority 10 [ 281.239266][ C0] syz_tun: tun_net_xmit 86 [ 281.681044][T10303] jffs2: notice: (10303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.030636][ T5701] tipc: Node number set to 1 [ 282.232003][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 282.232124][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 282.288900][ T54] Bluetooth: hci0: Malformed LE Event: 0x1d [ 282.302677][T10321] fuse: fd is not a fuse device [ 282.347147][T10321] ecryptfs_get_tree: kern_path() failed [ 282.358441][T10321] Reading sb failed; rc = [-2] [ 282.997247][T10338] tipc: Started in network mode [ 282.997278][T10338] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 282.998083][T10338] tipc: Enabled bearer , priority 10 [ 283.036075][T10338] netlink: 'syz.2.1429': attribute type 3 has an invalid length. [ 283.036095][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 284.130585][ T5701] tipc: Node number set to 4269801488 [ 284.782099][ T54] Bluetooth: hci2: Malformed LE Event: 0x1d [ 284.818885][T10390] fuse: fd is not a fuse device [ 285.423732][T10405] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 285.507617][T10410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1444'. [ 286.091499][T10425] ceph: Unknown parameter 'port' [ 286.317797][ T54] Bluetooth: hci1: Malformed LE Event: 0x1d [ 287.131513][T10453] tipc: Enabling of bearer rejected, failed to enable media [ 287.479756][ C0] syz_tun: tun_net_xmit 86 [ 287.629151][ T54] Bluetooth: hci1: Unable to find connection for big 0x00 [ 288.246900][T10484] jffs2: notice: (10484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.519194][ C0] syz_tun: tun_net_xmit 86 [ 289.250481][ T54] Bluetooth: hci0: Unable to find connection for big 0x00 [ 289.559181][ C0] syz_tun: tun_net_xmit 86 [ 289.821889][T10528] jffs2: notice: (10528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.087592][ T54] Bluetooth: hci3: Unable to find connection for big 0x00 [ 291.319662][ C0] syz_tun: tun_net_xmit 86 [ 291.864677][T10575] jffs2: notice: (10575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.940884][T10579] jffs2: notice: (10579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.235621][ T54] Bluetooth: hci2: Unable to find connection for big 0x00 [ 292.297144][T10591] jffs2: notice: (10591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.360819][ C0] syz_tun: tun_net_xmit 86 [ 292.602330][ C0] syz_tun: tun_net_xmit 86 [ 293.088780][T10620] CIFS: Unable to determine destination address [ 293.147272][T10629] jffs2: notice: (10629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.409198][ C0] syz_tun: tun_net_xmit 86 [ 293.571820][ T54] Bluetooth: hci3: Unable to find connection for big 0x00 [ 293.639237][ C0] syz_tun: tun_net_xmit 86 [ 293.865161][T10647] netlink: ct_mark mask cannot be 0 [ 293.865184][T10647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.963003][T10649] netlink: ct_mark mask cannot be 0 [ 293.963035][T10649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.074417][T10651] netlink: Setting conntrack mark requires 'commit' flag. [ 294.074452][T10651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.188168][T10653] fuse: fd is not a fuse device [ 294.578727][T10660] fuse: fd is not a fuse device [ 294.679387][ C0] syz_tun: tun_net_xmit 86 [ 295.034828][T10664] IPv4: Oversized IP packet from 127.202.26.0 [ 295.347605][ T54] Bluetooth: hci2: Unable to find connection for big 0x00 [ 295.405316][T10677] netlink: 'syz.4.1529': attribute type 23 has an invalid length. [ 295.498054][T10680] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 295.542677][T10684] Invalid ELF header type: 3 != 1 [ 295.766051][T10692] netlink: Setting conntrack mark requires 'commit' flag. [ 295.766097][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.031704][T10703] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1538'. [ 296.391789][T10713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1542'. [ 296.439677][ C0] syz_tun: tun_net_xmit 86 [ 296.482699][T10717] jffs2: notice: (10717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 297.066400][ T54] Bluetooth: hci1: Unable to find connection for big 0x00 [ 297.082662][ T140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.479166][ C0] syz_tun: tun_net_xmit 86 [ 297.521697][T10744] overlayfs: failed to clone upperpath [ 297.719980][ C0] syz_tun: tun_net_xmit 86 [ 298.384178][T10759] jffs2: notice: (10759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 298.519268][ C0] syz_tun: tun_net_xmit 86 [ 298.631285][ T54] Bluetooth: hci1: Unable to find connection for big 0x00 [ 298.759290][ C0] syz_tun: tun_net_xmit 86 [ 298.808085][T10778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1567'. [ 298.808190][T10778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1567'. [ 298.973451][T10788] jffs2: notice: (10788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 299.351736][T10798] tipc: Started in network mode [ 299.351752][T10798] tipc: Node identity 4, cluster identity 4711 [ 299.351761][T10798] tipc: Node number set to 4 [ 299.639740][ C0] syz_tun: tun_net_xmit 86 [ 299.809178][ C0] syz_tun: tun_net_xmit 86 [ 299.881078][T10828] netlink: 'syz.4.1582': attribute type 27 has an invalid length. [ 299.901538][T10826] jffs2: notice: (10826) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.184910][ T54] Bluetooth: hci1: Unable to find connection for big 0x00 [ 300.679587][ C0] syz_tun: tun_net_xmit 86 [ 300.854329][T10850] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1588'. [ 300.854357][T10850] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 301.348591][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 301.468316][T10872] [ 301.470700][T10872] ====================================================== [ 301.477732][T10872] WARNING: possible circular locking dependency detected [ 301.484773][T10872] syzkaller #0 Tainted: G L Y [ 301.490851][T10872] ------------------------------------------------------ [ 301.497878][T10872] syz.4.1593/10872 is trying to acquire lock: [ 301.503972][T10872] ffff888058558e00 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 301.513727][T10872] [ 301.513727][T10872] but task is already holding lock: [ 301.521112][T10872] ffff888032c53348 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 301.530619][T10872] [ 301.530619][T10872] which lock already depends on the new lock. [ 301.530619][T10872] [ 301.541048][T10872] [ 301.541048][T10872] the existing dependency chain (in reverse order) is: [ 301.550079][T10872] [ 301.550079][T10872] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 301.558530][T10872] down_read+0x45/0x320 [ 301.563228][T10872] lookup_slow+0x46/0x80 [ 301.568000][T10872] ovl_lookup_single+0x323/0xe90 [ 301.573486][T10872] ovl_lookup_layer+0x377/0x440 [ 301.578877][T10872] ovl_lookup+0x5e5/0x1c80 [ 301.583831][T10872] lookup_open+0x94b/0x1970 [ 301.588869][T10872] path_openat+0x673/0x1da0 [ 301.593909][T10872] do_file_open+0x23e/0x4a0 [ 301.598947][T10872] do_sys_openat2+0x115/0x200 [ 301.604163][T10872] __x64_sys_openat+0x138/0x170 [ 301.609546][T10872] do_syscall_64+0x166/0x520 [ 301.614670][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.621104][T10872] [ 301.621104][T10872] -> #0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 301.628940][T10872] __lock_acquire+0x164c/0x2de0 [ 301.634325][T10872] lock_acquire+0x115/0x350 [ 301.639359][T10872] __d_alloc_parallel+0xc32/0x1700 [ 301.645013][T10872] __lookup_slow+0x82/0x2f0 [ 301.650058][T10872] lookup_slow+0x59/0x80 [ 301.654844][T10872] path_lookupat+0x3f5/0x8c0 [ 301.659983][T10872] filename_lookup+0x265/0x5d0 [ 301.665318][T10872] vfs_statx+0xfc/0x200 [ 301.670026][T10872] __se_sys_statx+0x1e9/0x2a0 [ 301.675248][T10872] do_syscall_64+0x166/0x520 [ 301.680376][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.686809][T10872] [ 301.686809][T10872] other info that might help us debug this: [ 301.686809][T10872] [ 301.697052][T10872] Possible unsafe locking scenario: [ 301.697052][T10872] [ 301.704515][T10872] CPU0 CPU1 [ 301.709902][T10872] ---- ---- [ 301.715276][T10872] rlock(&type->i_mutex_dir_key#5); [ 301.720586][T10872] lock(DCACHE_PAR_LOOKUP); [ 301.727723][T10872] lock(&type->i_mutex_dir_key#5); [ 301.735452][T10872] lock(DCACHE_PAR_LOOKUP); [ 301.740057][T10872] [ 301.740057][T10872] *** DEADLOCK *** [ 301.740057][T10872] [ 301.748209][T10872] locks held by syz.4.1593/10872: 1, last CPU#0: [ 301.754546][T10872] #0: ffff888032c53348 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 301.764508][T10872] [ 301.764508][T10872] stack backtrace: [ 301.770411][T10872] CPU: 0 UID: 0 PID: 10872 Comm: syz.4.1593 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 301.781544][T10872] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 301.787359][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 301.797441][T10872] Call Trace: [ 301.800744][T10872] [ 301.803704][T10872] dump_stack_lvl+0xe8/0x150 [ 301.808321][T10872] print_circular_bug+0x2e2/0x300 [ 301.813372][T10872] check_noncircular+0x12f/0x150 [ 301.818337][T10872] __lock_acquire+0x164c/0x2de0 [ 301.823223][T10872] ? rcu_is_watching+0x16/0xb0 [ 301.828039][T10872] lock_acquire+0x115/0x350 [ 301.832566][T10872] ? __d_alloc_parallel+0x39e/0x1700 [ 301.837878][T10872] ? __d_alloc_parallel+0x39e/0x1700 [ 301.843182][T10872] ? __d_alloc_parallel+0x39e/0x1700 [ 301.848492][T10872] __d_alloc_parallel+0xc32/0x1700 [ 301.853627][T10872] ? __d_alloc_parallel+0x39e/0x1700 [ 301.858945][T10872] ? __d_alloc_parallel+0x39e/0x1700 [ 301.864258][T10872] ? __pfx___d_alloc_parallel+0x10/0x10 [ 301.869854][T10872] ? lock_acquire+0x115/0x350 [ 301.874560][T10872] __lookup_slow+0x82/0x2f0 [ 301.879094][T10872] lookup_slow+0x59/0x80 [ 301.883355][T10872] path_lookupat+0x3f5/0x8c0 [ 301.887974][T10872] filename_lookup+0x265/0x5d0 [ 301.892760][T10872] ? __pfx_filename_lookup+0x10/0x10 [ 301.898091][T10872] vfs_statx+0xfc/0x200 [ 301.902274][T10872] ? __pfx_vfs_statx+0x10/0x10 [ 301.907070][T10872] __se_sys_statx+0x1e9/0x2a0 [ 301.911771][T10872] ? __pfx___se_sys_statx+0x10/0x10 [ 301.917086][T10872] ? rcu_is_watching+0x16/0xb0 [ 301.921870][T10872] ? __x64_sys_statx+0x20/0xc0 [ 301.926669][T10872] do_syscall_64+0x166/0x520 [ 301.931300][T10872] ? trace_irq_disable+0x3b/0x140 [ 301.936346][T10872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.942431][T10872] ? clear_bhb_loop+0x70/0xc0 [ 301.947130][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.953044][T10872] RIP: 0033:0x7ff1c559e159 [ 301.957478][T10872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.977134][T10872] RSP: 002b:00007ff1c63c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 301.985573][T10872] RAX: ffffffffffffffda RBX: 00007ff1c5826360 RCX: 00007ff1c559e159 [ 301.993600][T10872] RDX: 0000000000004000 RSI: 0000200000002c40 RDI: ffffffffffffff9c [ 302.001605][T10872] RBP: 00007ff1c563506b R08: 0000200000002c80 R09: 0000000000000000 [ 302.009603][T10872] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 302.017597][T10872] R13: 00007ff1c58263f8 R14: 00007ff1c5826360 R15: 00007ffdcca5e9f8 [ 302.025603][T10872] [ 302.029502][ C0] syz_tun: tun_net_xmit 86