last executing test programs: 1m29.787007843s ago: executing program 3 (id=301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7c9df000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) getrandom(&(0x7f0000000240)=""/284, 0x11c, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/times\x00', 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f00000000c0)="000086d7", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000180)=@xdp={0x2c, 0xdd86, r2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)="00050200f0ff000000002d3922ff65b4355e953d23d20806e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x94d7}, {&(0x7f0000000400)="55f0e46e5a", 0x5}, {&(0x7f0000000440)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) 1m28.994932437s ago: executing program 3 (id=307): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x6a3}], 0x1) 1m28.90503833s ago: executing program 3 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x200200, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r0, &(0x7f0000001640)="8b", 0xffe4) (fail_nth: 3) 1m28.795867427s ago: executing program 3 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./mnt_f2fs\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805000, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_f2fs\x00', 0x1ed) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000003c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0x0, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='virtiofs\x00', 0x0, &(0x7f0000000100)) 1m28.487559387s ago: executing program 3 (id=311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newae={0x84, 0x1e, 0x100, 0x70bd29, 0x25dfdbfb, {{@in=@local, 0x4d3, 0xa, 0x3c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x3505}, [@replay_thresh={0x8, 0xb, 0x4}, @sec_ctx={0x3c, 0x8, {0x38, 0x8, 0x1, 0x0, 0x30, "779408d2e5c2dcac408c1c50ad3bba817712ba9399bfef733e13366f329fda6e845ef0185478ed7121cf9573c8712fd8"}}]}, 0x84}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x1c}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x1b, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @main=@item_012={0x2, 0x0, 0x9, "e647"}, @main=@item_4={0x3, 0x0, 0xb, "ed49a6aa"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_012={0x1, 0x2, 0x9, "17"}]}}, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000046c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x44040) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f00000006c0)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x0, 0xb063}}) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$binder_nlctrl_getfamily(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}}, 0x0) recvfrom$binder_nlctrl_getfamily(r8, &(0x7f0000000540)={""/76, 0x0}, 0x80, 0x40, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000780)={0x3, 0xfe, 0x7fffffff, 0x3, 0x9}, 0x14) setsockopt$binder_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f00000005c0)=r9, 0x4) recvfrom$binder_report(r8, &(0x7f0000000600), 0x80, 0x40, 0x0, 0x0) r11 = fsopen(&(0x7f0000000700)='nilfs2\x00', 0x0) r12 = getpid() kcmp(r12, r12, 0x0, r11, r11) syz_usb_disconnect(r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000004800)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) 1m28.286673705s ago: executing program 3 (id=313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x1d, 0xffffffffffffffff, &(0x7f0000000280)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x4f, 0x4}}], 0x18}}], 0x1, 0x240040d4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x9, 0x9cca3, 0x2ac4e6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c, 0x200000000000}) 1m28.001999007s ago: executing program 32 (id=313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x1d, 0xffffffffffffffff, &(0x7f0000000280)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x4f, 0x4}}], 0x18}}], 0x1, 0x240040d4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x9, 0x9cca3, 0x2ac4e6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c, 0x200000000000}) 1m7.070614035s ago: executing program 1 (id=397): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x42, 0x0) fanotify_init(0xef0, 0x2) (async) r2 = fanotify_init(0xef0, 0x2) readv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1) fanotify_mark(r2, 0x105, 0x40009967, r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file7\x00', 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="300000001c00010401000000000000002d000000010000008000000105000100300000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100310000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100320000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100330000000a0002000000000000000000300000000600010401000000000000002d000000010000008000000105000100340000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100350000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105010100360000fe090002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100370000000a0002000020df17aee6fa9a230000001c00010401000000000000002d000000010000008000000105000100000000", 0x1a3) (async) write(r3, &(0x7f00000005c0)="300000001c00010401000000000000002d000000010000008000000105000100300000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100310000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100320000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100330000000a0002000000000000000000300000000600010401000000000000002d000000010000008000000105000100340000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100350000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105010100360000fe090002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100370000000a0002000020df17aee6fa9a230000001c00010401000000000000002d000000010000008000000105000100000000", 0x1a3) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)={0x0, 0x22, 0xaf, {0xaf, 0x7, "bf27d61daeaf0870d4d6985b54ea1d1cb6cd19ec3a60da3a8f9cc029e36425391f7445ff8b445cc6f009ddad425df51ee5c0c9aa72c18c4d264c3281ee6e3d8c3b4bb5b8c6ad4a4215e990aafaed68907b0d4ea45af3d1a8b67c050cdbd9c5a4ff1e227ed4f546c10010529255fbb887f0e8bd02ee42e708d3bdc661ef21053d7dcbd08b90985407c33ab3afcd525774ce9b20f785ebb8fee3d7cd72385defe6677a719ea81e5d58c22648ef4e"}}, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x9, "72f3"}, @main=@item_012={0x2, 0x0, 0x8, "6bc2"}]}}, 0x0}, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc0}, 0x0, 0x0}) 1m4.605335856s ago: executing program 1 (id=410): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0xa8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4a, 0xf8, 0x0, 0x1, [@generic="78057c67001c274b77a33a15462348ca6f102294cd508cd48f01daa89988bfb72d95c4210c8dadd28149d2cd9ce63704d4c45a0c457b9150f39565b984a1b03e764e5f60b9e7"]}]}, @nested={0x44, 0x5, 0x0, 0x1, [@nested={0x40, 0xce, 0x0, 0x1, [@nested={0x3c, 0x13e, 0x0, 0x1, [@nested={0x38, 0xa0, 0x0, 0x1, [@nested={0x34, 0x61, 0x0, 0x1, [@nested={0x30, 0x9d, 0x0, 0x1, [@nested={0x2c, 0x63, 0x0, 0x1, [@typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r0}]}]}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}]}]}]}]}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./loop1\x00', 0x61ff, 0x701) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt_f2fs\x00', 0x1ed) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xcd, 0x99, 0x0, 0x1, [@generic="b2fab53d3a2cd5adabd81cda7457a845e3f3e8032ad45b6223a66f7f3cb802ae0907921607fb20ce43c4bced197d9a3060fd6c29f84b7c18cf", @nested={0x8d, 0x102, 0x0, 0x1, [@nested={0x4, 0xbc}, @generic="e7ee1f89de61ca4592ee9a801eff5cd1d99a200cce39aa17c2269a92482276b7cee18d06627d84aa2b84c48ec1c24f86c1b484728912520aeff965b4e8a07f3fa03bad8a3a54985f43630a698f782e2a818538bf9b34eb6d8672c237d0de81a82bb19a1d3aa34bdc2c1c4aceb837b5b599024ad0552450f6f249f20efc493e1a7b6827eb36"]}]}]}, 0xe0}], 0x1}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000004c0)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./mnt_f2fs\x00', &(0x7f0000000100)='f2fs\x00', 0x1000, &(0x7f0000000140)='compress_algorithm=zstd:6\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000bc0)}], 0x1}}], 0x1, 0x4004804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x7000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000cc0)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000d00)=[@textreal={0x8, &(0x7f0000000d40)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x80200, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x20, r8, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x108, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1e, 0x2, 'compress_algorithm=zstd:6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#%/^!$&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@\\-%#&^&\'%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[[\'$^\'/-$+!^&$#&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x108}}, 0x80040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb87, 0x23}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000045) ioctl$sock_ifreq(r5, 0x8922, &(0x7f00000028c0)={'team_slave_1\x00', @ifru_data=&(0x7f0000002880)="f2a6fd5f4710b38e12cd80ccfe1f507e4fc90d2b7b6e82c332810eecd9714953"}) socket$nl_generic(0x10, 0x3, 0x10) 1m2.889026731s ago: executing program 1 (id=417): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000000140)={""/44, 0x0, ""/12, 0x0}, 0x80, 0x81350bf58b447390, 0x0, 0x0) ptrace(0x4207, r1) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) (async) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') r3 = socket(0x15, 0x5, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x0) (async) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 1m2.616499653s ago: executing program 1 (id=421): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000040)="46e808007c6243287f4816c81f2bff7cbc1e6ff211ef9abd1237885ec7e7c2ec22e4256d0fdfa88cab831edb414476035080efab975045ca24e03f8d284212320620fe641f0f06055f023c6d7ab2c01588733566de99bdab3ec4002c", 0x5c, 0x4000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x6a7}], 0x1) 1m2.397057099s ago: executing program 1 (id=424): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000014c0)='1', 0x1) 1m2.238151221s ago: executing program 1 (id=427): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x96942) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff}) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') (rerun: 32) mount$9p_fd(0x0, &(0x7f00000006c0)='.\x00', &(0x7f0000000700), 0x200040c, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 47.203302049s ago: executing program 33 (id=427): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x96942) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff}) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') (rerun: 32) mount$9p_fd(0x0, &(0x7f00000006c0)='.\x00', &(0x7f0000000700), 0x200040c, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 46.958210126s ago: executing program 2 (id=504): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x7ff, 0x6, 0x9, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x7ff, 0x6, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000240), 0xff, 0x404102) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0xff, 0x404102) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r3, 0x0, 0x5e, 0x2, &(0x7f0000000280)="21fe", 0x1}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='status\x00') lseek(r5, 0x9, 0x0) fcntl$getownex(r4, 0x11, &(0x7f0000000000)) (async) fcntl$getownex(r4, 0x11, &(0x7f0000000000)) 46.729430034s ago: executing program 2 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4089, 0xff9}, {&(0x7f00000012c0)=""/218, 0xda}, {&(0x7f00000013c0)=""/134, 0x86}, {&(0x7f0000001480)=""/179, 0xb3}, {&(0x7f0000001540)=""/135, 0x87}], 0x5}}], 0x1, 0x10020, 0x0) write(r0, &(0x7f0000001600)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_open_dev$hidraw(&(0x7f0000000000), 0xc02c, 0x200000) r1 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0x3, "91abc12404cf378042"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) write(r1, &(0x7f00000017c0)="22700e3fa0b732aecf0728f643bb6bc01768d95fe2ba940eb20b674fcceed48de07ac3c662a2b223c75be15fedd287addda80c57e7ade19d51ab939df66fbd23b0cf48e6e1c1ef9fa2d26f4aaf09f5c30ef1275a5d20073418ef087b61920ac4784cb35555a0f67b0209caea010c500d757b9104f16c4122539c79ab7684f8dbca153c367447cb4fdac882902006b4a259352bed6f399a61124f58606153d3dc132a270600af39901038e9fdda8cfb4bf8ca2f23ca7956be2c0ca4466aa5425e1ebfd71643d1757cc0e4073e0da9f48fdd7c7f92bd61347c", 0xd8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000016c0)={0x5, 0x3147504d, 0x3, @discrete={0x8, 0x80000001}}) creat(&(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x120) 46.683981342s ago: executing program 2 (id=506): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000300)=""/4096) write(r1, &(0x7f0000000180)='10', 0x2) kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 44.053735996s ago: executing program 2 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x5) setresuid(r4, 0x0, r6) (async) ioprio_get$uid(0x3, r6) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000027e000/0x2000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000040)='4', 0x1f) (async) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x300000d, 0x1) (async) mount$fuse(0x0, &(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x1812020, 0x0) (async) lremovexattr(&(0x7f0000001480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 43.464496562s ago: executing program 2 (id=512): setns(0xc9, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) dup(r0) r1 = syz_ublk_setup_io_uring(0x2a2a, &(0x7f00000000c0)={0x0, 0xb6ee, 0x100, 0x2, 0x39e}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./sys/kernel/tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/boot_params/data\x00', 0x0, 0x0) read(r2, &(0x7f0000000540), 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x58801}, 0x40000d1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000030801010000000000000000030000000900010073797a3100000900"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000a80)={0x0, 'syz_tun\x00', {0x3}, 0x8}) 43.165729596s ago: executing program 2 (id=514): r0 = syz_open_dev$cec(&(0x7f0000000400), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", '\x00\x00\b\x00', ['\x00', "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000840)={0xfffffffffffffbf7, 0x1, 0x5, 0x0, 0x4, 0x7ffe, "7f2c00", 0xbd, 0x56, 0xc0, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000880)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r1 = syz_usb_connect(0x5, 0x230, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x98, 0xe5, 0x7f, 0x40, 0x5a9, 0x8065, 0x13cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21e, 0x1, 0x0, 0xc, 0x20, 0x28, "", [{{0x9, 0x4, 0xfd, 0x7d, 0x3, 0x4a, 0x12, 0x7e, 0xff, [@hid_hid={0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xa18}}], [{{0x9, 0x5, 0x80, 0x8, 0x8, 0x8, 0x4, 0x6}}, {{0x9, 0x5, 0xb, 0x1, 0x0, 0x2, 0x3, 0xff}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xc, 0x8, 0x84, [@generic={0xe6, 0x9, "aca96d20b4e2c238c0ea028564075f8bc419d9f4932ea231fd80ac04ea5e593a9380c2fbc6992ac405b72b645c6408436d1020511001d0813ef243e932bdaba961f939a4b06a94171b022d2890c9782da2bc3211e17dcbad91f0826cffbba9148940b4b81c8e9fd24eff03cca990b906ec83411c826320f9c35f5cb9cb56eec8f9fb4301711411d27da4b8452bb21e9fbd9d04b293904740c76ed5181fae9be341949ff706e8c349d487df25aeb43d928bc9852d04e703fad3284ffc9faab2cb5f3cfba302d7edc713d3c9acc4c5899a9c5be9cea86f6ff278d092bc3ee6a75f6f50e66d"}, @generic={0x102, 0xa, "ec06b811f79b534b0f87bbb064599cc2b4818c59804b18e26dda08f1d72e17e73d65b14f68e5aa6edb22ff45698134379010f41133c3a65e03ced680aac4db7d0841bdeae718b6a6202c751d95efe83d85661756e04be60c0b13282a87c6ba7971a2f49559c573e0fad71044c276794da6b4533d2aa4eafd349d731118bae3c48975ea54abee30dac50026e70f922047bfad1ecc16a7469f27a45d995d2ddc064516cac7c197c320a967a78a7b977cf25e38d328d637d68eddaf843d206e799cfef78abe87068e47e09cfd782bb75d82b5b036b795b9f200f607cbb594e656bc2ffa415b58409f409c74e9d2bb45e0748d745a9f8480363f499930cbb0bd2fa0"}]}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x2, 0xf1, &(0x7f00000006c0)="6cb8e27f434bcf07c50ef8a3bc172f9c184b95099d53888abd031f55f46857e28417010412c9c4a9541c3cc01337056c5869329c7c5b23675baca86536bcaaaf5f342b90bed88033f07aa5f5883a34a858cf41e79b773ef834bb2774879a6ac54eeb97e0b01498a560f4d5be1503c0d59482750167f8529a33ae9e27b87d55f0691535565f39f7487483c9438f3251f7e62a7696dc48c745de16edc2821c5ab0745e10f9d95b42dae1ad3af9cd6123c231d43d8a8bfb1821a2754a391006a41bbc7b09f03cead80215c181cb8bde144c83601eb10eaeb02e2b35807cbc418630abc1112c0b48c13272c567192f860ec98b") syz_usb_connect$cdc_ecm(0x3, 0xa9, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x1, 0x1, 0x1, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "be260264"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x64b, 0x81f9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0xb7}, @mdlm_detail={0x17, 0x24, 0x13, 0x7f, "f857a0f7269c8ba1160ec4f1bf2bc1fb3b738a"}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x24}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x45}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe3, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x81, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x1, 0x19, 0x40, 0x9}, 0x45, &(0x7f0000000140)={0x5, 0xf, 0x45, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x11, 0x8, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x6, 0xef, 0xf, 0x54}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xad, 0x6, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "42fdb7022f1685aafc677fde987743b4"}]}, 0x3, [{0xe9, &(0x7f00000001c0)=@string={0xe9, 0x3, "fc18c1b05fbbf0f7e538dde485d11bbcec78fc38c2fdf366e945fad5eb501217107853cffb65b321d546d90e9894ad41da92a079384c903db499c35062dea1056e1e32b65a01d6babfc81f98f093a721df5eb4c5ac9a7769330b8fb18c56ac90420c479256721671f125c38df8dbc060e84f5e53b749374dd4ebbdd03ed3b8a0c448dd23be8761bedbb34302bb0f9ebeca12c9bfffc3bfad720f2b8dc1d151928d7587d941fa0cf456ca58cad6b197cab3cf3868c143f98a7474a2ea9c11039b246ab2c3fce94d5722f9d130d0b3547037e65d8748b0c8d3dc92ef5ac6dfd65b9ef25b6cb10734"}}, {0x89, &(0x7f00000002c0)=@string={0x89, 0x3, "6a96b44e325625f14c3a8ee08a479dc0d325ec258a756f2807bad415230ca5be1805c3da16f43f5e3c01d2ffbbd7f708a5800d8e462af7bfc56abd0022c0ac6fbbf499cb23bad569fe9e402c797d52ed0dd35358185a02ecf267d097502450e68b38b315698520c0cb4aa1f8cddc8c5aef8cd5b9758da51b3b20258490df20a7ee14897660d4e6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}]}) 28.167757121s ago: executing program 34 (id=514): r0 = syz_open_dev$cec(&(0x7f0000000400), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", '\x00\x00\b\x00', ['\x00', "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000840)={0xfffffffffffffbf7, 0x1, 0x5, 0x0, 0x4, 0x7ffe, "7f2c00", 0xbd, 0x56, 0xc0, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000880)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r1 = syz_usb_connect(0x5, 0x230, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x98, 0xe5, 0x7f, 0x40, 0x5a9, 0x8065, 0x13cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21e, 0x1, 0x0, 0xc, 0x20, 0x28, "", [{{0x9, 0x4, 0xfd, 0x7d, 0x3, 0x4a, 0x12, 0x7e, 0xff, [@hid_hid={0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xa18}}], [{{0x9, 0x5, 0x80, 0x8, 0x8, 0x8, 0x4, 0x6}}, {{0x9, 0x5, 0xb, 0x1, 0x0, 0x2, 0x3, 0xff}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xc, 0x8, 0x84, [@generic={0xe6, 0x9, "aca96d20b4e2c238c0ea028564075f8bc419d9f4932ea231fd80ac04ea5e593a9380c2fbc6992ac405b72b645c6408436d1020511001d0813ef243e932bdaba961f939a4b06a94171b022d2890c9782da2bc3211e17dcbad91f0826cffbba9148940b4b81c8e9fd24eff03cca990b906ec83411c826320f9c35f5cb9cb56eec8f9fb4301711411d27da4b8452bb21e9fbd9d04b293904740c76ed5181fae9be341949ff706e8c349d487df25aeb43d928bc9852d04e703fad3284ffc9faab2cb5f3cfba302d7edc713d3c9acc4c5899a9c5be9cea86f6ff278d092bc3ee6a75f6f50e66d"}, @generic={0x102, 0xa, "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"}]}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x2, 0xf1, &(0x7f00000006c0)="6cb8e27f434bcf07c50ef8a3bc172f9c184b95099d53888abd031f55f46857e28417010412c9c4a9541c3cc01337056c5869329c7c5b23675baca86536bcaaaf5f342b90bed88033f07aa5f5883a34a858cf41e79b773ef834bb2774879a6ac54eeb97e0b01498a560f4d5be1503c0d59482750167f8529a33ae9e27b87d55f0691535565f39f7487483c9438f3251f7e62a7696dc48c745de16edc2821c5ab0745e10f9d95b42dae1ad3af9cd6123c231d43d8a8bfb1821a2754a391006a41bbc7b09f03cead80215c181cb8bde144c83601eb10eaeb02e2b35807cbc418630abc1112c0b48c13272c567192f860ec98b") syz_usb_connect$cdc_ecm(0x3, 0xa9, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x1, 0x1, 0x1, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "be260264"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x64b, 0x81f9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0xb7}, @mdlm_detail={0x17, 0x24, 0x13, 0x7f, "f857a0f7269c8ba1160ec4f1bf2bc1fb3b738a"}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x24}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x45}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe3, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x81, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x1, 0x19, 0x40, 0x9}, 0x45, &(0x7f0000000140)={0x5, 0xf, 0x45, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x11, 0x8, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x6, 0xef, 0xf, 0x54}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xad, 0x6, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "42fdb7022f1685aafc677fde987743b4"}]}, 0x3, [{0xe9, &(0x7f00000001c0)=@string={0xe9, 0x3, "fc18c1b05fbbf0f7e538dde485d11bbcec78fc38c2fdf366e945fad5eb501217107853cffb65b321d546d90e9894ad41da92a079384c903db499c35062dea1056e1e32b65a01d6babfc81f98f093a721df5eb4c5ac9a7769330b8fb18c56ac90420c479256721671f125c38df8dbc060e84f5e53b749374dd4ebbdd03ed3b8a0c448dd23be8761bedbb34302bb0f9ebeca12c9bfffc3bfad720f2b8dc1d151928d7587d941fa0cf456ca58cad6b197cab3cf3868c143f98a7474a2ea9c11039b246ab2c3fce94d5722f9d130d0b3547037e65d8748b0c8d3dc92ef5ac6dfd65b9ef25b6cb10734"}}, {0x89, &(0x7f00000002c0)=@string={0x89, 0x3, "6a96b44e325625f14c3a8ee08a479dc0d325ec258a756f2807bad415230ca5be1805c3da16f43f5e3c01d2ffbbd7f708a5800d8e462af7bfc56abd0022c0ac6fbbf499cb23bad569fe9e402c797d52ed0dd35358185a02ecf267d097502450e68b38b315698520c0cb4aa1f8cddc8c5aef8cd5b9758da51b3b20258490df20a7ee14897660d4e6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}]}) 12.875819778s ago: executing program 5 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000000180)='27', 0x2) mount(&(0x7f00000001c0)=@filename='mtd0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jffs2\x00', 0x58000000, 0x0) 12.350041964s ago: executing program 5 (id=625): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r2, &(0x7f0000000380)=@x25, 0x80) sendmsg$nl_generic(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001340)=""/259, 0x103}, {&(0x7f0000003f80)=""/129, 0x81}, {&(0x7f0000002f40)=""/4109, 0x100d}, {&(0x7f0000004040)=""/4094, 0xffe}, {&(0x7f0000005040)=""/196, 0xc4}, {&(0x7f0000005140)=""/119, 0x77}, {&(0x7f0000005240)=""/4100, 0x1004}, {&(0x7f0000006280)=""/246, 0xf6}, {&(0x7f0000006380)=""/142, 0x8e}, {&(0x7f0000006440)=""/14, 0xe}, {&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000001480)=""/4096, 0x1000}], 0xe}, 0x10082) 9.316456193s ago: executing program 5 (id=633): socket(0x28, 0xa, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000600)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000640)={0xd200000000000000, 0x41000, 0x3ff, 0x8}) 9.033923472s ago: executing program 5 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9a) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) write$char_usb(r2, &(0x7f0000006800)="10", 0x20) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) 6.270123968s ago: executing program 6 (id=639): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'comedi_test\x00', [0x140, 0x2, 0x43, 0x2, 0x20, 0x1, 0x8002, 0x1000, 0x80001007, 0x3, 0xa, 0xffffffff, 0x2009, 0x6, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x35, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) (fail_nth: 8) 5.785404102s ago: executing program 6 (id=640): r0 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = fsmount(r0, 0x0, 0x8) openat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x12) 5.160108385s ago: executing program 5 (id=641): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r1, 0x0, 0x0, 0x40008005, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.077175066s ago: executing program 0 (id=643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xf000000, 0x3}) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000006c0), 0xfff3, 0x8000) 5.056904124s ago: executing program 6 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1c4, 0x0, 0x1}]}) r3 = syz_open_dev$video(&(0x7f0000000080), 0xa7, 0x450800) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3432564e, 0x2, @stepwise={0x6, 0x2, 0x2, 0x2, 0x4, 0xcf1e}}) 4.952037023s ago: executing program 6 (id=645): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x8280, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40727b, 0x80, 0x3, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 21) 4.703239203s ago: executing program 6 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x50000, 0x8000, 0x7, 0x8, 0x0, [{0x3, 0x8, 0x5, '\x00', 0xa}, {0x4, 0x8, 0x0, '\x00', 0x7}, {0x4b, 0x5, 0x54, '\x00', 0x3}, {0x5, 0x2, 0x40, '\x00', 0x4}, {0xb, 0x4, 0x5, '\x00', 0x81}, {0x54, 0x80, 0xb3, '\x00', 0x7}, {0x17, 0x4, 0x1, '\x00', 0xb4}, {0xb, 0x5, 0x0, '\x00', 0xd}, {0x5, 0xb, 0x8, '\x00', 0xfd}, {0x2, 0x6, 0x9, '\x00', 0xa6}, {0xd, 0x6, 0x8}, {0x59, 0x4, 0x7, '\x00', 0xff}, {0x0, 0x2, 0x61, '\x00', 0x6}, {0x3, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x6, 0x8, '\x00', 0x3}, {0x1, 0x8a, 0x7, '\x00', 0x2}, {0x2, 0x0, 0x0, '\x00', 0x2}, {0xe, 0x9, 0x7, '\x00', 0x6}, {0x0, 0x5, 0x9, '\x00', 0x8}, {0x30, 0x5, 0x80, '\x00', 0x7}, {0x2, 0x8, 0xe}, {0x3, 0x10, 0xb, '\x00', 0x5}, {0xbe, 0x3, 0x3, '\x00', 0x1}, {0x4, 0x0, 0x99, '\x00', 0x2}]}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0000886301000000feff14"], 0x76) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x400, 0x2000, 0x0, 0x0}, {0x7, 0x801, 0x0, 0x0}, {0x2b43, 0x6301, 0x0, 0x0}], 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={r8, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r8, &(0x7f0000000680)=0x4) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000500)={0xb, @sdr={0x38305543}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.262104199s ago: executing program 5 (id=652): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000440)={0x40, 0x22, 0x102, {0x102, 0x23, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x24, 0x16, 0x9c, "a6ed460aa404c579906b359c55fa889ae42031f16ef9ee3aa3c7ce8187bfd72a034d95fc388a1a816bcf42d71c3799b218b2d9bba978fc2d9526418c7ecf1891593b68e49a3c869307887a9b0388f85a9fb92c3900de1c35239ccf12fdf830fb880a153f640344d4ea2fec0312888c0c248e96edb8159673c90dd6b4a0ca3cf2a75a4cfc9eece2e7dab47073eec1c47b05063b6a9f5af5392b0eb9a5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000380)={0x40, 0xa0, 0x4}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "d173aa36dfc7e8e601441c434e3d7b968cf62b54d697f86b58982543697e82fac6c34f40c1ed26bd4df78e187baf2a"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.991678369s ago: executing program 0 (id=655): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x4, 0x0, r1, 0x2c3244, 0x9, 0x3, 0x17b167}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x4) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000180)={0x0, 0xc4, 0x800, '\x00', &(0x7f0000000140)=0xc}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000001c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'sed\x00', 0x18, 0x7, 0x6c}, 0x2c) connect$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x2}}, 0x10) r4 = accept4$inet(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x5, 0x628, [0x0, 0x200000000300, 0x200000000620, 0x200000000780], 0x0, &(0x7f00000002c0), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x1, 0xada3ae1042d00015, 'veth1_macvtap\x00', 'bond_slave_1\x00', 'veth0_to_bridge\x00', 'vxcan1\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff], 0x0, 0xe0, 0x180, 0x1c8, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'macvtap0\x00', {}, 'veth1_virt_wifi\x00', {}, 0x15, 0x4}}}], [@common=@log={'log\x00', 0x28, {{0x6, "bbd4b7fcc4b94a09daf96e18f1f6b19b5c49548b3a62b4c5729c4bfcbe57", 0xd}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x6, {0x80000001}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x2, 0x4, {0x7a2}}}}}, {0x18, 0x10, 0x806, 'wg0\x00', 'team_slave_1\x00', 'gretap0\x00', 'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0xf0, 0xf0, 0x128, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x1, 0x0, 0x16, 0x4, 0x6}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{0x5, 0x2, 0x8035, 'tunl0\x00', 'veth1_to_hsr\x00', 'veth1\x00', 'veth0_vlan\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0xe8, 0x130, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xfc, 0xe}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x2, 0x4, {0x5}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x2a, 0x88f8, 'caif0\x00', 'syzkaller1\x00', 'syzkaller1\x00', 'dvmrp0\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0xa0, 0xa0, 0xd0, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x4, 0x2}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xfffffffd}}}}, {0x9, 0x0, 0x7397, 'ip6gretap0\x00', 'vlan0\x00', 'lo\x00', 'batadv0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}}]}]}, 0x6a0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r5 = syz_io_uring_complete(0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000a00)) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000a40)=[0x6, 0x80000000]) mknodat$null(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x8000, 0x103) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000ac0)={0xd}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000e00)=0x1, 0x4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000e40)={'ip6gre0\x00', {0x2, 0x0, @dev}}) r6 = accept$inet(r5, &(0x7f0000000e80)={0x2, 0x0, @dev}, &(0x7f0000000ec0)=0x10) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000f00)={0xf0, {{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x1, 0x2, [{{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}]}, 0x190) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000010c0)={0x1, 0x101}, &(0x7f0000001100)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001140)={r7, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000001200)=0x6, 0x2) r8 = syz_open_dev$sg(&(0x7f0000001240), 0xffff, 0x250182) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.796381654s ago: executing program 0 (id=656): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1fe) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) dup2(0xffffffffffffffff, r0) mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x4c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34000}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x2000, 0x1e9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) read$FUSE(r2, &(0x7f0000001dc0)={0x2020}, 0x2020) ioctl$ECCGETLAYOUT(r0, 0x81484d11, &(0x7f0000000540)) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10080) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x3e8f, &(0x7f0000000140)={0x0, 0xcfab, 0x20000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) 2.102413353s ago: executing program 0 (id=658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000028c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002900)={0x84, &(0x7f00000029c0)={0x40, 0x16, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002a00)={0x44, &(0x7f0000002a80)={0x40, 0x22, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000002ac0)={0x34, &(0x7f0000002b00)={0x40, 0x17, 0x7, "6d8f940f06b780"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xf000000, 0x3}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000001240)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40002002, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{&(0x7f0000001340)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/100, 0x365}, {&(0x7f00000014c0)=""/85, 0x7c}, {&(0x7f0000001540)=""/4096, 0x197}, {&(0x7f0000002540)=""/106, 0x1c}, {&(0x7f00000025c0)=""/73, 0x1b}, {&(0x7f0000002640)=""/77, 0xbe8}, {&(0x7f00000026c0)=""/154, 0x21}, {&(0x7f0000002780)=""/17, 0x1d8}], 0x21, &(0x7f00000027c0)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000002880)={0x77359400}) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0x200000000000003, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/ptype\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="201000c500"], 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x18968a64eee3c0b5}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000000)={0x40, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x109582) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockname$packet(r3, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14) sendmmsg$inet6(r6, &(0x7f0000001200)=[{{&(0x7f0000000d40)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000080)="96f8f3570616cd5ae8192a018035613fc873d875373484815385b5b7fb31af5c45f667eae3f0184ec912c9888947b4f377cbc952cb9585e248e4fe6690069da4a18be6276ee1bf1251fae767d16f3047256b49ba26b522fd3a051a0275c3ef08917d007b36b4b84119f073", 0x6b}, {&(0x7f0000000e00)="cbaa1004002e7ec1dc8a64b325f7c4d4bfb92341b155f493283e80a79906dc5ad06720e7c2f83f1326d48739c838640ab7815a462cc8e86f0155d3c08737c2a843d91fe9f0d56423a9028c134842a8e20acb7de623a8d850171a0dc99d1ba0e3b124718f3d0917240dc37983e1afa8e9299a8eaa0a46e993293dbb53a10bc5c76014f662dbabccb158f2e96261a58f7d63007a7875b519ff00e92c1677caaf78954ad3b6aea164ef0037796812394e6820a1e6db65ef614167de0685cbd4b15e2152d9683fdc081ff7ad2d410543c7f6e59f3334c7b7240a3f99c2d14e20d94494585ae49e83c021fcaa742982b6efb8", 0xf0}, {&(0x7f0000000f00)="d3e21590adfce7be4a18648ac8ab5a6950ccde4760d5fa2600033bf3bf3c24f22d4e2c0f8b099ae1ec2ca2dae82d9a9550f666a5986338fbcb9b909fa9222651aefc69f7b16e8036315489b0f103c2ee608291536eaa0d21d7dd919e89b57f7d7179b490", 0x64}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="000000001400200000000000290000000b00000000000fff00000000140000000000000029000000080000000100000000940000"], 0x1f8}}], 0x1, 0x800) 2.013776886s ago: executing program 4 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x2000000, 0x0) 1.967907637s ago: executing program 4 (id=660): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/241) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000480)=""/236, 0xec) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="8c0000001a0001002abd7000000000100a0080003a2a5e247b00000070001b"], 0x8c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r4]) 1.441248565s ago: executing program 6 (id=661): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0x202, 0x2801, 0x0, 0x0}, {0x8001, 0x0, 0x0, 0x0}], 0x2}) (fail_nth: 10) 677.972711ms ago: executing program 4 (id=662): r0 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = fsmount(r0, 0x0, 0x8) openat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x12) 660.922956ms ago: executing program 4 (id=663): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000100)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_SETXATTR={0x2a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', 0x53, 0x0, 0x0, {0x0, 0x0, 0x0, &(0x7f0000000380)='./file0\x00'}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) gettimeofday(0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f00000000c0)=0x1) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000240)="69ad52", 0x3}, {0x0}], 0x2) 599.778317ms ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0xc0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, 0x0, 0x0) add_key(&(0x7f00000066c0)='ceph\x00', 0x0, &(0x7f0000006700)="831496", 0x3, 0xfffffffffffffffe) 490.285513ms ago: executing program 4 (id=665): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x20004084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x57, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x15) r4 = syz_usb_connect$midi(0x2, 0xac, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0x0, 0x2, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x1, 0xd, 0x70, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xb, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x4, 0x7, [{0x5, 0xf}, {0x7, 0xae}, {0x7, 0x9}, {0x5}, {0x6, 0x81}, {0x0, 0xc}, {0xff, 0x8}], 0x40}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xf1, 0x2}], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x7, 0x0, 0x7, {0x7, 0x25, 0x1, 0x3, "7f12e6"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0xdd, 0x6d, {0x5, 0x25, 0x1, 0x1, "9f"}}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0xa, 0x7f, {0x5, 0x25, 0x1, 0x1, "fe"}}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0xce, 0x0, 0x1, {0xa, 0x25, 0x1, 0x6, "18a70f049b08"}}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x0, 0x3, 0x6, {0x4}}}, {{0x9, 0x5, 0x4, 0x8, 0x1ff, 0x1, 0xf1, 0x8, {0x9, 0x25, 0x1, 0x5, "0f7db918f6"}}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x4, 0x9, 0x6, {0x6, 0x25, 0x1, 0x2, "fd4a"}}}]}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7f, 0xff, 0x40}, 0x49, &(0x7f0000000cc0)={0x5, 0xf, 0x49, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x2c, 0x1, 0x7, 0xf, 0x9, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xc, 0x2, 0xaa}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d69959f4c9d6b241b181072be12b701e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x34, 0xf7, 0x8, 0x4b86, 0x2e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x2, 0x65, 0xcf}]}, 0x2, [{0xe, &(0x7f0000000d40)=@string={0xe, 0x3, "52320e2929a92fa15915d11b"}}, {0xdf, &(0x7f0000000d80)=@string={0xdf, 0x3, "f085b14ac31143d21e16422424bd71a18ef8c45a4bf2e3eaa9c1438988c425d6140f471ab6c3aa37b44465f8180df350731f126febbc006319f7752e825d753fa8c47d0345818335e8f56ff008511ded47e061632c771f911cc3450556114b872f34a7dede2e188aa4e321c6cfed2dfbf097952028d46bd990e9d4fcc2d2d4d487a10a79bdf3919570ffd799764e68be334c522a178fc7d0aaa23d978b6401b11ba0f35d3f418e260decdc2f260e49bbe7ccb5f5475b0491920d745bc7f7f02fb4c0dd92e222aee18c671fde7d9da20d5835b052a1bf8452c6631e4139"}}]}) syz_usb_control_io$lan78xx(r4, &(0x7f0000000fc0)={0x14, &(0x7f0000000ec0)={0x40, 0x22, 0x85, {0x85, 0x3, "39e3249b87baead6526df2a487fbb78c4a59bd2d4fa90603562e4b3ebcb636c17585aa1527b759188a442d84fa86c23dbf6bed177e4313ec7f58f549e0bc2253ecba7ceba98cf231690ffe8d0fa3974a2f902803b3aef9a4b3f4ba1dd338a537a0984741f662c39e97c91b3083d53d7366696177630e751e3bb91aa419f4f249c70ae8"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001200)={0x34, &(0x7f0000001000)={0x40, 0x7, 0xaf, "db92eeede2057f8d19c5cd5c6fd7d0a23d92b9a466fc7442527884c348757fbdd18962fcc3e4c114b5db6344c4a937c416e236d5b17c03db2884f0f7299af0aafbe6583069dbfce17a5ec36100545b651b77b14521c86f78bb6f4d9caed058333ac4a86fadf5da93b33a04e4c85fb081172319eaf053912b99fc69a164f60aa83d0f2d707cd8e8e81e1b29de8a45d3450ef5e0543bc5f8110e99fe91e536c4ca36474628cba2de8568da13d7b4baaa"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001140)={0xc0, 0xa1, 0x4, 0x14}, &(0x7f0000001180)={0x40, 0xa0, 0x4, 0x2718}, &(0x7f00000011c0)={0xc0, 0xa2, 0x2f, "583a58a50cc3cabfadab943ec4bd568263a98a13157906c2bc878cd111cd02ceb15b44620ccfb9a8c37e407a2e0339"}}) ioctl(r3, 0x40204706, &(0x7f00000007c0)) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, 0x0, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)) prctl$PR_SET_SECUREBITS(0x1c, 0x25) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 66.66832ms ago: executing program 0 (id=666): r0 = socket(0x1f, 0x3, 0x7fffffff) write(r0, &(0x7f0000000200)="3c000000100005060200000000000000000000000000000000060000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) 0s ago: executing program 0 (id=667): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1fe) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) dup2(0xffffffffffffffff, r0) mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x4c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34000}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x2000, 0x1e9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) read$FUSE(r2, &(0x7f0000001dc0)={0x2020}, 0x2020) ioctl$ECCGETLAYOUT(r0, 0x81484d11, &(0x7f0000000540)) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10080) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x3e8f, &(0x7f0000000140)={0x0, 0xcfab, 0x20000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): 19] ? apparmor_socket_sendmsg+0x98/0x360 [ 163.829101][ T7319] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.829131][ T7319] sock_sendmsg_nosec+0x14e/0x190 [ 163.829174][ T7319] ____sys_sendmsg+0x54e/0x850 [ 163.829210][ T7319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.829249][ T7319] ? import_iovec+0x73/0xa0 [ 163.829279][ T7319] ___sys_sendmsg+0x2a6/0x360 [ 163.829306][ T7319] ? __lock_acquire+0x747/0x2de0 [ 163.829336][ T7319] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.829404][ T7319] ? __fget_files+0x3a2/0x420 [ 163.829431][ T7319] ? __fget_files+0x2a/0x420 [ 163.829469][ T7319] __x64_sys_sendmsg+0x1b1/0x290 [ 163.829501][ T7319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.829553][ T7319] do_syscall_64+0x16a/0x530 [ 163.829572][ T7319] ? trace_irq_disable+0x3b/0x140 [ 163.829600][ T7319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.829621][ T7319] ? clear_bhb_loop+0x70/0xc0 [ 163.829648][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.829669][ T7319] RIP: 0033:0x00007f7cd3b9fb19 [ 163.829691][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.829710][ T7319] RSP: 002b:00007f7cd4aed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.829733][ T7319] RAX: ffffffffffffffda RBX: 00007f7cd3e26090 RCX: 00007f7cd3b9fb19 [ 163.829749][ T7319] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000007 [ 163.829763][ T7319] RBP: 00007f7cd4aed090 R08: 0000000000000000 R09: 0000000000000000 [ 163.829776][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.829789][ T7319] R13: 00007f7cd3e26128 R14: 00007f7cd3e26090 R15: 00007ffc891ed728 [ 163.829824][ T7319] [ 164.189553][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 164.287997][ T7326] FAULT_INJECTION: forcing a failure. [ 164.287997][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 164.288040][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.288070][ T7326] Tainted: [L]=SOFTLOCKUP [ 164.288078][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.288091][ T7326] Call Trace: [ 164.288099][ T7326] [ 164.288108][ T7326] dump_stack_lvl+0xe8/0x150 [ 164.288146][ T7326] should_fail_ex+0x3eb/0x540 [ 164.288179][ T7326] should_failslab+0xa8/0x100 [ 164.288221][ T7326] ? skb_clone+0x212/0x3a0 [ 164.288258][ T7326] kmem_cache_alloc_noprof+0x9c/0x600 [ 164.288308][ T7326] ? skb_clone+0x212/0x3a0 [ 164.288367][ T7326] skb_clone+0x212/0x3a0 [ 164.288401][ T7326] __netlink_deliver_tap+0x355/0x6e0 [ 164.288437][ T7326] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.288464][ T7326] netlink_deliver_tap+0x19c/0x1b0 [ 164.288489][ T7326] netlink_unicast+0x8c1/0xa80 [ 164.288541][ T7326] netlink_sendmsg+0x7f0/0xb20 [ 164.288572][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.288601][ T7326] ? aa_sock_msg_perm+0x144/0x210 [ 164.288631][ T7326] ? apparmor_socket_sendmsg+0x98/0x360 [ 164.288667][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.288690][ T7326] sock_sendmsg_nosec+0x14e/0x190 [ 164.288726][ T7326] ____sys_sendmsg+0x54e/0x850 [ 164.288761][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.288800][ T7326] ? import_iovec+0x73/0xa0 [ 164.288831][ T7326] ___sys_sendmsg+0x2a6/0x360 [ 164.288857][ T7326] ? __lock_acquire+0x747/0x2de0 [ 164.288887][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.288954][ T7326] ? __fget_files+0x3a2/0x420 [ 164.288981][ T7326] ? __fget_files+0x2a/0x420 [ 164.289018][ T7326] __x64_sys_sendmsg+0x1b1/0x290 [ 164.289057][ T7326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.289109][ T7326] do_syscall_64+0x16a/0x530 [ 164.289128][ T7326] ? trace_irq_disable+0x3b/0x140 [ 164.289155][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.289177][ T7326] ? clear_bhb_loop+0x70/0xc0 [ 164.289204][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.289225][ T7326] RIP: 0033:0x00007feb3959fb19 [ 164.289246][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.289265][ T7326] RSP: 002b:00007feb377f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.289288][ T7326] RAX: ffffffffffffffda RBX: 00007feb39825fa0 RCX: 00007feb3959fb19 [ 164.289304][ T7326] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 164.289318][ T7326] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.289332][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.289345][ T7326] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 164.289380][ T7326] [ 164.678733][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 164.679787][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 164.722745][ T7332] device-mapper: table: 248:6: start=1 not aligned to h/w logical block size 1024 of ram0 [ 164.722770][ T7332] device-mapper: core: Cannot calculate initial queue limits [ 164.722779][ T7332] device-mapper: ioctl: unable to set up device queue for new table. [ 164.814320][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 164.871145][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.455'. [ 164.943389][ T10] usb 3-1: device descriptor read/64, error -71 [ 164.960095][ T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 165.113046][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 165.113944][ T11] usb 1-1: New USB device found: idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 165.116978][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.116994][ T11] usb 1-1: Product: syz [ 165.117004][ T11] usb 1-1: Manufacturer: syz [ 165.117014][ T11] usb 1-1: SerialNumber: syz [ 165.119933][ T11] usb 1-1: config 0 descriptor?? [ 165.183240][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 165.283058][ T5738] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.313057][ T10] usb 3-1: device descriptor read/64, error -71 [ 165.346547][ T11] usb_8dev 1-1:0.0 can0: sending command message failed [ 165.346565][ T11] usb_8dev 1-1:0.0 can0: can't get firmware version [ 165.393656][ T11] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 165.404739][ T11] usb 1-1: USB disconnect, device number 25 [ 165.423721][ T10] usb usb3-port1: attempt power cycle [ 165.443040][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 165.443902][ T5738] usb 5-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 165.445342][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 165.445366][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.445395][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.447712][ T5738] usb 5-1: config 0 descriptor?? [ 165.681870][ T7349] FAULT_INJECTION: forcing a failure. [ 165.681870][ T7349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.681896][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.4.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.681920][ T7349] Tainted: [L]=SOFTLOCKUP [ 165.681926][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 165.681935][ T7349] Call Trace: [ 165.681941][ T7349] [ 165.681947][ T7349] dump_stack_lvl+0xe8/0x150 [ 165.681977][ T7349] should_fail_ex+0x3eb/0x540 [ 165.682001][ T7349] _copy_to_user+0x31/0xb0 [ 165.682023][ T7349] simple_read_from_buffer+0xe1/0x170 [ 165.682047][ T7349] proc_fail_nth_read+0x1bb/0x230 [ 165.682065][ T7349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.682083][ T7349] ? rw_verify_area+0x24a/0x4c0 [ 165.682106][ T7349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.682121][ T7349] vfs_read+0x213/0xa80 [ 165.682146][ T7349] ? __pfx___mutex_lock+0x10/0x10 [ 165.682161][ T7349] ? __pfx_vfs_read+0x10/0x10 [ 165.682183][ T7349] ? __fget_files+0x2a/0x420 [ 165.682201][ T7349] ? __fget_files+0x3a2/0x420 [ 165.682220][ T7349] ? __fget_files+0x2a/0x420 [ 165.682241][ T7349] ? fdget+0x1ac/0x250 [ 165.682266][ T7349] ksys_read+0x150/0x270 [ 165.682288][ T7349] ? __pfx_ksys_read+0x10/0x10 [ 165.682318][ T7349] do_syscall_64+0x16a/0x530 [ 165.682331][ T7349] ? trace_irq_disable+0x3b/0x140 [ 165.682350][ T7349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.682365][ T7349] ? clear_bhb_loop+0x70/0xc0 [ 165.682384][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.682398][ T7349] RIP: 0033:0x00007feb3956034e [ 165.682413][ T7349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.682426][ T7349] RSP: 002b:00007feb377f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.682441][ T7349] RAX: ffffffffffffffda RBX: 00007feb377f66c0 RCX: 00007feb3956034e [ 165.682458][ T7349] RDX: 000000000000000f RSI: 00007feb377f60a0 RDI: 0000000000000007 [ 165.682468][ T7349] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.682478][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.682487][ T7349] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 165.682511][ T7349] [ 165.794126][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 165.840329][ T10] usb 3-1: device descriptor read/8, error -71 [ 165.959659][ T5738] usbhid 5-1:0.0: can't add hid device: -71 [ 165.959789][ T5738] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.979118][ T5738] usb 5-1: USB disconnect, device number 7 [ 166.056434][ T7353] fuseblk: Bad value for 'fd' [ 166.058284][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 166.083427][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 166.103571][ T10] usb 3-1: device descriptor read/8, error -71 [ 166.176004][ T7355] FAULT_INJECTION: forcing a failure. [ 166.176004][ T7355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.176031][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.4.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.176052][ T7355] Tainted: [L]=SOFTLOCKUP [ 166.176057][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 166.176067][ T7355] Call Trace: [ 166.176073][ T7355] [ 166.176079][ T7355] dump_stack_lvl+0xe8/0x150 [ 166.176107][ T7355] should_fail_ex+0x3eb/0x540 [ 166.176130][ T7355] prepare_alloc_pages+0x21e/0x5f0 [ 166.176156][ T7355] __alloc_frozen_pages_noprof+0x189/0x450 [ 166.176183][ T7355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.176211][ T7355] ? policy_nodemask+0x31b/0x980 [ 166.176236][ T7355] ? __lock_acquire+0x747/0x2de0 [ 166.176256][ T7355] alloc_pages_mpol+0x21e/0x390 [ 166.176275][ T7355] folio_alloc_mpol_noprof+0x39/0x160 [ 166.176302][ T7355] vma_alloc_folio_noprof+0xe1/0x210 [ 166.176320][ T7355] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 166.176340][ T7355] ? vma_has_anon_rmap+0x95/0x270 [ 166.176365][ T7355] do_pte_missing+0x16d4/0x3570 [ 166.176404][ T7355] handle_mm_fault+0x1807/0x2f80 [ 166.176428][ T7355] ? handle_mm_fault+0xee/0x2f80 [ 166.176451][ T7355] ? __pfx_handle_mm_fault+0x10/0x10 [ 166.176476][ T7355] ? __lock_acquire+0x747/0x2de0 [ 166.176495][ T7355] ? lock_mm_and_find_vma+0xa7/0x340 [ 166.176514][ T7355] do_user_addr_fault+0x7f6/0x1480 [ 166.176543][ T7355] exc_page_fault+0x6a/0xc0 [ 166.176568][ T7355] asm_exc_page_fault+0x26/0x30 [ 166.176582][ T7355] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 166.176603][ T7355] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 166.176616][ T7355] RSP: 0018:ffffc900036ff638 EFLAGS: 00050206 [ 166.176630][ T7355] RAX: ffff88802c4fa001 RBX: ffff88802c4fa103 RCX: 0000000000000d79 [ 166.176641][ T7355] RDX: 0000000000000000 RSI: ffff88802c4fa103 RDI: 0000200000002f40 [ 166.176652][ T7355] RBP: ffffc900036ff7b0 R08: ffff88802c4fae7b R09: 1ffff1100589f5cf [ 166.176663][ T7355] R10: dffffc0000000000 R11: ffffed100589f5d0 R12: dffffc0000000000 [ 166.176674][ T7355] R13: 0000000000000d79 R14: 0000200000003cb9 R15: 00007ffffffff000 [ 166.176698][ T7355] _copy_to_iter+0x61e/0x17e0 [ 166.176714][ T7355] ? unwind_get_return_address+0x4d/0x90 [ 166.176734][ T7355] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 166.176761][ T7355] ? __pfx__copy_to_iter+0x10/0x10 [ 166.176781][ T7355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.176805][ T7355] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 166.176828][ T7355] __skb_datagram_iter+0xf8/0x980 [ 166.176850][ T7355] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 166.176867][ T7355] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 166.176899][ T7355] skb_copy_datagram_iter+0xb5/0x240 [ 166.176925][ T7355] netlink_recvmsg+0x2c8/0xa70 [ 166.176950][ T7355] ? __pfx_netlink_recvmsg+0x10/0x10 [ 166.176972][ T7355] ? aa_sock_msg_perm+0x144/0x210 [ 166.176993][ T7355] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 166.177014][ T7355] ? security_socket_recvmsg+0x7e/0x2c0 [ 166.177035][ T7355] ? __pfx_netlink_recvmsg+0x10/0x10 [ 166.177053][ T7355] sock_recvmsg+0x196/0x1e0 [ 166.177070][ T7355] ____sys_recvmsg+0x1f8/0x530 [ 166.177098][ T7355] ? __pfx_____sys_recvmsg+0x10/0x10 [ 166.177131][ T7355] ? import_iovec+0x73/0xa0 [ 166.177153][ T7355] ___sys_recvmsg+0x213/0x5a0 [ 166.177178][ T7355] ? __pfx____sys_recvmsg+0x10/0x10 [ 166.177202][ T7355] ? lock_acquire+0x115/0x350 [ 166.177230][ T7355] ? __fget_files+0x2a/0x420 [ 166.177250][ T7355] ? __fget_files+0x3a2/0x420 [ 166.177268][ T7355] ? __fget_files+0x2a/0x420 [ 166.177295][ T7355] __x64_sys_recvmsg+0x1ae/0x290 [ 166.177318][ T7355] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 166.177355][ T7355] do_syscall_64+0x16a/0x530 [ 166.177369][ T7355] ? trace_irq_disable+0x3b/0x140 [ 166.177394][ T7355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.177410][ T7355] ? clear_bhb_loop+0x70/0xc0 [ 166.177428][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.177443][ T7355] RIP: 0033:0x00007feb3959fb19 [ 166.177457][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.177470][ T7355] RSP: 002b:00007feb377f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 166.177485][ T7355] RAX: ffffffffffffffda RBX: 00007feb39825fa0 RCX: 00007feb3959fb19 [ 166.177496][ T7355] RDX: 0000000000010082 RSI: 0000200000001200 RDI: 0000000000000003 [ 166.177506][ T7355] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.177515][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.177524][ T7355] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 166.177548][ T7355] [ 166.219566][ T10] usb usb3-port1: unable to enumerate USB device [ 166.273409][ T2243] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 166.434136][ T2243] usb 1-1: Using ep0 maxpacket: 32 [ 166.470173][ T2243] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.470781][ T2243] usb 1-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 166.477102][ T2243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.477169][ T2243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.492959][ T2243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.493023][ T2243] usb 1-1: Product: syz [ 166.493071][ T2243] usb 1-1: Manufacturer: syz [ 166.493110][ T2243] usb 1-1: SerialNumber: syz [ 166.790511][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 166.790546][ T2243] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 166.790565][ T2243] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 166.791605][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 3 (id 3) [ 166.792563][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 4 (id 3) [ 166.798931][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 8 (id 3) [ 166.806435][ T2243] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 166.809498][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 12 (id 3) [ 166.811595][ T2243] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 166.881096][ T2243] usb 1-1: 3:0: cannot get RANGE values for control 3 (id 3) [ 166.916504][ T7362] FAULT_INJECTION: forcing a failure. [ 166.916504][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.916548][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.4.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.916593][ T7362] Tainted: [L]=SOFTLOCKUP [ 166.916601][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 166.916612][ T7362] Call Trace: [ 166.916620][ T7362] [ 166.916629][ T7362] dump_stack_lvl+0xe8/0x150 [ 166.916662][ T7362] should_fail_ex+0x3eb/0x540 [ 166.916692][ T7362] _copy_to_user+0x31/0xb0 [ 166.916735][ T7362] simple_read_from_buffer+0xe1/0x170 [ 166.916767][ T7362] proc_fail_nth_read+0x1bb/0x230 [ 166.916798][ T7362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.916823][ T7362] ? rw_verify_area+0x24a/0x4c0 [ 166.916863][ T7362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.916890][ T7362] vfs_read+0x213/0xa80 [ 166.916923][ T7362] ? __pfx___mutex_lock+0x10/0x10 [ 166.916944][ T7362] ? __pfx_vfs_read+0x10/0x10 [ 166.916974][ T7362] ? __fget_files+0x2a/0x420 [ 166.917006][ T7362] ? __fget_files+0x3a2/0x420 [ 166.917037][ T7362] ? __fget_files+0x2a/0x420 [ 166.917066][ T7362] ? fdget+0x1ac/0x250 [ 166.917098][ T7362] ksys_read+0x150/0x270 [ 166.917129][ T7362] ? __pfx_ksys_read+0x10/0x10 [ 166.917168][ T7362] do_syscall_64+0x16a/0x530 [ 166.917185][ T7362] ? trace_irq_disable+0x3b/0x140 [ 166.917210][ T7362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.917231][ T7362] ? clear_bhb_loop+0x70/0xc0 [ 166.917256][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.917276][ T7362] RIP: 0033:0x00007feb3956034e [ 166.917295][ T7362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.917312][ T7362] RSP: 002b:00007feb377f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.917333][ T7362] RAX: ffffffffffffffda RBX: 00007feb377f66c0 RCX: 00007feb3956034e [ 166.917348][ T7362] RDX: 000000000000000f RSI: 00007feb377f60a0 RDI: 0000000000000003 [ 166.917361][ T7362] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.917373][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.917385][ T7362] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 166.917418][ T7362] [ 166.918760][ T2243] usb 1-1: USB disconnect, device number 26 [ 167.113948][ T5653] udevd[5653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.446660][ T7375] jffs2: notice: (7375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.604567][ T5738] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.604934][ T29] IPVS: starting estimator thread 0... [ 167.646940][ T7380] IPVS: Scheduler module ip_vs_foobar not found [ 167.692971][ T7381] IPVS: using max 7 ests per chain, 16800 per kthread [ 167.712115][ T7383] fuse: Unknown parameter '00000000000000000000' [ 167.752844][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 167.755594][ T5738] usb 5-1: New USB device found: idVendor=046d, idProduct=c24f, bcdDevice=0.00 [ 167.755631][ T5738] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 167.756890][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.756917][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.756951][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.756992][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.757012][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.757029][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.758177][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.758204][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.758235][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.758278][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.758298][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.758315][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.759701][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.759728][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.759759][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.759802][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.759821][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.759838][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.761178][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.761205][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.761237][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.761289][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.761317][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.761333][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.762620][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.762647][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.763244][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.763361][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.763446][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.763510][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.767657][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.767719][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.767780][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.767877][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.767944][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.767998][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.778374][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.778399][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.778427][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.778465][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.778491][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.778513][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.783120][ T5738] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 167.783190][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.783250][ T5738] usb 5-1: config 0 has no interface number 0 [ 167.783357][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.783437][ T5738] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.783498][ T5738] usb 5-1: config 0 interface 16 has no altsetting 0 [ 167.783677][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.809371][ T5738] usb 5-1: config 0 descriptor?? [ 167.918100][ T2243] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 168.179631][ T2243] usb 3-1: device descriptor read/64, error -71 [ 168.353605][ T5738] usb 5-1: USB disconnect, device number 8 [ 168.422835][ T2243] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 168.466598][ T7388] ubi0: attaching mtd0 [ 168.468505][ T7388] ubi0: scanning is finished [ 168.468555][ T7388] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 168.552749][ T2243] usb 3-1: device descriptor read/64, error -71 [ 168.576576][ T7388] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 168.663330][ T2243] usb usb3-port1: attempt power cycle [ 168.922406][ T7401] netlink: 92 bytes leftover after parsing attributes in process `syz.4.475'. [ 169.012879][ T2243] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 169.045456][ T2243] usb 3-1: device descriptor read/8, error -71 [ 169.292831][ T2243] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 169.329311][ T2243] usb 3-1: device descriptor read/8, error -71 [ 169.433109][ T2243] usb usb3-port1: unable to enumerate USB device [ 169.882862][ T2243] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.963134][ T11] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 170.012703][ T2243] usb 5-1: device descriptor read/64, error -71 [ 170.113312][ T11] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.114565][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.116820][ T11] usb 1-1: config 0 descriptor?? [ 170.120480][ T11] cp210x 1-1:0.0: cp210x converter detected [ 170.272895][ T2243] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.402743][ T2243] usb 5-1: device descriptor read/64, error -71 [ 170.513206][ T2243] usb usb5-port1: attempt power cycle [ 170.529529][ T11] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 170.551317][ T11] usb 1-1: cp210x converter now attached to ttyUSB0 [ 170.852607][ T2243] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.873848][ T2243] usb 5-1: device descriptor read/8, error -71 [ 171.112689][ T2243] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.134959][ T2243] usb 5-1: device descriptor read/8, error -71 [ 171.245564][ T2243] usb usb5-port1: unable to enumerate USB device [ 171.473839][ T7420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.484'. [ 171.812594][ T2243] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 171.962581][ T2243] usb 3-1: Using ep0 maxpacket: 8 [ 171.965106][ T2243] usb 3-1: New USB device found: idVendor=056e, idProduct=00e6, bcdDevice=0.00 [ 171.966483][ T2243] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.966532][ T2243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.966574][ T2243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.969137][ T2243] usb 3-1: config 0 descriptor?? [ 172.389386][ T2243] elecom 0003:056E:00E6.0007: reserved main item tag 0xd [ 172.400936][ T2243] elecom 0003:056E:00E6.0007: hidraw0: USB HID v80.06 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 172.727987][ T10] usb 1-1: USB disconnect, device number 27 [ 172.746513][ T4958] block nbd2: Receive control failed (result -107) [ 172.774365][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.774931][ T10] cp210x 1-1:0.0: device disconnected [ 172.819310][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 173.072447][ T2243] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 173.202719][ T2243] usb 5-1: device descriptor read/64, error -71 [ 173.442428][ T2243] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 173.572426][ T2243] usb 5-1: device descriptor read/64, error -71 [ 173.683153][ T2243] usb usb5-port1: attempt power cycle [ 174.032425][ T2243] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 174.053500][ T2243] usb 5-1: device descriptor read/8, error -71 [ 174.292345][ T2243] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 174.313068][ T2243] usb 5-1: device descriptor read/8, error -71 [ 174.423155][ T2243] usb usb5-port1: unable to enumerate USB device [ 174.593251][ T11] usb 3-1: USB disconnect, device number 32 [ 174.616968][ T7423] block nbd2: shutting down sockets [ 175.112359][ T2243] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 175.242401][ T2243] usb 1-1: device descriptor read/64, error -71 [ 175.482431][ T2243] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 175.612359][ T2243] usb 1-1: device descriptor read/64, error -71 [ 175.726834][ T2243] usb usb1-port1: attempt power cycle [ 175.987512][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 176.066109][ T2243] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 176.087710][ T2243] usb 1-1: device descriptor read/8, error -71 [ 176.148551][ T33] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 176.169470][ T33] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 176.259450][ T11] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 176.307696][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.311950][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.322006][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.336129][ T2243] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 176.347457][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.348347][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.354477][ T2243] usb 1-1: device descriptor read/8, error -71 [ 176.425252][ T5807] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 176.464059][ T2243] usb usb1-port1: unable to enumerate USB device [ 176.560067][ T2243] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 176.818305][ T7472] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.882398][ T2243] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 176.927733][ T7467] ceph: No mds server is up or the cluster is laggy [ 176.928031][ T7464] ceph: No mds server is up or the cluster is laggy [ 176.933899][ T5807] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 177.034819][ T2243] usb 3-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 177.039521][ T2243] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 177.039569][ T2243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.372183][ T33] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.480810][ T2243] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 177.523117][ T33] usb 5-1: Using ep0 maxpacket: 8 [ 177.524328][ T33] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 177.526874][ T33] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.526901][ T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.526922][ T33] usb 5-1: config 0 has no interface number 0 [ 177.526968][ T33] usb 5-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.527047][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.535085][ T33] usb 5-1: config 0 descriptor?? [ 177.555670][ T33] ldusb 5-1:0.55: Interrupt in endpoint not found [ 177.692439][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.692614][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.692752][ T7472] bridge_slave_0: entered allmulticast mode [ 177.701244][ T7472] bridge_slave_0: entered promiscuous mode [ 177.720879][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.721645][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.728057][ T7472] bridge_slave_1: entered allmulticast mode [ 177.752667][ T7472] bridge_slave_1: entered promiscuous mode [ 177.783852][ T33] usb 5-1: USB disconnect, device number 17 [ 177.893803][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.900701][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.982841][ T7472] team0: Port device team_slave_0 added [ 177.988509][ T7472] team0: Port device team_slave_1 added [ 178.067451][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.067478][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.067506][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.118449][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.118570][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.118639][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.285178][ T7472] hsr_slave_0: entered promiscuous mode [ 178.287419][ T7472] hsr_slave_1: entered promiscuous mode [ 178.289021][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 178.289044][ T7472] Cannot create hsr debugfs directory [ 178.432183][ T2243] lg-g15 0003:046D:C222.0008: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 178.444121][ T55] Bluetooth: hci4: command tx timeout [ 178.462524][ T2243] usb 3-1: USB disconnect, device number 33 [ 178.654773][ T7472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.658909][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.659841][ T7472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.680405][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.687624][ T7472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.706172][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.707587][ T7472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.710175][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.752007][ T11] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 178.792828][ T5738] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 178.824884][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.848479][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.861668][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.861804][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.885339][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.885473][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.908393][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 178.909495][ T11] usb 1-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00 [ 178.911220][ T11] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 178.911253][ T11] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.911282][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.911317][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.973864][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 178.976584][ T11] usb 1-1: config 0 descriptor?? [ 178.981118][ T5738] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.992594][ T5738] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 178.992665][ T5738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.992730][ T5738] usb 5-1: config 0 has no interface number 0 [ 178.992833][ T5738] usb 5-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.992957][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.058701][ T5738] usb 5-1: config 0 descriptor?? [ 179.087267][ T5738] ldusb 5-1:0.55: Interrupt in endpoint not found [ 179.298250][ T33] usb 5-1: USB disconnect, device number 18 [ 179.418159][ T11] input: HID 05ac:0269 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0269.0009/input/input35 [ 179.592427][ T11] magicmouse 0003:05AC:0269.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 179.659077][ T11] usb 1-1: USB disconnect, device number 32 [ 179.795038][ T7522] fido_id[7522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 180.070284][ T7531] input: syz1 as /devices/virtual/input/input36 [ 180.108401][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.532487][ T55] Bluetooth: hci4: command tx timeout [ 180.592264][ T11] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 180.737263][ T7472] veth0_vlan: entered promiscuous mode [ 180.750115][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 180.751049][ T11] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 180.771405][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.771432][ T11] usb 1-1: config 0 has no interfaces? [ 180.799306][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.799336][ T11] usb 1-1: Product: syz [ 180.799351][ T11] usb 1-1: Manufacturer: syz [ 180.799368][ T11] usb 1-1: SerialNumber: syz [ 180.810317][ T7472] veth1_vlan: entered promiscuous mode [ 180.834988][ T11] usb 1-1: config 0 descriptor?? [ 180.901523][ T7472] veth0_macvtap: entered promiscuous mode [ 180.919285][ T7472] veth1_macvtap: entered promiscuous mode [ 180.971266][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.000564][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.074587][ T1315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.102165][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.102939][ T1286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.102979][ T1286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.258258][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.258282][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.390527][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.390549][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.497876][ T7553] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.853975][ T5738] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 182.023142][ T5738] usb 6-1: New USB device found: idVendor=1038, idProduct=1410, bcdDevice=0.40 [ 182.025007][ T5738] usb 6-1: config 1 interface 0 has no altsetting 0 [ 182.036173][ T5738] usb 6-1: string descriptor 0 read error: -22 [ 182.036539][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.496513][ T5738] hid_parser_main: 466 callbacks suppressed [ 182.496540][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502162][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502263][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502333][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502405][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502476][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502552][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502620][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502690][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.502747][ T5738] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 182.602226][ T55] Bluetooth: hci4: command tx timeout [ 182.787384][ T5738] steelseries 0003:1038:1410.000A: missing HID_OUTPUT_REPORT 0 [ 182.806523][ T5738] usb 6-1: USB disconnect, device number 2 [ 183.158538][ T7584] netlink: 'syz.4.526': attribute type 21 has an invalid length. [ 183.176673][ T7584] netlink: 156 bytes leftover after parsing attributes in process `syz.4.526'. [ 183.591724][ T5738] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.752984][ T5738] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=0.00 [ 183.755064][ T5738] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.755113][ T5738] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.755141][ T5738] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.755330][ T5738] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.755376][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.818900][ T5738] cxacru 6-1:1.0: cxacru_bind: interface has incorrect endpoints [ 183.819097][ T5738] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 184.044830][ T7589] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.099000][ T5738] usb 1-1: USB disconnect, device number 33 [ 184.145016][ T5643] usb 6-1: USB disconnect, device number 3 [ 184.232484][ T7592] comedi comedi3: board detection failed [ 184.621184][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 184.682698][ T55] Bluetooth: hci4: command tx timeout [ 184.929973][ T7605] FAULT_INJECTION: forcing a failure. [ 184.929973][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.930019][ T7605] CPU: 1 UID: 0 PID: 7605 Comm: syz.5.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.930049][ T7605] Tainted: [L]=SOFTLOCKUP [ 184.930056][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 184.930070][ T7605] Call Trace: [ 184.930078][ T7605] [ 184.930087][ T7605] dump_stack_lvl+0xe8/0x150 [ 184.930125][ T7605] should_fail_ex+0x3eb/0x540 [ 184.930157][ T7605] _copy_from_user+0x2d/0xb0 [ 184.930198][ T7605] ___sys_sendmsg+0x1c6/0x360 [ 184.930224][ T7605] ? __lock_acquire+0x747/0x2de0 [ 184.930252][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.930314][ T7605] ? __fget_files+0x3a2/0x420 [ 184.930339][ T7605] ? __fget_files+0x2a/0x420 [ 184.930373][ T7605] __x64_sys_sendmsg+0x1b1/0x290 [ 184.930403][ T7605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.930451][ T7605] do_syscall_64+0x16a/0x530 [ 184.930469][ T7605] ? trace_irq_disable+0x3b/0x140 [ 184.930495][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.930516][ T7605] ? clear_bhb_loop+0x70/0xc0 [ 184.930549][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.930569][ T7605] RIP: 0033:0x00007f0a2a59fb19 [ 184.930589][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.930606][ T7605] RSP: 002b:00007f0a2b3a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.930627][ T7605] RAX: ffffffffffffffda RBX: 00007f0a2a825fa0 RCX: 00007f0a2a59fb19 [ 184.930642][ T7605] RDX: 0000000004000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 184.930655][ T7605] RBP: 00007f0a2b3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.930668][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.930680][ T7605] R13: 00007f0a2a826038 R14: 00007f0a2a825fa0 R15: 00007ffc44c70168 [ 184.930712][ T7605] [ 185.214509][ T7610] Bluetooth: hci0: service_discovery: too big uuid_count value 38932 [ 185.299716][ T7608] ISOFS: Unable to identify CD-ROM format. [ 185.592347][ T5738] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 185.641758][ T33] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 185.742463][ T5738] usb 1-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 185.744114][ T5738] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 185.744162][ T5738] usb 1-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.744191][ T5738] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.744224][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.751553][ T5738] usb 1-1: config 0 descriptor?? [ 185.803575][ T33] usb 6-1: Using ep0 maxpacket: 32 [ 185.808458][ T33] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 185.828380][ T33] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.828407][ T33] usb 6-1: config 0 has no interfaces? [ 185.859515][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.859542][ T33] usb 6-1: Product: syz [ 185.859558][ T33] usb 6-1: Manufacturer: syz [ 185.859574][ T33] usb 6-1: SerialNumber: syz [ 185.892029][ T33] usb 6-1: config 0 descriptor?? [ 185.993968][ T7613] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 186.157551][ T5738] usb 1-1: string descriptor 0 read error: -71 [ 186.169422][ T5738] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 186.187656][ T5738] usb 1-1: USB disconnect, device number 34 [ 186.391503][ T11] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 186.521537][ T11] usb 5-1: device descriptor read/64, error -71 [ 186.761520][ T11] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 186.901506][ T11] usb 5-1: device descriptor read/64, error -71 [ 187.013901][ T11] usb usb5-port1: attempt power cycle [ 187.092433][ T5738] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 187.241642][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 187.243437][ T5738] usb 1-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 187.245122][ T5738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.245173][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.251219][ T5738] usb 1-1: config 0 descriptor?? [ 187.299401][ T5738] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 187.361482][ T11] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 187.382701][ T11] usb 5-1: device descriptor read/8, error -71 [ 187.623383][ T11] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 187.652583][ T11] usb 5-1: device descriptor read/8, error -71 [ 187.763700][ T11] usb usb5-port1: unable to enumerate USB device [ 188.075742][ T4992] bcm5974 1-1:0.0: could not read from device [ 188.102088][ T4992] bcm5974 1-1:0.0: could not read from device [ 188.110096][ T4992] bcm5974 1-1:0.0: could not read from device [ 188.119497][ T5738] usb 1-1: USB disconnect, device number 35 [ 189.004069][ T11] usb 6-1: USB disconnect, device number 4 [ 189.114075][ T34] audit: type=1804 audit(1793914444.073:6): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.545" name="/newroot/6/file1" dev="tmpfs" ino=50 res=1 errno=0 [ 189.736767][ T5738] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 189.893223][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 189.895062][ T5738] usb 1-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 189.896339][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.896374][ T5738] usb 1-1: config 0 has no interface number 0 [ 189.896419][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.896439][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.896466][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.899921][ T5738] usb 1-1: config 0 descriptor?? [ 190.635890][ T5738] uclogic 0003:28BD:0071.000B: pen parameters not found [ 190.635928][ T5738] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring [ 190.701142][ T5807] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.741479][ T33] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 190.861200][ T5807] usb 6-1: Using ep0 maxpacket: 32 [ 190.862203][ T5807] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 190.863800][ T5807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.863820][ T5807] usb 6-1: config 0 has no interfaces? [ 190.867493][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.867518][ T5807] usb 6-1: Product: syz [ 190.867532][ T5807] usb 6-1: Manufacturer: syz [ 190.867547][ T5807] usb 6-1: SerialNumber: syz [ 190.882937][ T5807] usb 6-1: config 0 descriptor?? [ 190.917551][ T33] usb 5-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 190.926454][ T33] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 190.926527][ T33] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 190.956799][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.956874][ T33] usb 5-1: Product: syz [ 190.956913][ T33] usb 5-1: Manufacturer: syz [ 190.956958][ T33] usb 5-1: SerialNumber: syz [ 190.980147][ T33] usb 5-1: config 0 descriptor?? [ 191.006613][ T33] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 192.368959][ T7671] can0: slcan on ptm0. [ 192.523121][ T5819] usb 1-1: USB disconnect, device number 36 [ 193.311782][ T33] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 193.452960][ T33] usb 1-1: device descriptor read/64, error -71 [ 193.621612][ T7667] can0 (unregistered): slcan off ptm0. [ 193.629974][ T5738] usb 5-1: USB disconnect, device number 23 [ 193.702171][ T33] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 193.841493][ T33] usb 1-1: device descriptor read/64, error -71 [ 193.964236][ T33] usb usb1-port1: attempt power cycle [ 194.087401][ T7714] comedi comedi1: 8255: I/O base address not correctly aligned [ 194.134463][ T5819] usb 6-1: USB disconnect, device number 5 [ 194.286712][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.286771][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.317244][ T33] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 194.337087][ T33] usb 1-1: device descriptor read/8, error -71 [ 194.455964][ T7722] FAULT_INJECTION: forcing a failure. [ 194.455964][ T7722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.455998][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.456028][ T7722] Tainted: [L]=SOFTLOCKUP [ 194.456036][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 194.456049][ T7722] Call Trace: [ 194.456058][ T7722] [ 194.456067][ T7722] dump_stack_lvl+0xe8/0x150 [ 194.456105][ T7722] should_fail_ex+0x3eb/0x540 [ 194.456138][ T7722] _copy_from_user+0x2d/0xb0 [ 194.456169][ T7722] wext_handle_ioctl+0xc7/0x1d0 [ 194.456198][ T7722] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 194.456242][ T7722] sock_ioctl+0x159/0x7e0 [ 194.456275][ T7722] ? __fget_files+0x2a/0x420 [ 194.456304][ T7722] ? __pfx_sock_ioctl+0x10/0x10 [ 194.456337][ T7722] ? __fget_files+0x2a/0x420 [ 194.456365][ T7722] ? __fget_files+0x2a/0x420 [ 194.456399][ T7722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 194.456432][ T7722] ? __pfx_sock_ioctl+0x10/0x10 [ 194.456466][ T7722] __se_sys_ioctl+0xfc/0x170 [ 194.456503][ T7722] do_syscall_64+0x16a/0x530 [ 194.456523][ T7722] ? trace_irq_disable+0x3b/0x140 [ 194.456551][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.456574][ T7722] ? clear_bhb_loop+0x70/0xc0 [ 194.456602][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.456624][ T7722] RIP: 0033:0x00007feb3959fb19 [ 194.456646][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.456664][ T7722] RSP: 002b:00007feb377f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.456689][ T7722] RAX: ffffffffffffffda RBX: 00007feb39825fa0 RCX: 00007feb3959fb19 [ 194.456706][ T7722] RDX: 0000200000000100 RSI: 0000000000008b14 RDI: 0000000000000004 [ 194.456720][ T7722] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.456734][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.456748][ T7722] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 194.456782][ T7722] [ 194.594038][ T33] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 194.639337][ T33] usb 1-1: device descriptor read/8, error -71 [ 194.741995][ T33] usb usb1-port1: unable to enumerate USB device [ 195.108901][ T34] audit: type=1326 audit(1793914450.063:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.564" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7feb3a36e023 code=0x0 [ 195.286952][ T7738] netlink: 104 bytes leftover after parsing attributes in process `syz.4.564'. [ 195.516294][ T4958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.535400][ T4958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.543675][ T4958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.553382][ T4958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.554652][ T4958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.653184][ T5738] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 195.755726][ T1299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.811655][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 195.814570][ T5738] usb 6-1: New USB device found: idVendor=056e, idProduct=00fc, bcdDevice=0.00 [ 195.815927][ T5738] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 195.815951][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.815970][ T5738] usb 6-1: config 0 has no interface number 0 [ 195.816011][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.864741][ T5738] usb 6-1: config 0 descriptor?? [ 196.037874][ T1299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.097754][ T7756] netlink: 148 bytes leftover after parsing attributes in process `syz.5.567'. [ 196.198156][ T1299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.284069][ T1299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.401308][ T5807] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 196.477688][ T1299] bridge_slave_1: left allmulticast mode [ 196.477714][ T1299] bridge_slave_1: left promiscuous mode [ 196.477910][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.508301][ T1299] bridge_slave_0: left allmulticast mode [ 196.508322][ T1299] bridge_slave_0: left promiscuous mode [ 196.508501][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.551045][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 196.552205][ T5807] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 196.555821][ T5807] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 196.563553][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.564162][ T5807] usb 5-1: Product: syz [ 196.564178][ T5807] usb 5-1: Manufacturer: syz [ 196.564193][ T5807] usb 5-1: SerialNumber: syz [ 196.635069][ T5807] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 196.635141][ T5807] imon 5-1:155.0: unable to initialize intf0, err -19 [ 196.996070][ T7744] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.575375][ T5302] 8021q: adding VLAN 0 to HW filter on device eth5 [ 197.640712][ T55] Bluetooth: hci0: command tx timeout [ 198.198420][ T1299] hsr_slave_0: left promiscuous mode [ 198.216176][ T1299] hsr_slave_1: left promiscuous mode [ 198.217213][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.217235][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.218284][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.218303][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.264435][ T1299] veth1_macvtap: left promiscuous mode [ 198.264515][ T1299] veth0_macvtap: left promiscuous mode [ 198.264741][ T1299] veth1_vlan: left promiscuous mode [ 198.458579][ T5819] usb 6-1: USB disconnect, device number 6 [ 198.585229][ T34] audit: type=1804 audit(1793914453.543:8): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.574" name="/newroot/14/file1" dev="tmpfs" ino=101 res=1 errno=0 [ 198.775749][ T1299] team0 (unregistering): Port device team_slave_1 removed [ 198.809820][ T1299] team0 (unregistering): Port device team_slave_0 removed [ 199.001579][ T7821] FAULT_INJECTION: forcing a failure. [ 199.001579][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 199.001660][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.0.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.001690][ T7821] Tainted: [L]=SOFTLOCKUP [ 199.001699][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 199.001713][ T7821] Call Trace: [ 199.001721][ T7821] [ 199.001730][ T7821] dump_stack_lvl+0xe8/0x150 [ 199.001769][ T7821] should_fail_ex+0x3eb/0x540 [ 199.001802][ T7821] should_failslab+0xa8/0x100 [ 199.001845][ T7821] __kmalloc_cache_noprof+0x9e/0x600 [ 199.001875][ T7821] ? __kmalloc_noprof+0x1a6/0x710 [ 199.001901][ T7821] ? mpi_alloc+0x52/0x140 [ 199.001928][ T7821] ? mpi_alloc+0x52/0x140 [ 199.001963][ T7821] mpi_alloc+0x52/0x140 [ 199.001995][ T7821] mpi_read_raw_data+0x139/0x970 [ 199.002038][ T7821] rsa_set_pub_key+0x30a/0x5b0 [ 199.002082][ T7821] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 199.002123][ T7821] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 199.002157][ T7821] software_key_query+0x760/0xe20 [ 199.002190][ T7821] ? __pfx_software_key_query+0x10/0x10 [ 199.002230][ T7821] ? __might_fault+0xaf/0x130 [ 199.002261][ T7821] keyctl_pkey_params_get_2+0x23d/0x4b0 [ 199.002293][ T7821] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 199.002325][ T7821] ? get_pid_task+0x20/0x1f0 [ 199.002363][ T7821] keyctl_pkey_e_d_s+0xce/0x310 [ 199.002393][ T7821] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 199.002439][ T7821] __se_sys_keyctl+0x494/0xbc0 [ 199.002475][ T7821] ? __pfx___se_sys_keyctl+0x10/0x10 [ 199.002505][ T7821] ? __mutex_unlock_slowpath+0x731/0x900 [ 199.002530][ T7821] ? __fget_files+0x2a/0x420 [ 199.002558][ T7821] ? __fget_files+0x3a2/0x420 [ 199.002586][ T7821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.002612][ T7821] ? fdget+0x1ac/0x250 [ 199.002644][ T7821] ? fput+0xa0/0xd0 [ 199.002668][ T7821] ? ksys_write+0x242/0x270 [ 199.002701][ T7821] ? __pfx_ksys_write+0x10/0x10 [ 199.002738][ T7821] ? __x64_sys_keyctl+0x20/0xc0 [ 199.002779][ T7821] do_syscall_64+0x16a/0x530 [ 199.002798][ T7821] ? trace_irq_disable+0x3b/0x140 [ 199.002826][ T7821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.002848][ T7821] ? clear_bhb_loop+0x70/0xc0 [ 199.002876][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.002898][ T7821] RIP: 0033:0x00007f84abf9fb19 [ 199.002920][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.002938][ T7821] RSP: 002b:00007f84acd9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 199.002962][ T7821] RAX: ffffffffffffffda RBX: 00007f84ac225fa0 RCX: 00007f84abf9fb19 [ 199.002978][ T7821] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000019 [ 199.002992][ T7821] RBP: 00007f84acd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.003007][ T7821] R10: 0000200000000d00 R11: 0000000000000246 R12: 0000000000000001 [ 199.003021][ T7821] R13: 00007f84ac226038 R14: 00007f84ac225fa0 R15: 00007ffc74498288 [ 199.003062][ T7821] [ 199.347038][ T5302] 8021q: adding VLAN 0 to HW filter on device eth6 [ 199.514583][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.514771][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.514888][ T7744] bridge_slave_0: entered allmulticast mode [ 199.517468][ T7744] bridge_slave_0: entered promiscuous mode [ 199.563025][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.563132][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.563264][ T7744] bridge_slave_1: entered allmulticast mode [ 199.579728][ T7744] bridge_slave_1: entered promiscuous mode [ 199.675273][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.680242][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.724122][ T55] Bluetooth: hci0: command tx timeout [ 199.761385][ T7744] team0: Port device team_slave_0 added [ 199.768438][ T7744] team0: Port device team_slave_1 added [ 199.828381][ T5819] usb 5-1: USB disconnect, device number 24 [ 199.851220][ T33] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 199.897519][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.897538][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.897566][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.947735][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.947752][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.947781][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.022716][ T33] usb 6-1: Using ep0 maxpacket: 32 [ 200.024724][ T33] usb 6-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 200.028320][ T33] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 200.028364][ T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.028392][ T33] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 200.028436][ T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.048946][ T33] usb 6-1: config 0 descriptor?? [ 200.110568][ T5807] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 200.175838][ T7744] hsr_slave_0: entered promiscuous mode [ 200.177063][ T7744] hsr_slave_1: entered promiscuous mode [ 200.177957][ T7744] debugfs: 'hsr0' already exists in 'hsr' [ 200.177973][ T7744] Cannot create hsr debugfs directory [ 200.286793][ T5807] usb 1-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=ac.66 [ 200.290219][ T5807] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.290246][ T5807] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.290558][ T5807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.290752][ T5807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 200.356142][ T5807] usb 1-1: New USB device strings: Mfr=99, Product=111, SerialNumber=3 [ 200.356174][ T5807] usb 1-1: Product: syz [ 200.356191][ T5807] usb 1-1: Manufacturer: syz [ 200.356207][ T5807] usb 1-1: SerialNumber: syz [ 200.539037][ T55] Bluetooth: hci5: urb ffff888036d82d00 submission failed (90) [ 200.575515][ T33] hid_parser_main: 4007 callbacks suppressed [ 200.575539][ T33] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 200.575568][ T33] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x4 [ 200.663703][ T5807] usb 1-1: USB disconnect, device number 41 [ 201.118327][ T33] hid-led 0003:0FC5:B080.000C: probe with driver hid-led failed with error -71 [ 201.138981][ T33] usb 6-1: USB disconnect, device number 7 [ 201.237074][ T5302] 8021q: adding VLAN 0 to HW filter on device eth7 [ 201.303447][ T7744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.322790][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.325649][ T7744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.339556][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.345361][ T7744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.383436][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.388752][ T7744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.406077][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.458573][ T7871] program syz.4.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.691474][ T34] audit: type=1804 audit(1793914456.653:9): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.584" name="/newroot/167/file1" dev="tmpfs" ino=941 res=1 errno=0 [ 201.735737][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.807932][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.812350][ T55] Bluetooth: hci0: command tx timeout [ 201.824169][ T5643] kernel write not supported for file /vbi9 (pid: 5643 comm: kworker/1:3) [ 201.854500][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.854694][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.895485][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.895593][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.105884][ T7895] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 202.180291][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 202.300424][ T5302] 8021q: adding VLAN 0 to HW filter on device eth8 [ 202.341809][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 202.344184][ T11] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 202.347771][ T11] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 202.385914][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.385945][ T11] usb 6-1: Product: syz [ 202.385962][ T11] usb 6-1: Manufacturer: syz [ 202.385977][ T11] usb 6-1: SerialNumber: syz [ 202.423433][ T11] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 202.423553][ T11] imon 6-1:155.0: unable to initialize intf0, err -19 [ 202.805804][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.841570][ T5643] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 203.016135][ T5643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.016197][ T5643] usb 1-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 203.017875][ T5643] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 203.017904][ T5643] usb 1-1: config 142 has no interface number 0 [ 203.017945][ T5643] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 203.017973][ T5643] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 203.017998][ T5643] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 203.018022][ T5643] usb 1-1: config 142 interface 251 has no altsetting 0 [ 203.031542][ T5643] usb 1-1: string descriptor 0 read error: -22 [ 203.031879][ T5643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.045903][ T7912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.052087][ T7912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.067128][ T5643] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 203.085515][ T5643] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 203.226304][ T7744] veth0_vlan: entered promiscuous mode [ 203.244615][ T7744] veth1_vlan: entered promiscuous mode [ 203.293333][ T7927] FAULT_INJECTION: forcing a failure. [ 203.293333][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 203.293366][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.4.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.293392][ T7927] Tainted: [L]=SOFTLOCKUP [ 203.293400][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.293412][ T7927] Call Trace: [ 203.293419][ T7927] [ 203.293428][ T7927] dump_stack_lvl+0xe8/0x150 [ 203.293462][ T7927] should_fail_ex+0x3eb/0x540 [ 203.293497][ T7927] should_failslab+0xa8/0x100 [ 203.293552][ T7927] __kmalloc_noprof+0xf9/0x710 [ 203.293577][ T7927] ? rcu_is_watching+0x16/0xb0 [ 203.293607][ T7927] ? tomoyo_realpath_from_path+0xf2/0x640 [ 203.293633][ T7927] ? tomoyo_realpath_from_path+0xf2/0x640 [ 203.293666][ T7927] tomoyo_realpath_from_path+0xf2/0x640 [ 203.293715][ T7927] tomoyo_path_perm+0x283/0x560 [ 203.293749][ T7927] ? tomoyo_path_perm+0x251/0x560 [ 203.293779][ T7744] veth0_macvtap: entered promiscuous mode [ 203.293783][ T7927] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 203.293850][ T7927] ? generic_fillattr+0x519/0x840 [ 203.293880][ T7927] ? from_kgid+0x1c6/0x660 [ 203.293913][ T7927] security_inode_getattr+0x12b/0x310 [ 203.293945][ T7927] vfs_getattr+0x23/0x70 [ 203.293970][ T7927] ovl_copy_up_flags+0xa31/0x3890 [ 203.294000][ T7927] ? __lock_acquire+0x747/0x2de0 [ 203.294047][ T7927] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 203.294072][ T7927] ? lock_acquire+0x115/0x350 [ 203.294100][ T7927] ? __lock_acquire+0x747/0x2de0 [ 203.294137][ T7927] ? is_bpf_text_address+0x292/0x2b0 [ 203.294170][ T7927] ? is_bpf_text_address+0x26/0x2b0 [ 203.294207][ T7927] ? kernel_text_address+0xa5/0xe0 [ 203.294239][ T7927] ? lock_acquire+0x115/0x350 [ 203.294277][ T7927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 203.294312][ T7927] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 203.294343][ T7927] ? stack_depot_save_flags+0x419/0x840 [ 203.294379][ T7927] ? kasan_save_stack+0x4d/0x60 [ 203.294406][ T7927] ? kasan_save_stack+0x3e/0x60 [ 203.294433][ T7927] ? __kasan_record_aux_stack+0xc5/0xe0 [ 203.294457][ T7927] ? task_work_add+0xae/0x420 [ 203.294478][ T7927] ? __fput_deferred+0x152/0x390 [ 203.294520][ T7927] ? ovl_fileattr_get+0x196/0x400 [ 203.294557][ T7927] ? vfs_fileattr_set+0x2e2/0xd10 [ 203.294594][ T7927] ? ioctl_fssetxattr+0x349/0x3b0 [ 203.294622][ T7927] ? do_vfs_ioctl+0x901/0x1530 [ 203.294653][ T7927] ? __se_sys_ioctl+0x82/0x170 [ 203.294690][ T7927] ? do_syscall_64+0x16a/0x530 [ 203.294708][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.294811][ T7927] ? __fput_deferred+0x222/0x390 [ 203.294836][ T7927] ? __pfx_hook_capable+0x10/0x10 [ 203.294860][ T7927] ? bpf_lsm_inode_file_getattr+0x9/0x20 [ 203.294887][ T7927] ? security_inode_file_getattr+0x76/0x270 [ 203.294923][ T7927] ovl_fileattr_set+0x204/0x580 [ 203.294950][ T7927] ? __pfx_ovl_fileattr_set+0x10/0x10 [ 203.294973][ T7927] ? bpf_lsm_capable+0x9/0x20 [ 203.294991][ T7927] ? security_capable+0x7e/0x2c0 [ 203.295013][ T7927] ? fscrypt_prepare_setflags+0x62/0x3c0 [ 203.295037][ T7927] vfs_fileattr_set+0xa2b/0xd10 [ 203.295063][ T7927] ? mnt_get_write_access+0x66/0x280 [ 203.295103][ T7927] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 203.295139][ T7927] ? mnt_want_write_file+0x172/0x200 [ 203.295173][ T7927] ioctl_fssetxattr+0x349/0x3b0 [ 203.295205][ T7927] ? __pfx_ioctl_fssetxattr+0x10/0x10 [ 203.295231][ T7927] ? kasan_quarantine_put+0xbb/0x1f0 [ 203.295268][ T7927] ? tomoyo_path_number_perm+0x219/0x5f0 [ 203.295301][ T7927] ? tomoyo_path_number_perm+0x219/0x5f0 [ 203.295335][ T7927] do_vfs_ioctl+0x901/0x1530 [ 203.295369][ T7927] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.295445][ T7927] ? __fget_files+0x2a/0x420 [ 203.295475][ T7927] ? __fget_files+0x2a/0x420 [ 203.295501][ T7927] ? __fget_files+0x2a/0x420 [ 203.295531][ T7927] ? bpf_lsm_file_ioctl+0x9/0x20 [ 203.295562][ T7927] __se_sys_ioctl+0x82/0x170 [ 203.295596][ T7927] do_syscall_64+0x16a/0x530 [ 203.295614][ T7927] ? trace_irq_disable+0x3b/0x140 [ 203.295639][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.295659][ T7927] ? clear_bhb_loop+0x70/0xc0 [ 203.295689][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.295710][ T7927] RIP: 0033:0x00007feb3959fb19 [ 203.295729][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.295746][ T7927] RSP: 002b:00007feb377f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.295769][ T7927] RAX: ffffffffffffffda RBX: 00007feb39825fa0 RCX: 00007feb3959fb19 [ 203.295783][ T7927] RDX: 00002000000003c0 RSI: 00000000401c5820 RDI: 0000000000000004 [ 203.295796][ T7927] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.295809][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.295820][ T7927] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 203.295853][ T7927] [ 203.296466][ T7927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.312721][ T7744] veth1_macvtap: entered promiscuous mode [ 203.574708][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.741250][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.891154][ T55] Bluetooth: hci0: command tx timeout [ 203.950533][ T65] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.950578][ T65] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.955514][ T7934] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 203.956123][ T7934] clocksource: Switched to clocksource tsc [ 203.997582][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.997603][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.047851][ C1] usb 1-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 204.047905][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 204.048412][ C1] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 204.069962][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.069983][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.091716][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.091849][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.240356][ T5643] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 204.391124][ T5643] usb 5-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 204.392201][ T5643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.392229][ T5643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 204.392254][ T5643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 204.392274][ T5643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 204.394292][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.394317][ T5643] usb 5-1: Product: syz [ 204.394332][ T5643] usb 5-1: Manufacturer: syz [ 204.394346][ T5643] usb 5-1: SerialNumber: syz [ 204.398375][ T5643] usb 5-1: config 0 descriptor?? [ 204.409608][ T5643] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 204.512129][ T5759] usb 1-1: USB disconnect, device number 42 [ 204.549089][ T5759] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 204.549936][ T5759] cypress_m8 1-1:142.251: device disconnected [ 204.605233][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 204.609282][ T5643] scsi host1: usb-storage 5-1:0.0 [ 204.627596][ T5643] usb 5-1: USB disconnect, device number 25 [ 205.106599][ T7952] Bluetooth: (null): Too short H5 packet [ 205.107086][ T7952] Bluetooth: (null): Too short H5 packet [ 205.107359][ T7952] Bluetooth: (null): Too short H5 packet [ 205.107839][ T7952] Bluetooth: (null): Too short H5 packet [ 205.107971][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108081][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108200][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108351][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108504][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108617][ T7952] Bluetooth: (null): Too short H5 packet [ 205.108912][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109039][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109166][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109281][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109392][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109526][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109642][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109756][ T7952] Bluetooth: (null): Too short H5 packet [ 205.109867][ T7952] Bluetooth: (null): Too short H5 packet [ 205.145579][ T7952] Bluetooth: (null): Too short H5 packet [ 205.162322][ T7952] Bluetooth: (null): Too short H5 packet [ 205.162976][ T7951] Bluetooth: (null): Invalid header checksum [ 205.309014][ T7956] i2c i2c-0: new_device: Extra parameters [ 205.406753][ T7959] FAULT_INJECTION: forcing a failure. [ 205.406753][ T7959] name failslab, interval 1, probability 0, space 0, times 0 [ 205.406780][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: syz.0.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.406801][ T7959] Tainted: [L]=SOFTLOCKUP [ 205.406806][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.406815][ T7959] Call Trace: [ 205.406821][ T7959] [ 205.406827][ T7959] dump_stack_lvl+0xe8/0x150 [ 205.406855][ T7959] should_fail_ex+0x3eb/0x540 [ 205.406878][ T7959] should_failslab+0xa8/0x100 [ 205.406905][ T7959] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 205.406927][ T7959] ? __d_alloc+0x37/0x820 [ 205.406945][ T7959] ? __d_alloc+0x37/0x820 [ 205.406969][ T7959] __d_alloc+0x37/0x820 [ 205.406989][ T7959] ? seqcount_lockdep_reader_access+0xea/0x100 [ 205.407011][ T7959] d_alloc_pseudo+0x21/0xc0 [ 205.407034][ T7959] alloc_path_pseudo+0x107/0x220 [ 205.407055][ T7959] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 205.407074][ T7959] ? hugetlb_reserve_pages+0x3b2/0x1160 [ 205.407096][ T7959] alloc_file_pseudo+0xa8/0x1e0 [ 205.407116][ T7959] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 205.407142][ T7959] hugetlb_file_setup+0x3ee/0x630 [ 205.407180][ T7959] ksys_mmap_pgoff+0x1ec/0x760 [ 205.407198][ T7959] do_syscall_64+0x16a/0x530 [ 205.407211][ T7959] ? trace_irq_disable+0x3b/0x140 [ 205.407229][ T7959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.407243][ T7959] ? clear_bhb_loop+0x70/0xc0 [ 205.407261][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.407293][ T7959] RIP: 0033:0x00007f84abf9fb19 [ 205.407308][ T7959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.407321][ T7959] RSP: 002b:00007f84acd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.407337][ T7959] RAX: ffffffffffffffda RBX: 00007f84ac225fa0 RCX: 00007f84abf9fb19 [ 205.407348][ T7959] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000200000800000 [ 205.407358][ T7959] RBP: 00007f84acd9b090 R08: ffffffffffffffff R09: 0000000000000000 [ 205.407368][ T7959] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 205.407378][ T7959] R13: 00007f84ac226038 R14: 00007f84ac225fa0 R15: 00007ffc74498288 [ 205.407401][ T7959] [ 205.580331][ T27] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 205.677126][ T34] audit: type=1804 audit(1793914460.637:10): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.596" name="/newroot/171/file1" dev="tmpfs" ino=966 res=1 errno=0 [ 205.709448][ T5759] usb 6-1: USB disconnect, device number 8 [ 205.732812][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 205.733357][ T27] usb 5-1: New USB device found: idVendor=05ac, idProduct=027c, bcdDevice=0.00 [ 205.734374][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 205.734422][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 205.734455][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.738976][ T27] usb 5-1: config 0 descriptor?? [ 205.868206][ T7963] Bluetooth: MGMT ver 1.23 [ 206.153040][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.153550][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.182300][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.184243][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.186051][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.186450][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.195237][ T27] apple 0003:05AC:027C.000D: unknown main item tag 0x4 [ 206.195316][ T27] apple 0003:05AC:027C.000D: reserved main item tag 0xd [ 206.195407][ T27] apple 0003:05AC:027C.000D: unknown main item tag 0x0 [ 206.195510][ T27] apple 0003:05AC:027C.000D: global environment stack underflow [ 206.195541][ T27] apple 0003:05AC:027C.000D: item 0 4 1 11 parsing failed [ 206.197634][ T27] apple 0003:05AC:027C.000D: parse failed [ 206.197918][ T27] apple 0003:05AC:027C.000D: probe with driver apple failed with error -22 [ 206.272585][ T5643] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 206.391754][ T5759] usb 5-1: USB disconnect, device number 26 [ 206.410254][ T5643] usb 6-1: device descriptor read/64, error -71 [ 206.560261][ T916] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 206.600650][ T4958] Bluetooth: hci1: command 0x0406 tx timeout [ 206.650113][ T5643] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 206.690096][ T916] usb 1-1: device descriptor read/64, error -71 [ 206.781159][ T5643] usb 6-1: device descriptor read/64, error -71 [ 206.890521][ T5643] usb usb6-port1: attempt power cycle [ 206.930547][ T916] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 206.950693][ T7980] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.060107][ T916] usb 1-1: device descriptor read/64, error -71 [ 207.170348][ T916] usb usb1-port1: attempt power cycle [ 207.230235][ T5643] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 207.252166][ T5643] usb 6-1: device descriptor read/8, error -71 [ 207.380346][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 207.490148][ T5643] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 207.510686][ T916] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 207.512281][ T5643] usb 6-1: device descriptor read/8, error -71 [ 207.535992][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 207.537045][ T10] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.538161][ T916] usb 1-1: device descriptor read/8, error -71 [ 207.539271][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 207.576396][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.576424][ T10] usb 5-1: Product: syz [ 207.576440][ T10] usb 5-1: Manufacturer: syz [ 207.576455][ T10] usb 5-1: SerialNumber: syz [ 207.605932][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 207.606029][ T10] imon 5-1:155.0: unable to initialize intf0, err -19 [ 207.625044][ T5643] usb usb6-port1: unable to enumerate USB device [ 207.670945][ T7994] FAULT_INJECTION: forcing a failure. [ 207.670945][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 207.670981][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.6.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.671018][ T7994] Tainted: [L]=SOFTLOCKUP [ 207.671027][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 207.671040][ T7994] Call Trace: [ 207.671048][ T7994] [ 207.671058][ T7994] dump_stack_lvl+0xe8/0x150 [ 207.671095][ T7994] should_fail_ex+0x3eb/0x540 [ 207.671128][ T7994] should_failslab+0xa8/0x100 [ 207.671169][ T7994] ? alloc_pid+0x1a4/0x1340 [ 207.671195][ T7994] kmem_cache_alloc_noprof+0x9c/0x600 [ 207.671214][ T7994] ? __kmalloc_noprof+0x366/0x710 [ 207.671233][ T7994] ? security_task_alloc+0x4d/0x330 [ 207.671257][ T7994] ? copy_process+0x1c75/0x4510 [ 207.671277][ T7994] ? kvm_mmu_post_init_vm+0x147/0x2b0 [ 207.671297][ T7994] ? alloc_pid+0x1a4/0x1340 [ 207.671327][ T7994] alloc_pid+0x1a4/0x1340 [ 207.671360][ T7994] ? __pfx_alloc_pid+0x10/0x10 [ 207.671398][ T7994] ? fpu_clone+0x334/0xaf0 [ 207.671429][ T7994] ? __asan_memcpy+0x40/0x70 [ 207.671457][ T7994] ? copy_thread+0x72a/0x970 [ 207.671479][ T7994] copy_process+0x217d/0x4510 [ 207.671510][ T7994] ? copy_process+0xd17/0x4510 [ 207.671542][ T7994] ? __pfx_copy_process+0x10/0x10 [ 207.671569][ T7994] ? mutex_init_lockdep+0xdf/0x110 [ 207.671593][ T7994] vhost_task_create+0x1f9/0x380 [ 207.671632][ T7994] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 207.671666][ T7994] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 207.671688][ T7994] ? __pfx_vhost_task_create+0x10/0x10 [ 207.671704][ T7994] ? register_lock_class+0x31/0x2e0 [ 207.671728][ T7994] ? __pfx_vhost_task_fn+0x10/0x10 [ 207.671752][ T7994] ? kasan_quarantine_put+0xbb/0x1f0 [ 207.671780][ T7994] kvm_mmu_post_init_vm+0x147/0x2b0 [ 207.671804][ T7994] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 207.671826][ T7994] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 207.671848][ T7994] kvm_vcpu_ioctl+0xa61/0xfd0 [ 207.671869][ T7994] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.671901][ T7994] ? __fget_files+0x2a/0x420 [ 207.671923][ T7994] ? __fget_files+0x2a/0x420 [ 207.671944][ T7994] ? __fget_files+0x2a/0x420 [ 207.671969][ T7994] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.671994][ T7994] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.672011][ T7994] __se_sys_ioctl+0xfc/0x170 [ 207.672038][ T7994] do_syscall_64+0x16a/0x530 [ 207.672053][ T7994] ? trace_irq_disable+0x3b/0x140 [ 207.672072][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.672088][ T7994] ? clear_bhb_loop+0x70/0xc0 [ 207.672108][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.672123][ T7994] RIP: 0033:0x00007fd3e159fb19 [ 207.672139][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.672152][ T7994] RSP: 002b:00007fd3e23dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.672169][ T7994] RAX: ffffffffffffffda RBX: 00007fd3e1825fa0 RCX: 00007fd3e159fb19 [ 207.672181][ T7994] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 207.672191][ T7994] RBP: 00007fd3e23dc090 R08: 0000000000000000 R09: 0000000000000000 [ 207.672200][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.672209][ T7994] R13: 00007fd3e1826038 R14: 00007fd3e1825fa0 R15: 00007ffd69c0fb88 [ 207.672234][ T7994] [ 207.835014][ T916] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 207.932106][ T916] usb 1-1: device descriptor read/8, error -71 [ 208.040499][ T916] usb usb1-port1: unable to enumerate USB device [ 209.420980][ T5738] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 209.570146][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 209.573728][ T5738] usb 6-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 209.574850][ T5738] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.574875][ T5738] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.577090][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.577114][ T5738] usb 6-1: Product: syz [ 209.577129][ T5738] usb 6-1: Manufacturer: syz [ 209.577144][ T5738] usb 6-1: SerialNumber: syz [ 209.695513][ T34] audit: type=1326 audit(1793914464.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.0.621" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84abf9fb19 code=0x0 [ 209.741722][ T34] audit: type=1400 audit(1793914464.707:12): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=8048 comm="syz.6.622" [ 209.838285][ T5738] usb 6-1: unit 0 not found! [ 209.916398][ T5738] usb 6-1: USB disconnect, device number 13 [ 209.966887][ T5653] udevd[5653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.002000][ T5643] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 210.152225][ T5643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.152644][ T5643] usb 1-1: not running at top speed; connect to a high speed hub [ 210.152666][ T5643] usb 1-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 210.155805][ T5643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.155832][ T5643] usb 1-1: Product: syz [ 210.155850][ T5643] usb 1-1: Manufacturer: syz [ 210.155866][ T5643] usb 1-1: SerialNumber: syz [ 210.183495][ T5643] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 210.375923][ T8050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.383019][ T8055] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 210.406904][ T8050] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 210.415932][ T5643] usb 1-1: unit 2 not found! [ 210.424557][ T8057] FAULT_INJECTION: forcing a failure. [ 210.424557][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 210.424590][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.5.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.424620][ T8057] Tainted: [L]=SOFTLOCKUP [ 210.424629][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.424642][ T8057] Call Trace: [ 210.424650][ T8057] [ 210.424660][ T8057] dump_stack_lvl+0xe8/0x150 [ 210.424699][ T8057] should_fail_ex+0x3eb/0x540 [ 210.424731][ T8057] ? __alloc_empty_sheaf+0x28/0x40 [ 210.424768][ T8057] should_failslab+0xa8/0x100 [ 210.424805][ T8057] ? __alloc_empty_sheaf+0x28/0x40 [ 210.424831][ T8057] __kmalloc_flags_noprof+0x123/0x790 [ 210.424865][ T8057] ? __alloc_empty_sheaf+0x28/0x40 [ 210.424899][ T8057] __alloc_empty_sheaf+0x28/0x40 [ 210.424926][ T8057] __pcs_replace_empty_main+0x43b/0x6c0 [ 210.424972][ T8057] kmem_cache_alloc_noprof+0x394/0x600 [ 210.424998][ T8057] ? jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 210.425024][ T8057] ? kmem_cache_alloc_noprof+0x151/0x600 [ 210.425051][ T8057] ? jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 210.425086][ T8057] jffs2_prealloc_raw_node_refs+0xf8/0x800 [ 210.425118][ T8057] jffs2_scan_medium+0x1924/0x7240 [ 210.425168][ T8057] ? kasan_save_track+0x51/0x90 [ 210.425203][ T8057] ? mtd_get_sb+0x195/0x420 [ 210.425244][ T8057] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 210.425297][ T8057] ? rcu_is_watching+0x16/0xb0 [ 210.425330][ T8057] ? trace_kmalloc+0x2a/0xf0 [ 210.425361][ T8057] ? __kmalloc_noprof+0x387/0x710 [ 210.425390][ T8057] ? jffs2_sum_init+0xb7/0x220 [ 210.425417][ T8057] ? jffs2_sum_init+0xb7/0x220 [ 210.425453][ T8057] ? jffs2_sum_init+0x112/0x220 [ 210.425484][ T8057] jffs2_do_mount_fs+0x775/0x22b0 [ 210.425514][ T8057] ? trace_kmalloc+0x2a/0xf0 [ 210.425545][ T8057] ? __raw_spin_lock_init+0x45/0x100 [ 210.425591][ T8057] jffs2_do_fill_super+0x555/0xc60 [ 210.425633][ T8057] ? __pfx_jffs2_fill_super+0x10/0x10 [ 210.425665][ T8057] mtd_get_sb+0x195/0x420 [ 210.425684][ T8057] ? __pfx_jffs2_fill_super+0x10/0x10 [ 210.425718][ T8057] ? __pfx_jffs2_fill_super+0x10/0x10 [ 210.425760][ T8057] get_tree_mtd+0x597/0x7d0 [ 210.425783][ T8057] ? __pfx_jffs2_fill_super+0x10/0x10 [ 210.425816][ T8057] ? __pfx_get_tree_mtd+0x10/0x10 [ 210.425849][ T8057] vfs_get_tree+0x92/0x2a0 [ 210.425887][ T8057] do_new_mount+0x325/0xb00 [ 210.425922][ T8057] ? __pfx_do_new_mount+0x10/0x10 [ 210.425953][ T8057] ? ns_capable+0x84/0xe0 [ 210.425983][ T8057] ? path_mount+0x647/0x1050 [ 210.426014][ T8057] ? user_path_at+0xd4/0x160 [ 210.426048][ T8057] __se_sys_mount+0x31d/0x420 [ 210.426084][ T8057] ? __pfx___se_sys_mount+0x10/0x10 [ 210.426119][ T8057] ? __x64_sys_mount+0x20/0xc0 [ 210.426150][ T8057] do_syscall_64+0x16a/0x530 [ 210.426189][ T8057] ? trace_irq_disable+0x3b/0x140 [ 210.426219][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.426243][ T8057] ? clear_bhb_loop+0x70/0xc0 [ 210.426274][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.426297][ T8057] RIP: 0033:0x00007f0a2a59fb19 [ 210.426321][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.426341][ T8057] RSP: 002b:00007f0a2b3a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.426366][ T8057] RAX: ffffffffffffffda RBX: 00007f0a2a825fa0 RCX: 00007f0a2a59fb19 [ 210.426384][ T8057] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 210.426402][ T8057] RBP: 00007f0a2a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 210.426417][ T8057] R10: 0000000058000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.426432][ T8057] R13: 00007f0a2a826038 R14: 00007f0a2a825fa0 R15: 00007ffc44c70168 [ 210.426479][ T8057] [ 210.429403][ T8057] jffs2: notice: (8057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.435760][ T5643] usb 1-1: unit 3 not found! [ 210.907774][ T8050] usb3503 0-0008: unknown mode is requested [ 210.907796][ T8050] usb3503 0-0008: usb3503_probe: probed in standby mode [ 210.909552][ T916] usb 5-1: USB disconnect, device number 27 [ 210.952560][ T8050] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 210.954181][ T8060] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 211.013073][ T5643] usb 1-1: USB disconnect, device number 47 [ 211.110713][ T11] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 211.260713][ T11] usb 6-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 211.261758][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.261781][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.262841][ T11] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 211.262858][ T11] usb 6-1: Manufacturer: syz [ 211.265008][ T11] usb 6-1: config 0 descriptor?? [ 211.340305][ T916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 211.492444][ T916] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.494348][ T916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.497607][ T916] usb 5-1: config 0 descriptor?? [ 211.702780][ T916] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 211.917384][ T916] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 211.917412][ T916] [drm] Initialized udl on minor 1 [ 213.048447][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 213.048493][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 213.142143][ T8084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.632'. [ 213.142172][ T8084] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 213.142182][ T8084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.632'. [ 213.179543][ T8085] No source specified [ 213.912484][ T11] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71 [ 213.912571][ T11] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 213.912589][ T11] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71 [ 213.912641][ T11] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 213.912766][ T11] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 213.963738][ T11] usb 6-1: USB disconnect, device number 14 [ 214.420154][ T11] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 214.480118][ T5643] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 214.570515][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 214.572927][ T11] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.575189][ T11] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.575233][ T11] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 214.579261][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.579284][ T11] usb 1-1: Product: syz [ 214.579297][ T11] usb 1-1: Manufacturer: syz [ 214.579311][ T11] usb 1-1: SerialNumber: syz [ 214.635821][ T5643] usb 6-1: Using ep0 maxpacket: 32 [ 214.648868][ T5643] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.663002][ T5643] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.663053][ T5643] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 214.663081][ T5643] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.663108][ T5643] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 214.666349][ T11] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 214.666444][ T11] imon 1-1:155.0: unable to initialize intf0, err -19 [ 214.667384][ T5643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.667408][ T5643] usb 6-1: Product: syz [ 214.667423][ T5643] usb 6-1: Manufacturer: syz [ 214.667439][ T5643] usb 6-1: SerialNumber: syz [ 214.775082][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 214.788681][ T5643] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input39 [ 214.970245][ T5643] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 214.970269][ T5643] (id 0x00) [ 215.064151][ T5643] rc_core: IR keymap rc-imon-pad not found [ 215.064170][ T5643] Registered IR keymap rc-empty [ 215.064259][ T5643] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 215.064279][ T5643] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.171278][ T5643] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 215.175103][ T5643] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input40 [ 215.207020][ T5643] imon 6-1:155.0: iMON device (15c2:ffdc) on usb<6:15> initialized [ 215.929768][ T8141] imon:display_open: display port is already open [ 216.203714][ T34] audit: type=1804 audit(1793914471.167:13): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.636" name="/newroot/17/file1" dev="tmpfs" ino=111 res=1 errno=0 [ 216.887527][ T8146] imon:send_packet: task interrupted [ 216.887549][ T8146] imon:send_packet: packet tx failed (-512) [ 216.887596][ T8146] imon:vfd_write: send packet #5 failed [ 216.889852][ T8146] imon:send_packet: packet tx failed (-32) [ 216.915318][ T8146] imon:vfd_write: send packet #0 failed [ 216.917928][ T5738] usb 6-1: USB disconnect, device number 15 [ 216.926454][ T916] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 216.926979][ T916] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 216.966647][ T916] usb 5-1: USB disconnect, device number 28 [ 216.971987][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 216.973319][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.004302][ T8153] comedi comedi2: comedi_test: 320 microvolt, 2 microsecond waveform attached [ 217.004379][ T8153] FAULT_INJECTION: forcing a failure. [ 217.004379][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 217.004406][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.6.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.004434][ T8153] Tainted: [L]=SOFTLOCKUP [ 217.004443][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.004455][ T8153] Call Trace: [ 217.004463][ T8153] [ 217.004472][ T8153] dump_stack_lvl+0xe8/0x150 [ 217.004508][ T8153] should_fail_ex+0x3eb/0x540 [ 217.004539][ T8153] should_failslab+0xa8/0x100 [ 217.004576][ T8153] __kmalloc_cache_node_noprof+0xa5/0x620 [ 217.004605][ T8153] ? stack_depot_save_flags+0x419/0x840 [ 217.004637][ T8153] ? __get_vm_area_node+0x155/0x2f0 [ 217.004659][ T8153] ? __get_vm_area_node+0x155/0x2f0 [ 217.004689][ T8153] __get_vm_area_node+0x155/0x2f0 [ 217.004710][ T8153] ? comedi_device_postconfig+0x59b/0xd00 [ 217.004744][ T8153] ? comedi_unlocked_ioctl+0x8ef/0x1af0 [ 217.004783][ T8153] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 217.004808][ T8153] ? comedi_buf_alloc+0x323/0x900 [ 217.004877][ T8153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.004910][ T8153] ? __kmalloc_cache_noprof+0x31c/0x600 [ 217.004938][ T8153] ? comedi_buf_alloc+0x323/0x900 [ 217.004972][ T8153] vzalloc_noprof+0xb2/0xe0 [ 217.004997][ T8153] ? comedi_buf_alloc+0x323/0x900 [ 217.005033][ T8153] comedi_buf_alloc+0x323/0x900 [ 217.005073][ T8153] ? __init_swait_queue_head+0xa8/0x150 [ 217.005107][ T8153] comedi_device_postconfig+0x59b/0xd00 [ 217.005154][ T8153] comedi_device_attach+0x54c/0x720 [ 217.005194][ T8153] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 217.005239][ T8153] ? kasan_quarantine_put+0xbb/0x1f0 [ 217.005268][ T8153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 217.005314][ T8153] ? do_vfs_ioctl+0x116f/0x1530 [ 217.005351][ T8153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.005423][ T8153] ? __fget_files+0x2a/0x420 [ 217.005454][ T8153] ? __fget_files+0x2a/0x420 [ 217.005482][ T8153] ? __fget_files+0x2a/0x420 [ 217.005514][ T8153] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.005546][ T8153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 217.005573][ T8153] __se_sys_ioctl+0xfc/0x170 [ 217.005609][ T8153] do_syscall_64+0x16a/0x530 [ 217.005628][ T8153] ? trace_irq_disable+0x3b/0x140 [ 217.005655][ T8153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.005676][ T8153] ? clear_bhb_loop+0x70/0xc0 [ 217.005704][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.005725][ T8153] RIP: 0033:0x00007fd3e159fb19 [ 217.005746][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.005764][ T8153] RSP: 002b:00007fd3e23dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.005794][ T8153] RAX: ffffffffffffffda RBX: 00007fd3e1825fa0 RCX: 00007fd3e159fb19 [ 217.005809][ T8153] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 217.005823][ T8153] RBP: 00007fd3e23dc090 R08: 0000000000000000 R09: 0000000000000000 [ 217.005836][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.005849][ T8153] R13: 00007fd3e1826038 R14: 00007fd3e1825fa0 R15: 00007ffd69c0fb88 [ 217.005883][ T8153] [ 217.006380][ T8153] syz.6.639: vmalloc error: size 8192, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.006626][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.6.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.006655][ T8153] Tainted: [L]=SOFTLOCKUP [ 217.006663][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.006676][ T8153] Call Trace: [ 217.006683][ T8153] [ 217.006692][ T8153] dump_stack_lvl+0xe8/0x150 [ 217.006726][ T8153] warn_alloc+0x24d/0x270 [ 217.006754][ T8153] ? __kasan_kmalloc+0x22/0xb0 [ 217.006801][ T8153] ? __pfx_warn_alloc+0x10/0x10 [ 217.006828][ T8153] ? __get_vm_area_node+0x155/0x2f0 [ 217.006858][ T8153] ? __get_vm_area_node+0x2a9/0x2f0 [ 217.006879][ T8153] ? comedi_device_postconfig+0x59b/0xd00 [ 217.006921][ T8153] __vmalloc_node_range_noprof+0x396/0x16f0 [ 217.006983][ T8153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.007017][ T8153] ? __kmalloc_cache_noprof+0x31c/0x600 [ 217.007046][ T8153] ? comedi_buf_alloc+0x323/0x900 [ 217.007080][ T8153] vzalloc_noprof+0xb2/0xe0 [ 217.007105][ T8153] ? comedi_buf_alloc+0x323/0x900 [ 217.007140][ T8153] comedi_buf_alloc+0x323/0x900 [ 217.007180][ T8153] ? __init_swait_queue_head+0xa8/0x150 [ 217.007214][ T8153] comedi_device_postconfig+0x59b/0xd00 [ 217.007261][ T8153] comedi_device_attach+0x54c/0x720 [ 217.007302][ T8153] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 217.007347][ T8153] ? kasan_quarantine_put+0xbb/0x1f0 [ 217.007375][ T8153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 217.007424][ T8153] ? do_vfs_ioctl+0x116f/0x1530 [ 217.007461][ T8153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.007551][ T8153] ? __fget_files+0x2a/0x420 [ 217.007583][ T8153] ? __fget_files+0x2a/0x420 [ 217.007612][ T8153] ? __fget_files+0x2a/0x420 [ 217.007645][ T8153] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.007677][ T8153] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 217.007706][ T8153] __se_sys_ioctl+0xfc/0x170 [ 217.007744][ T8153] do_syscall_64+0x16a/0x530 [ 217.007764][ T8153] ? trace_irq_disable+0x3b/0x140 [ 217.007799][ T8153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.007823][ T8153] ? clear_bhb_loop+0x70/0xc0 [ 217.007850][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.007873][ T8153] RIP: 0033:0x00007fd3e159fb19 [ 217.007902][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.007921][ T8153] RSP: 002b:00007fd3e23dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.007944][ T8153] RAX: ffffffffffffffda RBX: 00007fd3e1825fa0 RCX: 00007fd3e159fb19 [ 217.007960][ T8153] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 217.007973][ T8153] RBP: 00007fd3e23dc090 R08: 0000000000000000 R09: 0000000000000000 [ 217.007986][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.007999][ T8153] R13: 00007fd3e1826038 R14: 00007fd3e1825fa0 R15: 00007ffd69c0fb88 [ 217.008036][ T8153] [ 217.008376][ T8153] Mem-Info: [ 217.008507][ T8153] active_anon:6929 inactive_anon:0 isolated_anon:0 [ 217.008507][ T8153] active_file:1 inactive_file:55871 isolated_file:0 [ 217.008507][ T8153] unevictable:1 dirty:63 writeback:0 [ 217.008507][ T8153] slab_reclaimable:11204 slab_unreclaimable:99736 [ 217.008507][ T8153] mapped:35797 shmem:543 pagetables:1636 [ 217.008507][ T8153] sec_pagetables:0 bounce:0 [ 217.008507][ T8153] kernel_misc_reclaimable:0 [ 217.008507][ T8153] free:1297089 free_pcp:9638 free_cma:0 [ 217.008575][ T8153] Node 0 active_anon:27716kB inactive_anon:0kB active_file:4kB inactive_file:223288kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:143188kB dirty:252kB writeback:0kB shmem:2172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13500kB pagetables:6392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.008637][ T8153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.008692][ T8153] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.008756][ T8153] lowmem_reserve[]: 0 2459 2460 2460 2460 [ 217.008805][ T8153] Node 0 DMA32 free:1231648kB boost:0kB min:33896kB low:42368kB high:50840kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27716kB inactive_anon:0kB active_file:4kB inactive_file:223288kB unevictable:4kB writepending:252kB zspages:0kB present:3129332kB managed:2518992kB mlocked:0kB bounce:0kB free_pcp:38552kB local_pcp:19716kB free_cma:0kB [ 217.008870][ T8153] lowmem_reserve[]: 0 0 1 1 1 [ 217.008909][ T8153] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.008969][ T8153] lowmem_reserve[]: 0 0 0 0 0 [ 217.009007][ T8153] Node 1 Normal free:3941348kB boost:0kB min:55988kB low:69984kB high:83980kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.009071][ T8153] lowmem_reserve[]: 0 0 0 0 0 [ 217.009108][ T8153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.009257][ T8153] Node 0 DMA32: 1054*4kB (UME) 501*8kB (UM) 306*16kB (UME) 337*32kB (UME) 279*64kB (UME) 212*128kB (UM) 122*256kB (ME) 36*512kB (UME) 13*1024kB (UM) 3*2048kB (ME) 267*4096kB (UM) = 1231648kB [ 217.009431][ T8153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.009540][ T8153] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 6*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941348kB [ 217.009731][ T8153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.009750][ T8153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.009768][ T8153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.009793][ T8153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.009811][ T8153] 56413 total pagecache pages [ 217.009827][ T8153] 2 pages in swap cache [ 217.009835][ T8153] Free swap = 124988kB [ 217.009843][ T8153] Total swap = 124996kB [ 217.009853][ T8153] 2097051 pages RAM [ 217.009861][ T8153] 0 pages HighMem/MovableOnly [ 217.009869][ T8153] 435425 pages reserved [ 217.009877][ T8153] 0 pages cma reserved [ 217.009935][ T8153] comedi comedi2: Buffer allocation failed [ 217.018781][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 218.095337][ T27] usb 1-1: USB disconnect, device number 48 [ 218.238642][ T8162] X25: received unknown 00 with LCI 000 [ 218.324806][ T8167] FAULT_INJECTION: forcing a failure. [ 218.324806][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 218.324839][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.6.645 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.324868][ T8167] Tainted: [L]=SOFTLOCKUP [ 218.324876][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 218.324889][ T8167] Call Trace: [ 218.324897][ T8167] [ 218.324906][ T8167] dump_stack_lvl+0xe8/0x150 [ 218.324942][ T8167] should_fail_ex+0x3eb/0x540 [ 218.324973][ T8167] should_failslab+0xa8/0x100 [ 218.325007][ T8167] ? security_file_alloc+0x34/0x310 [ 218.325037][ T8167] kmem_cache_alloc_noprof+0x9c/0x600 [ 218.325064][ T8167] ? rcu_is_watching+0x16/0xb0 [ 218.325095][ T8167] ? security_file_alloc+0x34/0x310 [ 218.325132][ T8167] security_file_alloc+0x34/0x310 [ 218.325166][ T8167] init_file+0x90/0x2b0 [ 218.325193][ T8167] alloc_empty_file+0x74/0x1d0 [ 218.325219][ T8167] alloc_file_pseudo+0x110/0x1e0 [ 218.325247][ T8167] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 218.325284][ T8167] __anon_inode_getfile+0x129/0x200 [ 218.325319][ T8167] io_uring_create+0x57a/0x980 [ 218.325348][ T8167] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 218.325374][ T8167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.325398][ T8167] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 218.325439][ T8167] ? __pfx_ksys_write+0x10/0x10 [ 218.325476][ T8167] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 218.325513][ T8167] do_syscall_64+0x16a/0x530 [ 218.325532][ T8167] ? trace_irq_disable+0x3b/0x140 [ 218.325558][ T8167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.325580][ T8167] ? clear_bhb_loop+0x70/0xc0 [ 218.325607][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.325635][ T8167] RIP: 0033:0x00007fd3e159fb19 [ 218.325655][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.325674][ T8167] RSP: 002b:00007fd3e23dbee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 218.325696][ T8167] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007fd3e159fb19 [ 218.325712][ T8167] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000c25 [ 218.325726][ T8167] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 218.325739][ T8167] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 218.325753][ T8167] R13: 0000200000000590 R14: 00007fd3e23dbfd8 R15: 0000000000000000 [ 218.325786][ T8167] [ 218.502421][ T5738] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 218.594508][ T27] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 218.634793][ T34] audit: type=1804 audit(1793914473.597:14): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.646" name="/newroot/93/file1" dev="tmpfs" ino=536 res=1 errno=0 [ 218.680987][ T5738] usb 6-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.682046][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.686494][ T5738] usb 6-1: config 0 descriptor?? [ 218.714924][ T5738] cp210x 6-1:0.0: cp210x converter detected [ 218.750138][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 218.751403][ T27] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 218.752521][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.752550][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.752616][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.811868][ T27] usb 1-1: config 0 descriptor?? [ 218.816494][ T27] hub 1-1:0.0: USB hub found [ 219.025187][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 219.098148][ T5738] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 219.110472][ T5738] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 219.110524][ T5738] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 219.117396][ T5738] usb 6-1: cp210x converter now attached to ttyUSB0 [ 219.277776][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 219.323949][ T5738] usb 6-1: USB disconnect, device number 16 [ 219.351380][ T8190] FAULT_INJECTION: forcing a failure. [ 219.351380][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 219.351409][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.4.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.351434][ T8190] Tainted: [L]=SOFTLOCKUP [ 219.351441][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 219.351452][ T8190] Call Trace: [ 219.351459][ T8190] [ 219.351467][ T8190] dump_stack_lvl+0xe8/0x150 [ 219.351517][ T8190] should_fail_ex+0x3eb/0x540 [ 219.351556][ T8190] should_failslab+0xa8/0x100 [ 219.351590][ T8190] __kmalloc_noprof+0xf9/0x710 [ 219.351614][ T8190] ? rcu_is_watching+0x16/0xb0 [ 219.351642][ T8190] ? tomoyo_realpath_from_path+0xf2/0x640 [ 219.351665][ T8190] ? tomoyo_realpath_from_path+0xf2/0x640 [ 219.351697][ T8190] tomoyo_realpath_from_path+0xf2/0x640 [ 219.351730][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.351730][ T8190] ? tomoyo_path_number_perm+0x219/0x5f0 [ 219.351763][ T8190] tomoyo_path_number_perm+0x246/0x5f0 [ 219.351797][ T8190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.351828][ T8190] ? __lock_acquire+0x747/0x2de0 [ 219.351888][ T8190] ? __fget_files+0x2a/0x420 [ 219.351916][ T8190] ? __fget_files+0x2a/0x420 [ 219.351942][ T8190] ? __fget_files+0x2a/0x420 [ 219.351973][ T8190] security_file_ioctl+0xc3/0x2a0 [ 219.352006][ T8190] __se_sys_ioctl+0x47/0x170 [ 219.352040][ T8190] do_syscall_64+0x16a/0x530 [ 219.352058][ T8190] ? trace_irq_disable+0x3b/0x140 [ 219.352083][ T8190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.352104][ T8190] ? clear_bhb_loop+0x70/0xc0 [ 219.352131][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.352151][ T8190] RIP: 0033:0x00007feb3959fb19 [ 219.352172][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.352189][ T8190] RSP: 002b:00007feb377f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.352210][ T8190] RAX: ffffffffffffffda RBX: 00007feb39825fa0 RCX: 00007feb3959fb19 [ 219.352225][ T8190] RDX: 0000200000000480 RSI: 00000000c040565f RDI: 0000000000000003 [ 219.352238][ T8190] RBP: 00007feb377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.352250][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.352263][ T8190] R13: 00007feb39826038 R14: 00007feb39825fa0 R15: 00007ffe16c5fcb8 [ 219.352295][ T8190] [ 219.352303][ T8190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.355663][ T5738] cp210x 6-1:0.0: device disconnected [ 219.635684][ T27] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 219.659866][ T27] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 219.703562][ T27] usb 1-1: USB disconnect, device number 49 [ 219.793924][ T8193] fido_id[8193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 220.251550][ T916] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 220.400155][ T916] usb 6-1: Using ep0 maxpacket: 32 [ 220.401297][ T916] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 220.409122][ T916] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 220.409169][ T916] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 220.418136][ T916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.418239][ T916] usb 6-1: Product: syz [ 220.418280][ T916] usb 6-1: Manufacturer: syz [ 220.418320][ T916] usb 6-1: SerialNumber: syz [ 220.486908][ T916] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 220.487003][ T916] imon 6-1:155.0: unable to initialize intf0, err -19 [ 220.538206][ T34] audit: type=1804 audit(1793914475.497:15): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.656" name="/newroot/184/file1" dev="tmpfs" ino=1035 res=1 errno=0 [ 221.086939][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 221.440203][ T27] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 221.530123][ T5738] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 221.590161][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 221.590908][ T27] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 221.591939][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.591967][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.592004][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.593865][ T27] usb 1-1: config 0 descriptor?? [ 221.597504][ T27] hub 1-1:0.0: USB hub found [ 221.710873][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 221.711515][ T5738] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 221.712416][ T5738] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.712433][ T5738] usb 5-1: config 0 has no interface number 0 [ 221.712480][ T5738] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.712517][ T5738] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.713881][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 221.713899][ T5738] usb 5-1: Product: syz [ 221.713910][ T5738] usb 5-1: SerialNumber: syz [ 221.716542][ T5738] usb 5-1: config 0 descriptor?? [ 221.751483][ T5738] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 221.769260][ T5738] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input41 [ 221.834149][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.837649][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.878944][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 221.934876][ T8252] netlink: 'syz.4.660': attribute type 27 has an invalid length. [ 221.935824][ T8252] nfs: Unknown parameter '' [ 221.938073][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 221.940441][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 221.940778][ T5738] usb 5-1: USB disconnect, device number 29 [ 221.941426][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 221.941489][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 221.994838][ T5738] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 222.284709][ T27] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x0 [ 222.301897][ T27] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 222.485104][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.485610][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.875293][ T916] usb 1-1: reset high-speed USB device number 50 using dummy_hcd [ 222.876540][ T916] usb 1-1: device reset changed ep0 maxpacket size! [ 222.884089][ T916] usb 1-1: USB disconnect, device number 50 [ 222.960161][ T27] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 223.110693][ T27] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 223.110724][ T27] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 223.119344][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.119374][ T27] usb 5-1: Product: syz [ 223.119390][ T27] usb 5-1: Manufacturer: syz [ 223.119406][ T27] usb 5-1: SerialNumber: syz [ 223.210560][ T916] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 223.277748][ T34] audit: type=1804 audit(1793914478.237:16): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.667" name="/newroot/187/file1" dev="tmpfs" ino=1053 res=1 errno=0 [ 223.360532][ T916] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 223.361196][ T916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.361248][ T916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.361282][ T916] usb 1-1: Dual-Role OTG device on HNP port [ 223.361582][ T916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.365866][ C0] ------------[ cut here ]------------ [ 223.365879][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 223.365901][ C0] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#0: swapper/0/0 [ 223.430447][ C0] Modules linked in: [ 223.434397][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.445017][ C0] Tainted: [L]=SOFTLOCKUP [ 223.449366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 223.459469][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 223.464885][ C0] Code: 3a bc 59 fa 49 83 3f 00 48 c7 c0 c0 5c 16 8d 49 c7 c0 e0 5c 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 30 20 c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 f0 f1 df f9 65 8b [ 223.484511][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010082 [ 223.490646][ C0] RAX: ffffffff8d165cc0 RBX: ffff8880299bc0e0 RCX: ffffffff8d167ba0 [ 223.498741][ C0] RDX: 0000000000000081 RSI: ffffffff8ec92030 RDI: ffffffff91ef35e0 [ 223.506750][ C0] RBP: dffffc0000000000 R08: ffffffff8d165ce0 R09: 0000000000000002 [ 223.514749][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8d167ba0 [ 223.522761][ C0] R13: 0000000000000081 R14: ffffffff91ef35e0 R15: ffff8880299bc0f8 [ 223.530762][ C0] FS: 0000000000000000(0000) GS:ffff888123159000(0000) knlGS:0000000000000000 [ 223.539711][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.546325][ C0] CR2: 0000200000000100 CR3: 0000000028490000 CR4: 00000000003526f0 [ 223.554351][ C0] Call Trace: [ 223.557648][ C0] [ 223.560535][ C0] hidg_set_alt+0x12a/0xa60 [ 223.565095][ C0] ? usb_gadget_set_state+0x12c/0x2d0 [ 223.570500][ C0] set_config+0x749/0x1160 [ 223.574960][ C0] composite_setup+0x1de7/0x3480 [ 223.579935][ C0] configfs_composite_setup+0xc7/0x100 [ 223.585458][ C0] dummy_timer+0x2f30/0x4ce0 [ 223.590110][ C0] ? __lock_acquire+0x747/0x2de0 [ 223.595083][ C0] ? lock_acquire+0x115/0x350 [ 223.599788][ C0] ? __lock_acquire+0x747/0x2de0 [ 223.604787][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.610221][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 223.615201][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.621078][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 223.626054][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 223.631298][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 223.636441][ C0] handle_softirqs+0x265/0x8d0 [ 223.640479][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.649564][ C0] __irq_exit_rcu+0xc6/0x220 [ 223.654179][ C0] irq_exit_rcu+0x9/0x30 [ 223.658458][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 223.664139][ C0] [ 223.667090][ C0] [ 223.670056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.676069][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 223.680966][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.689475][ C0] Code: 3a ad 02 e9 83 17 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 ea 29 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 223.709119][ C0] RSP: 0018:ffffffff90007ca0 EFLAGS: 00000242 [ 223.715232][ C0] RAX: 0000000000200629 RBX: ffffffff819ce150 RCX: 8000000000000001 [ 223.723237][ C0] RDX: 0000000000000001 RSI: ffffffff8e9f0244 RDI: ffffffff8cb01080 [ 223.731229][ C0] RBP: ffffffff90007d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 223.739227][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 223.747238][ C0] R13: 1ffffffff2011df8 R14: 1ffffffff2000f9c R15: dffffc0000000000 [ 223.755250][ C0] ? do_idle+0x2e0/0x540 [ 223.759542][ C0] default_idle+0x9/0x20 [ 223.763812][ C0] default_idle_call+0x72/0xb0 [ 223.768600][ C0] do_idle+0x2e0/0x540 [ 223.772691][ C0] ? __pfx_do_idle+0x10/0x10 [ 223.777320][ C0] ? do_idle+0x4d4/0x540 [ 223.781591][ C0] cpu_startup_entry+0x43/0x60 [ 223.786371][ C0] rest_init+0x378/0x3a0 [ 223.790698][ C0] ? __pfx_rest_init+0x10/0x10 [ 223.795507][ C0] ? __pfx_kernel_init+0x10/0x10 [ 223.800475][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 223.805886][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 223.811216][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 223.816530][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 223.822090][ C0] start_kernel+0x392/0x3e0 [ 223.826656][ C0] x86_64_start_reservations+0x24/0x30 [ 223.832150][ C0] x86_64_start_kernel+0x137/0x1b0 [ 223.837300][ C0] common_startup_64+0x13e/0x157 [ 223.842282][ C0] [ 223.845319][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.852621][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.863141][ C0] Tainted: [L]=SOFTLOCKUP [ 223.867488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 223.877564][ C0] Call Trace: [ 223.880863][ C0] [ 223.883732][ C0] vpanic+0x26f/0x710 [ 223.887756][ C0] panic+0xc5/0xd0 [ 223.891516][ C0] ? __pfx_panic+0x10/0x10 [ 223.895999][ C0] ? common_startup_64+0x13e/0x157 [ 223.901147][ C0] __warn+0x315/0x4c0 [ 223.905150][ C0] ? usb_ep_enable+0x148/0x480 [ 223.909932][ C0] ? usb_ep_enable+0x148/0x480 [ 223.914708][ C0] __report_bug+0x276/0x570 [ 223.919243][ C0] ? enqueue_task+0x33f/0x410 [ 223.923961][ C0] ? usb_ep_enable+0x148/0x480 [ 223.928756][ C0] ? __pfx___report_bug+0x10/0x10 [ 223.933807][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 223.938958][ C0] report_bug_entry+0x19b/0x290 [ 223.943829][ C0] ? usb_ep_enable+0x1bc/0x480 [ 223.948618][ C0] ? usb_ep_enable+0x1c1/0x480 [ 223.953416][ C0] handle_bug+0xce/0x200 [ 223.957676][ C0] exc_invalid_op+0x1a/0x50 [ 223.962206][ C0] asm_exc_invalid_op+0x1a/0x20 [ 223.967074][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 223.972462][ C0] Code: 3a bc 59 fa 49 83 3f 00 48 c7 c0 c0 5c 16 8d 49 c7 c0 e0 5c 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 30 20 c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 f0 f1 df f9 65 8b [ 223.992095][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010082 [ 223.998195][ C0] RAX: ffffffff8d165cc0 RBX: ffff8880299bc0e0 RCX: ffffffff8d167ba0 [ 224.006187][ C0] RDX: 0000000000000081 RSI: ffffffff8ec92030 RDI: ffffffff91ef35e0 [ 224.014171][ C0] RBP: dffffc0000000000 R08: ffffffff8d165ce0 R09: 0000000000000002 [ 224.022161][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8d167ba0 [ 224.030154][ C0] R13: 0000000000000081 R14: ffffffff91ef35e0 R15: ffff8880299bc0f8 [ 224.038166][ C0] hidg_set_alt+0x12a/0xa60 [ 224.042701][ C0] ? usb_gadget_set_state+0x12c/0x2d0 [ 224.048092][ C0] set_config+0x749/0x1160 [ 224.052532][ C0] composite_setup+0x1de7/0x3480 [ 224.057489][ C0] configfs_composite_setup+0xc7/0x100 [ 224.062960][ C0] dummy_timer+0x2f30/0x4ce0 [ 224.067567][ C0] ? __lock_acquire+0x747/0x2de0 [ 224.072533][ C0] ? lock_acquire+0x115/0x350 [ 224.077245][ C0] ? __lock_acquire+0x747/0x2de0 [ 224.082237][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.087643][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 224.092630][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.098492][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 224.103520][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 224.108756][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 224.113890][ C0] handle_softirqs+0x265/0x8d0 [ 224.118696][ C0] __irq_exit_rcu+0xc6/0x220 [ 224.123322][ C0] irq_exit_rcu+0x9/0x30 [ 224.127595][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.133279][ C0] [ 224.136226][ C0] [ 224.139187][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.145200][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 224.150868][ C0] Code: 3a ad 02 e9 83 17 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 ea 29 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 224.170496][ C0] RSP: 0018:ffffffff90007ca0 EFLAGS: 00000242 [ 224.176595][ C0] RAX: 0000000000200629 RBX: ffffffff819ce150 RCX: 8000000000000001 [ 224.184586][ C0] RDX: 0000000000000001 RSI: ffffffff8e9f0244 RDI: ffffffff8cb01080 [ 224.192594][ C0] RBP: ffffffff90007d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 224.200590][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 224.208622][ C0] R13: 1ffffffff2011df8 R14: 1ffffffff2000f9c R15: dffffc0000000000 [ 224.216624][ C0] ? do_idle+0x2e0/0x540 [ 224.220910][ C0] default_idle+0x9/0x20 [ 224.225200][ C0] default_idle_call+0x72/0xb0 [ 224.229983][ C0] do_idle+0x2e0/0x540 [ 224.234087][ C0] ? __pfx_do_idle+0x10/0x10 [ 224.238699][ C0] ? do_idle+0x4d4/0x540 [ 224.242967][ C0] cpu_startup_entry+0x43/0x60 [ 224.247765][ C0] rest_init+0x378/0x3a0 [ 224.252049][ C0] ? __pfx_rest_init+0x10/0x10 [ 224.256835][ C0] ? __pfx_kernel_init+0x10/0x10 [ 224.261795][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 224.267176][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 224.272481][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 224.277790][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 224.283308][ C0] start_kernel+0x392/0x3e0 [ 224.287846][ C0] x86_64_start_reservations+0x24/0x30 [ 224.293349][ C0] x86_64_start_kernel+0x137/0x1b0 [ 224.298489][ C0] common_startup_64+0x13e/0x157 [ 224.303476][ C0] [ 224.307122][ C0] Kernel Offset: disabled [ 224.311494][ C0] Rebooting in 86400 seconds..