last executing test programs: 6.620036378s ago: executing program 2 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)={0x14, r4, 0x721, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prctl$PR_CAPBSET_DROP(0x18, 0x29) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000280)=@unspec, 0xc) syz_usbip_server_init(0x2) landlock_create_ruleset(0x0, 0x0, 0x3) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2201) write$evdev(r8, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x1, 0xfff8, 0x7}, {{}, 0x1f, 0x9, 0x1}], 0x30) r9 = syz_open_dev$loop(&(0x7f0000002500), 0x100000000, 0xd18135cf551e5e3d) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000000)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, "0500000000860600d1f8a0e91dd2aca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x802]}}) r10 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$RTC_AIE_ON(r10, 0x7001) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c0080f3232420f01c30f5966ba2c0cb8c087678eef650f32080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x3) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x8e2}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.281380039s ago: executing program 2 (id=485): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x20440, 0x3, 0xf7, 0x8, 0xe, 0x0, 0x0, 0x20, 0x8001}}, 0x1001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x80000) 5.182364147s ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000001780)={0x2c, r3, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004004}, 0x88d0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x201, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) 3.761595886s ago: executing program 2 (id=490): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0x8000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23cf0d8e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001cc0)=""/4109, 0x100d}, {&(0x7f0000002d00)=""/4140, 0x102c}], 0x2}, 0x11002) 3.757015288s ago: executing program 3 (id=491): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x200, r0, 0x0, 0x39, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1fd, r0, 0x0, 0x0, 0x100000001, 0x0, 0x1, r0}]) (async) r2 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) (rerun: 64) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async, rerun: 32) setresuid(r4, r4, 0x0) (rerun: 32) ioctl(r3, 0xc138fd09, 0x0) exit_group(0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xd41, @mcast2, 0x1570}, 0x1c) 3.53905627s ago: executing program 3 (id=493): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000e00)={0x121000, 0x0, 0x0, 0x0, {0x1a}, &(0x7f0000000d00), 0x0, 0x0, 0x0}, 0x58) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x801) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x25000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.492219507s ago: executing program 0 (id=494): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0x1fffd, 0x1f00, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x4000000, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x2b, 'memory'}]}, 0x8) 3.28008698s ago: executing program 3 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000580)={0x2, 0x10, @status={[0x7, 0x8, 0x7fffffffffffffff, 0x0, 0x5390, 0x7]}, [0x2, 0x5, 0x5, 0x7, 0xad, 0x8, 0x9, 0x800, 0x0, 0x40, 0x8000000000000001, 0x5, 0x80000000, 0x40, 0x1, 0xe, 0xfffffffffffffff7, 0x2bb, 0x9, 0x9, 0x4564, 0x4, 0x0, 0x8f, 0x10001, 0xb7, 0x9, 0x4, 0x400, 0xe, 0x800, 0xd, 0xc, 0x3, 0x400, 0xefe1, 0x0, 0x4, 0x4, 0xf97, 0x9f, 0xbfe6, 0x8, 0x2, 0x3, 0x40, 0x7, 0x0, 0x34, 0x3, 0x6, 0xd, 0x6, 0x1, 0xa22, 0x80000001, 0xc, 0x0, 0x1, 0x7, 0x40, 0xfffffffffffffff8, 0x4, 0x4]}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x8c}}, 0x0) 3.219070742s ago: executing program 3 (id=497): syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300080a00000000070000e700000002000100000000000000020d00000000030006000000000002004e21000000800000000000000000030005003200000002004e22e00000020000000000000000"], 0x50}, 0x1, 0x7}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x823e}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1000800800f3d, 0x7) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x3}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x23, &(0x7f0000000080)={0x0, 0xde85, 0x0, 0x20000004, 0x2, 0x0, r4}, 0x0, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x113) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010040444fca813501db80d36609021c0001010080fa09040300000100000000"], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40c1, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',acgess=', @ANYRESDEC=r10, @ANYBLOB=',k']) setfsuid(r10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.756507467s ago: executing program 1 (id=498): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2d, 0x6, 0x20440, 0x3, 0xf7, 0x8, 0xe, 0x0, 0x0, 0x20, 0x8001}}, 0x1001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x80000) 2.669003037s ago: executing program 2 (id=499): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="00c41f9ca8656ddaa98f967d298944faf848b16a1ba6b0f01b4347b5c89d2293d3ac749f6eefc387be83a7015f4834939694f69b7de6ea210b558f6c9b0334bee4527bf112dcd10c7f196684f51852ac057f93b3071200cd422701df792bd7ce8fc9316b56c4e0a56918f7a216290976d822d9e4e6a0e53816e3e924ddb23a16c4658dbfa7aacfc3865505cc0e022a90e0dc22a2b643c8713ad8cc1c9cb7baa352ba8d5914a8f35634ba1b690cff5262ec729d9c6e2865a312b8df2925a53f7a02e2fedde72a2b09300036ba53cf7eec382c", 0xd2, 0x40000, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000003100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000104030000000000000000000700000605000100010000000a00020000000002b5"], 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x24000004) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc}) 2.472091238s ago: executing program 2 (id=500): r0 = fsopen(&(0x7f0000000000)='ncpfs\x00', 0x0) write(r0, &(0x7f0000000080)="0c186d203eda253eeea90e22c31285653facc5f6d13389e9134d007d2515e75c696c8b5124839ff040444c58cb7255d40506e79c3f6a928f9e710c6f3824dd101af25bc681c9", 0x46) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) 2.411767761s ago: executing program 0 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22001, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r6, 0x2, 0x13, r5, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20046044}, 0x80000) 2.063907553s ago: executing program 2 (id=502): syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x6b0043, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aaaabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x38, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r2) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x61, 0x30, 0x30, 0x64, 0x30, 0x61, 0x30, 0x30, 0x30, 0x53, 0x66, 0x64, 0x5, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeef700112233445566778899aabbccddeeff", 0x8042}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x8, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x0, 0x32, 0x35, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) 1.721306534s ago: executing program 0 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.538778047s ago: executing program 0 (id=504): pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setuid(0xee00) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000001c0)={0x0, 0x0, r1}) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x0, 0x2}, 0x0) r2 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) r8 = fsopen(&(0x7f0000000180)='pstore\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r9, &(0x7f0000000000)='7', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r0, 0x0) 1.462055404s ago: executing program 1 (id=505): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @private=0xa010100}}}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x28}}, 0x44080) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x80) write(r9, &(0x7f00000004c0)='\n', 0x1) 964.033092ms ago: executing program 1 (id=506): r0 = syz_io_uring_setup(0x413a, &(0x7f0000000040)={0x0, 0x4b48, 0x200, 0x3}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x40004) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x40280, 0x100) read$msr(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8002, 0x1, 0x5}, &(0x7f00000001c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 963.66198ms ago: executing program 0 (id=507): prlimit64(0x0, 0x5, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$comedi(0xffffff9c, &(0x7f0000000480)='/dev/comedi4\x00', 0x80a000, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8040640a, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x28, 0x0, './file0\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x81}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 788.137171ms ago: executing program 1 (id=508): timer_create(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x5c}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xe0, 0x134b43f4, 0x22, @empty, @empty, 0x7800, 0x7, 0x0, 0xd28}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) 580.714185ms ago: executing program 1 (id=509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xd0}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4f23, 0x4, @loopback, 0xfffffffd}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="dd71", 0x2}], 0x1}}], 0x1, 0x20008050) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x40, 0x80, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x1], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x2000200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0x6290, 0xdd, 0x1, 0x1, 0x2a8, 0x3, 0xc39, 0x8, 0x0, 0xffff, 0x2, 0x7b1, 0x8, 0x401, 0x3, 0x7, 0x10000200000, 0x81, 0x100, 0x5, 0x92e, 0xfe, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7ff, 0x8, 0x8, 0x6aa, 0xfff, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x50ae, 0x0, 0x4, 0x5, 0x40008, 0x6, 0x7ffffffffffffffe, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x80000000, 0x4, 0x3ff, 0x3ff, 0x6, 0x7, 0x6, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x6, 0xffffffffffffffff, 0x7, 0x1, 0x67e7, 0x2000000009, 0x25c, 0x0, 0x9, 0xfffffffffffffffa, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0xa, 0xb, 0x0, 0x65, 0x0, 0x10000000004, 0x7, 0x3, 0xfffffffffffffff7, 0x5, 0x5, 0x0, 0x6, 0x40, 0x7fffffff, 0x0, 0x3, 0x7]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000140), 0x80400a, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616eea94a1d824be4033148378", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x87, 0x89f8}, 0x8) 288.311672ms ago: executing program 1 (id=510): r0 = syz_open_procfs(0xffffffff, &(0x7f0000000080)='clear_refs\x00') write(r0, &(0x7f00000000c0)='1\x00', 0x2) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c032090400000102020100052400100105240600010705810340000a09040100020a0000000705020240000007058202400000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000640)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94\r]\xad>\xa3\x15^\xa0\x9e\xd0\x0e\x80\x1e\x84\x1a\xa0\xd9\xcat\x99\x1bir\xcf\xfd2)S\vK\x9a,\x9c\x9d=dfr', 0x3a, '\xe6K\xee^', 0x3a, './file0'}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) fanotify_mark(0xffffffffffffffff, 0x20, 0x8000000, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a15866d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 93.163285ms ago: executing program 3 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0xffffffffffffffc8}, 0x12100) 0s ago: executing program 3 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) kernel console output (not intermixed with test programs): 761] libceph: connect (1)[c::]:6789 error -101 [ 114.524232][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 115.033845][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 115.033992][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 115.055560][ T6203] ceph: No mds server is up or the cluster is laggy [ 115.330705][ T6227] team0: No ports can be present during mode change [ 115.437956][ T1229] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.440271][ T1229] usb 4-1: selecting invalid altsetting 1 [ 115.440295][ T1229] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 115.440320][ T1229] usb 4-1: unable to init card! (ret=-5) [ 115.477107][ T1229] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 115.495264][ T1229] usb 4-1: selecting invalid altsetting 1 [ 115.495288][ T1229] snd-usb-caiaq 4-1:1.1: can't set alt interface. [ 115.495305][ T1229] usb 4-1: unable to init card! (ret=-5) [ 115.495438][ T6231] netlink: 56 bytes leftover after parsing attributes in process `syz.0.157'. [ 115.495656][ T1229] snd-usb-caiaq 4-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 115.520511][ T1229] usb 4-1: USB disconnect, device number 8 [ 115.580849][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.656172][ T6237] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 115.656204][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.735397][ T6241] FAULT_INJECTION: forcing a failure. [ 115.735397][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 115.735442][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(full) [ 115.735467][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.735479][ T6241] Call Trace: [ 115.735487][ T6241] [ 115.735496][ T6241] dump_stack_lvl+0xe8/0x150 [ 115.735533][ T6241] should_fail_ex+0x3eb/0x540 [ 115.735559][ T6241] ? __alloc_skb+0x1db/0x7a0 [ 115.735580][ T6241] should_failslab+0xa8/0x100 [ 115.735603][ T6241] ? __alloc_skb+0x1db/0x7a0 [ 115.735621][ T6241] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 115.735643][ T6241] ? __alloc_skb+0x18d/0x7a0 [ 115.735664][ T6241] ? __alloc_skb+0x1db/0x7a0 [ 115.735690][ T6241] __alloc_skb+0x1db/0x7a0 [ 115.735716][ T6241] netlink_sendmsg+0x577/0xae0 [ 115.735745][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.735775][ T6241] ? apparmor_socket_sendmsg+0x98/0x360 [ 115.735800][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.735821][ T6241] sock_sendmsg_nosec+0x14e/0x190 [ 115.735854][ T6241] ____sys_sendmsg+0x54e/0x850 [ 115.735882][ T6241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.735913][ T6241] ? import_iovec+0x73/0xa0 [ 115.735938][ T6241] ___sys_sendmsg+0x2a5/0x360 [ 115.735957][ T6241] ? __lock_acquire+0x747/0x2de0 [ 115.735984][ T6241] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.736041][ T6241] ? __fget_files+0x3a2/0x420 [ 115.736061][ T6241] ? __fget_files+0x2a/0x420 [ 115.736090][ T6241] __x64_sys_sendmsg+0x1b1/0x290 [ 115.736115][ T6241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.736157][ T6241] do_syscall_64+0x166/0x520 [ 115.736177][ T6241] ? trace_irq_disable+0x3b/0x140 [ 115.736196][ T6241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.736218][ T6241] ? clear_bhb_loop+0x70/0xc0 [ 115.736241][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.736262][ T6241] RIP: 0033:0x7fcb62f9e159 [ 115.736293][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.736315][ T6241] RSP: 002b:00007fcb63e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.736342][ T6241] RAX: ffffffffffffffda RBX: 00007fcb63225fa0 RCX: 00007fcb62f9e159 [ 115.736358][ T6241] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 115.736371][ T6241] RBP: 00007fcb63e36090 R08: 0000000000000000 R09: 0000000000000000 [ 115.736384][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.736396][ T6241] R13: 00007fcb63226038 R14: 00007fcb63225fa0 R15: 00007ffe732cf808 [ 115.736430][ T6241] [ 115.995854][ T6243] jfs: Unknown parameter '&2x]FzzsoEsHX lv 8҉x٪jX}FOnZEWG˽eۍ@E}*eJEh_[e #ܲ[d@{IGk$' [ 116.072374][ T6247] netlink: 240 bytes leftover after parsing attributes in process `syz.0.165'. [ 116.103640][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 116.369713][ T12] IPVS: starting estimator thread 0... [ 116.461946][ T6263] IPVS: using max 37 ests per chain, 88800 per kthread [ 116.561886][ T5709] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.691866][ T5709] usb 4-1: device descriptor read/64, error -71 [ 116.932003][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.062590][ T5709] usb 4-1: device descriptor read/64, error -71 [ 117.173991][ T5709] usb usb4-port1: attempt power cycle [ 117.521893][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.542138][ T1229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.544181][ T5709] usb 4-1: device descriptor read/8, error -71 [ 117.695014][ T1229] usb 1-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 117.696462][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.699298][ T1229] usb 1-1: config 0 descriptor?? [ 117.791875][ T5709] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.813701][ T5709] usb 4-1: device descriptor read/8, error -71 [ 117.911953][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.921357][ T1229] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 117.921385][ T1229] hackrf 1-1:0.0: Could not detect board [ 117.921432][ T1229] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 117.924638][ T5709] usb usb4-port1: unable to enumerate USB device [ 117.960656][ T1229] usb 1-1: USB disconnect, device number 8 [ 118.071874][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 118.073905][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.073956][ T32] usb 2-1: New USB device found: idVendor=1235, idProduct=0018, bcdDevice=0.40 [ 118.074986][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.075050][ T32] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.075097][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 7 [ 118.075128][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.077131][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.077156][ T32] usb 2-1: Product: syz [ 118.077170][ T32] usb 2-1: Manufacturer: syz [ 118.077185][ T32] usb 2-1: SerialNumber: syz [ 118.281917][ T1229] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 118.289142][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.289576][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.326004][ T32] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 118.329417][ T32] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 118.384039][ T32] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 118.387253][ T32] usb 2-1: USB disconnect, device number 8 [ 118.421985][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.453613][ T1229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.453665][ T1229] usb 3-1: New USB device found: idVendor=046d, idProduct=0921, bcdDevice=89.dc [ 118.456025][ T1229] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 118.456053][ T1229] usb 3-1: config 129 has no interface number 0 [ 118.456085][ T1229] usb 3-1: config 129 interface 195 has no altsetting 0 [ 118.459773][ T1229] usb 3-1: string descriptor 0 read error: -22 [ 118.459974][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.529510][ T1229] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 118.608420][ T6289] smpboot: CPU 1 is now offline [ 118.780188][ T1229] usb 3-1: USB disconnect, device number 8 [ 118.868172][ T6292] FAULT_INJECTION: forcing a failure. [ 118.868172][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 118.868198][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 118.868216][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.868227][ T6292] Call Trace: [ 118.868233][ T6292] [ 118.868239][ T6292] dump_stack_lvl+0xe8/0x150 [ 118.868261][ T6292] should_fail_ex+0x3eb/0x540 [ 118.868282][ T6292] should_failslab+0xa8/0x100 [ 118.868300][ T6292] __kmalloc_cache_node_noprof+0xa5/0x620 [ 118.868317][ T6292] ? alloc_pages_node_noprof+0xe2/0x140 [ 118.868336][ T6292] ? blk_mq_init_tags+0x83/0x2d0 [ 118.868353][ T6292] ? blk_mq_init_tags+0x83/0x2d0 [ 118.868373][ T6292] blk_mq_init_tags+0x83/0x2d0 [ 118.868391][ T6292] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 118.868420][ T6292] blk_mq_alloc_sched_tags+0x14d/0x380 [ 118.868443][ T6292] blk_mq_alloc_sched_res+0x92/0x360 [ 118.868462][ T6292] elevator_change+0x122/0x480 [ 118.868478][ T6292] ? do_raw_spin_unlock+0xf5/0x200 [ 118.868497][ T6292] elv_iosched_store+0x504/0x630 [ 118.868518][ T6292] ? __pfx_elv_iosched_store+0x10/0x10 [ 118.868549][ T6292] queue_attr_store+0x207/0x2b0 [ 118.868570][ T6292] ? __pfx_queue_attr_store+0x10/0x10 [ 118.868588][ T6292] ? lock_acquire+0x115/0x350 [ 118.868603][ T6292] ? sysfs_file_kobj+0x1a/0x230 [ 118.868624][ T6292] ? sysfs_file_kobj+0x1a/0x230 [ 118.868639][ T6292] ? sysfs_file_kobj+0x1a/0x230 [ 118.868652][ T6292] ? sysfs_file_kobj+0x1a/0x230 [ 118.868668][ T6292] ? sysfs_file_kobj+0x1e4/0x230 [ 118.868685][ T6292] ? sysfs_kf_write+0x166/0x260 [ 118.868702][ T6292] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.868716][ T6292] kernfs_fop_write_iter+0x3a4/0x540 [ 118.868736][ T6292] vfs_write+0x612/0xba0 [ 118.868758][ T6292] ? __pfx_vfs_write+0x10/0x10 [ 118.868776][ T6292] ? __fget_files+0x3a2/0x420 [ 118.868790][ T6292] ? __fget_files+0x2a/0x420 [ 118.868807][ T6292] ? fdget+0x1ac/0x250 [ 118.868827][ T6292] ksys_write+0x150/0x270 [ 118.868845][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 118.868873][ T6292] do_syscall_64+0x166/0x520 [ 118.868888][ T6292] ? trace_irq_disable+0x3b/0x140 [ 118.868902][ T6292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.868918][ T6292] ? clear_bhb_loop+0x70/0xc0 [ 118.868936][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.868951][ T6292] RIP: 0033:0x7fcb62f9e159 [ 118.868967][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.868980][ T6292] RSP: 002b:00007fcb63e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.868997][ T6292] RAX: ffffffffffffffda RBX: 00007fcb63225fa0 RCX: 00007fcb62f9e159 [ 118.869009][ T6292] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 118.869019][ T6292] RBP: 00007fcb6303506b R08: 0000000000000000 R09: 0000000000000000 [ 118.869033][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.869043][ T6292] R13: 00007fcb63226038 R14: 00007fcb63225fa0 R15: 00007ffe732cf808 [ 118.869068][ T6292] [ 119.258125][ T6292] vivid-000: ================= START STATUS ================= [ 119.258153][ T6292] vivid-000: Test Pattern: 75% Colorbar [ 119.258178][ T6292] vivid-000: Fill Percentage of Frame: 100 [ 119.258194][ T6292] vivid-000: Horizontal Movement: No Movement [ 119.258209][ T6292] vivid-000: Vertical Movement: No Movement [ 119.258223][ T6292] vivid-000: OSD Text Mode: All [ 119.258237][ T6292] vivid-000: Show Border: false [ 119.258250][ T6292] vivid-000: Show Square: false [ 119.258264][ T6292] vivid-000: Sensor Flipped Horizontally: false [ 119.258279][ T6292] vivid-000: Sensor Flipped Vertically: false [ 119.258293][ T6292] vivid-000: Insert SAV Code in Image: false [ 119.258307][ T6292] vivid-000: Insert EAV Code in Image: false [ 119.258321][ T6292] vivid-000: Insert Video Guard Band: false [ 119.258335][ T6292] vivid-000: Reduced Framerate: false [ 119.258349][ T6292] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 119.258364][ T6292] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 119.258380][ T6292] vivid-000: Enable Capture Cropping: true [ 119.258394][ T6292] vivid-000: Enable Capture Composing: false [ 119.258408][ T6292] vivid-000: Enable Capture Scaler: true [ 119.258422][ T6292] vivid-000: Timestamp Source: End of Frame [ 119.258436][ T6292] vivid-000: Colorspace: sRGB [ 119.258449][ T6292] vivid-000: Transfer Function: Default [ 119.258463][ T6292] vivid-000: Y'CbCr Encoding: Default [ 119.258477][ T6292] vivid-000: HSV Encoding: Hue 0-179 [ 119.258491][ T6292] vivid-000: Quantization: Default [ 119.258504][ T6292] vivid-000: Apply Alpha To Red Only: false [ 119.258518][ T6292] vivid-000: Standard Aspect Ratio: 4x3 [ 119.258532][ T6292] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 119.258550][ T6292] vivid-000: DV Timings: 640x480p59 inactive [ 119.258568][ T6292] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 119.258582][ T6292] vivid-000: Maximum EDID Blocks: 2 [ 119.258596][ T6292] vivid-000: Limited RGB Range (16-235): false [ 119.258610][ T6292] vivid-000: Rx RGB Quantization Range: Automatic [ 119.258625][ T6292] vivid-000: Power Present: 0x00000001 [ 119.258645][ T6292] tpg source WxH: 320x180 (R'G'B) [ 119.258654][ T6292] tpg field: 1 [ 119.258659][ T6292] tpg crop: (0,0)/320x180 [ 119.258669][ T6292] tpg compose: (0,0)/320x180 [ 119.258678][ T6292] tpg colorspace: 8 [ 119.258684][ T6292] tpg transfer function: 0/0 [ 119.258691][ T6292] tpg quantization: 0/0 [ 119.258698][ T6292] tpg RGB range: 0/2 [ 119.258704][ T6292] vivid-000: ================== END STATUS ================== [ 119.702709][ T6299] FAULT_INJECTION: forcing a failure. [ 119.702709][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 119.702734][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 119.702753][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.702763][ T6299] Call Trace: [ 119.702769][ T6299] [ 119.702776][ T6299] dump_stack_lvl+0xe8/0x150 [ 119.702797][ T6299] should_fail_ex+0x3eb/0x540 [ 119.702818][ T6299] should_failslab+0xa8/0x100 [ 119.702834][ T6299] ? security_file_alloc+0x34/0x310 [ 119.702850][ T6299] kmem_cache_alloc_noprof+0x9c/0x600 [ 119.702865][ T6299] ? rcu_is_watching+0x16/0xb0 [ 119.702882][ T6299] ? security_file_alloc+0x34/0x310 [ 119.702901][ T6299] security_file_alloc+0x34/0x310 [ 119.702918][ T6299] init_file+0x90/0x2b0 [ 119.702935][ T6299] alloc_empty_file+0x74/0x1d0 [ 119.702950][ T6299] path_openat+0x9d/0x1da0 [ 119.702987][ T6299] do_file_open+0x23e/0x4a0 [ 119.703006][ T6299] ? __pfx_do_file_open+0x10/0x10 [ 119.703037][ T6299] ? _raw_spin_unlock+0x28/0x50 [ 119.703052][ T6299] ? alloc_fd+0x6af/0x760 [ 119.703075][ T6299] do_sys_openat2+0x115/0x200 [ 119.703090][ T6299] ? __se_sys_futex+0x3a8/0x450 [ 119.703109][ T6299] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.703128][ T6299] ? rcu_is_watching+0x16/0xb0 [ 119.703147][ T6299] __x64_sys_openat+0x138/0x170 [ 119.703165][ T6299] do_syscall_64+0x166/0x520 [ 119.703180][ T6299] ? trace_irq_disable+0x3b/0x140 [ 119.703193][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.703209][ T6299] ? clear_bhb_loop+0x70/0xc0 [ 119.703226][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.703242][ T6299] RIP: 0033:0x7fa64639e159 [ 119.703256][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.703269][ T6299] RSP: 002b:00007fa64719e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.703286][ T6299] RAX: ffffffffffffffda RBX: 00007fa646625fa0 RCX: 00007fa64639e159 [ 119.703298][ T6299] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 119.703309][ T6299] RBP: 00007fa64643506b R08: 0000000000000000 R09: 0000000000000000 [ 119.703319][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.703328][ T6299] R13: 00007fa646626038 R14: 00007fa646625fa0 R15: 00007ffd5ddc5078 [ 119.703352][ T6299] [ 120.161275][ T6307] ALSA: mixer_oss: invalid OSS volume '' [ 120.575515][ T6321] process 'syz.1.190' launched './file0' with NULL argv: empty string added [ 120.922314][ T6330] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 120.972462][ T1229] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 121.136377][ T1229] usb 1-1: not running at top speed; connect to a high speed hub [ 121.136405][ T1229] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 121.138363][ T1229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.138398][ T1229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.138414][ T1229] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 121.138443][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.219830][ T1229] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 121.235350][ T1229] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 121.311587][ T1229] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 121.333445][ T1229] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 121.333525][ T1229] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 121.366517][ T1229] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 121.512582][ T46] IPVS: starting estimator thread 0... [ 121.602394][ T6349] IPVS: using max 37 ests per chain, 88800 per kthread [ 121.664984][ T1229] usb 1-1: USB disconnect, device number 9 [ 121.712468][ T1229] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 121.755925][ T1229] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 121.778594][ T1229] keyspan 1-1:1.0: device disconnected [ 121.894813][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.916528][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.123533][ T5716] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.271884][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 122.272461][ T5716] usb 2-1: New USB device found: idVendor=09e1, idProduct=5121, bcdDevice=3e.64 [ 122.279373][ T5716] usb 2-1: config 4 has an invalid interface number: 40 but max is 0 [ 122.279394][ T5716] usb 2-1: config 4 has no interface number 0 [ 122.279414][ T5716] usb 2-1: config 4 interface 40 has no altsetting 0 [ 122.329153][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.329176][ T5716] usb 2-1: Product: syz [ 122.329187][ T5716] usb 2-1: Manufacturer: syz [ 122.329197][ T5716] usb 2-1: SerialNumber: syz [ 122.399609][ T6369] FAULT_INJECTION: forcing a failure. [ 122.399609][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.399634][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 122.399652][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.399662][ T6369] Call Trace: [ 122.399669][ T6369] [ 122.399675][ T6369] dump_stack_lvl+0xe8/0x150 [ 122.399704][ T6369] should_fail_ex+0x3eb/0x540 [ 122.399734][ T6369] _copy_from_user+0x2d/0xb0 [ 122.399752][ T6369] ___sys_sendmsg+0x1c6/0x360 [ 122.399767][ T6369] ? __lock_acquire+0x747/0x2de0 [ 122.399787][ T6369] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.399805][ T6369] ? futex_wait+0x2a2/0x390 [ 122.399841][ T6369] ? __fget_files+0x3a2/0x420 [ 122.399856][ T6369] ? __fget_files+0x2a/0x420 [ 122.399877][ T6369] __x64_sys_sendmsg+0x1b1/0x290 [ 122.399895][ T6369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.399925][ T6369] do_syscall_64+0x166/0x520 [ 122.399940][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.399957][ T6369] ? clear_bhb_loop+0x70/0xc0 [ 122.399973][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.399989][ T6369] RIP: 0033:0x7fcb62f9e159 [ 122.400004][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.400017][ T6369] RSP: 002b:00007fcb63e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.400034][ T6369] RAX: ffffffffffffffda RBX: 00007fcb63225fa0 RCX: 00007fcb62f9e159 [ 122.400046][ T6369] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 122.400056][ T6369] RBP: 00007fcb6303506b R08: 0000000000000000 R09: 0000000000000000 [ 122.400066][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.400075][ T6369] R13: 00007fcb63226038 R14: 00007fcb63225fa0 R15: 00007ffe732cf808 [ 122.400104][ T6369] [ 122.640365][ T5716] int51x1 2-1:4.40: probe with driver int51x1 failed with error -71 [ 122.659317][ T5716] usb 2-1: USB disconnect, device number 9 [ 122.673069][ T6369] input: syz0 as /devices/virtual/input/input7 [ 122.882863][ T6374] ./bus: Can't lookup blockdev [ 123.663529][ T6374] syz.0.205 (6374) used greatest stack depth: 18088 bytes left [ 123.663644][ T6372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.664214][ T6372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.664560][ T6372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.664723][ T6372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.926624][ T6386] openvswitch: netlink: Key type 31 is not supported [ 124.000934][ T6392] bridge0: entered promiscuous mode [ 124.000979][ T6392] bridge0: entered allmulticast mode [ 124.028822][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 124.048412][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 124.048431][ T6390] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 124.113064][ T6396] openvswitch: netlink: Message has 40 unknown bytes. [ 124.251898][ T2245] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 124.381962][ T2245] usb 4-1: device descriptor read/64, error -71 [ 124.452030][ T5716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.612341][ T5716] usb 1-1: New USB device found: idVendor=13e5, idProduct=0001, bcdDevice=0.40 [ 124.613530][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.613549][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.615429][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.615453][ T5716] usb 1-1: Product: syz [ 124.615464][ T5716] usb 1-1: Manufacturer: syz [ 124.615475][ T5716] usb 1-1: SerialNumber: syz [ 124.643210][ T2245] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 124.812279][ T2245] usb 4-1: device descriptor read/64, error -71 [ 124.901979][ T4928] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.922210][ T2245] usb usb4-port1: attempt power cycle [ 125.007777][ T5716] usb 1-1: USB disconnect, device number 10 [ 125.068779][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.107364][ T6408] openvswitch: netlink: IP tunnel TTL not specified. [ 125.107388][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.262030][ T2245] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 125.282491][ T2245] usb 4-1: device descriptor read/8, error -71 [ 125.334202][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.334510][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.340861][ T6420] netlink: Invalid conntrack timeout [ 125.340883][ T6420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.422909][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.442708][ T5761] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.524266][ T2245] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 125.543762][ T2245] usb 4-1: device descriptor read/8, error -71 [ 125.595715][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 125.597638][ T5761] usb 3-1: New USB device found: idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.619664][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.619685][ T5761] usb 3-1: Product: syz [ 125.619695][ T5761] usb 3-1: Manufacturer: syz [ 125.619706][ T5761] usb 3-1: SerialNumber: syz [ 125.648322][ T5761] usb 3-1: config 0 descriptor?? [ 125.659051][ T2245] usb usb4-port1: unable to enumerate USB device [ 125.670852][ T5761] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 125.670908][ T5761] pctv452e: pctv452e_power_ctrl: 1 [ 125.670908][ T5761] [ 125.670940][ T5761] usb 3-1: selecting invalid altsetting 3 [ 125.670950][ T5761] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 125.670950][ T5761] [ 125.705711][ T4928] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.705742][ T4928] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.705762][ T4928] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.732811][ T5761] dvb-usb: bulk message failed: -22 (5/0) [ 125.751290][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.762893][ T5761] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 125.762935][ T5761] usb 3-1: media controller created [ 125.763587][ T5761] dvb-usb: bulk message failed: -22 (8/0) [ 125.763600][ T5761] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 125.763677][ T5761] dvb-usb: MAC address reading failed. [ 125.845043][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.047819][ T5761] DVB: Unable to find symbol stb0899_attach() [ 126.047833][ T5761] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 126.183337][ T5761] rc_core: IR keymap rc-tt-1500 not found [ 126.183352][ T5761] Registered IR keymap rc-empty [ 126.189449][ T5761] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 126.219768][ T5761] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 126.260796][ T5761] dvb-usb: schedule remote query interval to 100 msecs. [ 126.260817][ T5761] pctv452e: pctv452e_power_ctrl: 0 [ 126.260817][ T5761] [ 126.260825][ T5761] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 126.307821][ T5761] usb 3-1: USB disconnect, device number 9 [ 126.545511][ T5761] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 126.646339][ T6428] veth1_to_bond: entered allmulticast mode [ 126.678443][ T6428] netlink: 'syz.2.222': attribute type 15 has an invalid length. [ 126.678469][ T6428] netlink: 'syz.2.222': attribute type 7 has an invalid length. [ 126.988974][ T6432] 9p: Bad value for 'rfdno' [ 127.321082][ T5613] Bluetooth: hci0: adv larger than maximum supported [ 127.321099][ T5613] Bluetooth: hci0: Malformed LE Event: 0x0d [ 127.345566][ T5613] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 127.401612][ T33] audit: type=1400 audit(1791092365.965:4): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=6438 comm="syz.2.225" name="p" offset=64 [ 127.671899][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.821996][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 127.824099][ T5808] usb 3-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 127.825192][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.825209][ T5808] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.825268][ T5808] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.827794][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.827813][ T5808] usb 3-1: Product: syz [ 127.827824][ T5808] usb 3-1: Manufacturer: syz [ 127.827834][ T5808] usb 3-1: SerialNumber: syz [ 128.074304][ T5808] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 128.074326][ T5808] usb 3-1: clock source 0 is not valid, cannot use [ 128.074758][ T5808] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 128.075571][ T5808] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 128.245075][ T5808] usb 3-1: USB disconnect, device number 10 [ 128.259090][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 128.324314][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.401848][ T5761] usb 4-1: Using ep0 maxpacket: 8 [ 128.402464][ T5761] usb 4-1: New USB device found: idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 128.405911][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.405928][ T5761] usb 4-1: Product: syz [ 128.405939][ T5761] usb 4-1: Manufacturer: syz [ 128.405950][ T5761] usb 4-1: SerialNumber: syz [ 128.408386][ T5761] usb 4-1: config 0 descriptor?? [ 128.460146][ T5761] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 128.460178][ T5761] pctv452e: pctv452e_power_ctrl: 1 [ 128.460178][ T5761] [ 128.460209][ T5761] usb 4-1: selecting invalid altsetting 3 [ 128.460219][ T5761] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 128.460219][ T5761] [ 128.460230][ T5761] dvb-usb: bulk message failed: -22 (5/0) [ 128.509204][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.524724][ T5761] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 128.524764][ T5761] usb 4-1: media controller created [ 128.524796][ T5761] dvb-usb: bulk message failed: -22 (8/0) [ 128.524807][ T5761] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 128.524841][ T5761] dvb-usb: MAC address reading failed. [ 128.571151][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.615150][ T6443] FAULT_INJECTION: forcing a failure. [ 128.615150][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.615173][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) [ 128.615191][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.615200][ T6443] Call Trace: [ 128.615206][ T6443] [ 128.615213][ T6443] dump_stack_lvl+0xe8/0x150 [ 128.615232][ T6443] should_fail_ex+0x3eb/0x540 [ 128.615251][ T6443] _copy_from_user+0x2d/0xb0 [ 128.615268][ T6443] i2cdev_ioctl+0x303/0x880 [ 128.615292][ T6443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 128.615310][ T6443] ? __fget_files+0x2a/0x420 [ 128.615327][ T6443] ? bpf_lsm_file_ioctl+0x9/0x20 [ 128.615342][ T6443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 128.615357][ T6443] __se_sys_ioctl+0xfc/0x170 [ 128.615374][ T6443] do_syscall_64+0x166/0x520 [ 128.615389][ T6443] ? trace_irq_disable+0x3b/0x140 [ 128.615402][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.615418][ T6443] ? clear_bhb_loop+0x70/0xc0 [ 128.615435][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.615450][ T6443] RIP: 0033:0x7f272339e159 [ 128.615464][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.615477][ T6443] RSP: 002b:00007f272419e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.615493][ T6443] RAX: ffffffffffffffda RBX: 00007f2723625fa0 RCX: 00007f272339e159 [ 128.615505][ T6443] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 128.615515][ T6443] RBP: 00007f272419e090 R08: 0000000000000000 R09: 0000000000000000 [ 128.615524][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.615533][ T6443] R13: 00007f2723626038 R14: 00007f2723625fa0 R15: 00007fff137c5668 [ 128.615556][ T6443] [ 128.734286][ T9] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 128.847395][ T5761] DVB: Unable to find symbol stb0899_attach() [ 128.847407][ T5761] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 128.915359][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.915396][ T9] usb 2-1: New USB device found: idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 128.917559][ T9] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 128.917578][ T9] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 128.917593][ T9] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 128.917607][ T9] usb 2-1: config 74 has no interface number 0 [ 128.917619][ T9] usb 2-1: config 74 has no interface number 1 [ 128.917630][ T9] usb 2-1: config 74 has no interface number 2 [ 128.917671][ T9] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 128.917691][ T9] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 128.917713][ T9] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 128.917732][ T9] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 128.917759][ T9] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 128.917785][ T9] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 128.917801][ T9] usb 2-1: config 74 interface 142 has no altsetting 0 [ 128.917814][ T9] usb 2-1: config 74 interface 72 has no altsetting 0 [ 128.917827][ T9] usb 2-1: config 74 interface 97 has no altsetting 0 [ 129.093487][ T9] usb 2-1: string descriptor 0 read error: -22 [ 129.093583][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.097321][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.097504][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.099314][ T9] mct_u232 2-1:74.142: MCT U232 converter detected [ 129.145668][ T9] mct_u232 ttyUSB0: expected endpoint missing [ 129.169331][ T9] mct_u232 2-1:74.72: MCT U232 converter detected [ 129.172299][ T5761] rc_core: IR keymap rc-tt-1500 not found [ 129.172312][ T5761] Registered IR keymap rc-empty [ 129.173320][ T5761] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 129.206734][ T9] mct_u232 ttyUSB1: expected endpoint missing [ 129.224943][ T9] mct_u232 2-1:74.97: MCT U232 converter detected [ 129.226230][ T5761] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 129.230581][ T9] mct_u232 ttyUSB2: expected endpoint missing [ 129.263817][ T5761] dvb-usb: schedule remote query interval to 100 msecs. [ 129.263835][ T5761] pctv452e: pctv452e_power_ctrl: 0 [ 129.263835][ T5761] [ 129.263843][ T5761] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 129.306963][ T5761] usb 4-1: USB disconnect, device number 17 [ 129.337800][ T5716] usb 2-1: USB disconnect, device number 11 [ 129.370648][ T5716] mct_u232 2-1:74.142: device disconnected [ 129.465616][ T5716] mct_u232 2-1:74.72: device disconnected [ 129.472198][ T5716] mct_u232 2-1:74.97: device disconnected [ 129.608161][ T5761] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 129.866203][ T6458] veth1_to_bond: entered allmulticast mode [ 129.991367][ T6458] netlink: 'syz.3.232': attribute type 15 has an invalid length. [ 129.991386][ T6458] netlink: 'syz.3.232': attribute type 7 has an invalid length. [ 130.363939][ T6473] FAULT_INJECTION: forcing a failure. [ 130.363939][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 130.363963][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 130.363981][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.363991][ T6473] Call Trace: [ 130.363997][ T6473] [ 130.364004][ T6473] dump_stack_lvl+0xe8/0x150 [ 130.364025][ T6473] should_fail_ex+0x3eb/0x540 [ 130.364044][ T6473] should_failslab+0xa8/0x100 [ 130.364067][ T6473] __kmalloc_noprof+0xf9/0x710 [ 130.364083][ T6473] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 130.364098][ T6473] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 130.364119][ T6473] __memcg_list_lru_alloc+0x1d9/0x760 [ 130.364150][ T6473] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 130.364173][ T6473] ? get_mem_cgroup_from_folio+0x268/0x2b0 [ 130.364189][ T6473] ? get_mem_cgroup_from_folio+0x57/0x2b0 [ 130.364207][ T6473] folio_memcg_list_lru_alloc+0x349/0x410 [ 130.364222][ T6473] ? folio_memcg_list_lru_alloc+0x50/0x410 [ 130.364240][ T6473] vma_alloc_anon_folio_pmd+0x1cb/0x440 [ 130.364260][ T6473] do_huge_pmd_anonymous_page+0x2cf/0xbf0 [ 130.364283][ T6473] handle_mm_fault+0x19b5/0x3750 [ 130.364299][ T6473] ? mt_find+0x186/0x630 [ 130.364320][ T6473] ? handle_mm_fault+0xf1/0x3750 [ 130.364343][ T6473] ? __pfx_handle_mm_fault+0x10/0x10 [ 130.364377][ T6473] __get_user_pages+0x1669/0x26e0 [ 130.364416][ T6473] populate_vma_page_range+0x311/0x3f0 [ 130.364434][ T6473] ? __pfx_populate_vma_page_range+0x10/0x10 [ 130.364453][ T6473] ? down_read+0x2b9/0x320 [ 130.364471][ T6473] __mm_populate+0x25f/0x390 [ 130.364488][ T6473] ? __pfx___mm_populate+0x10/0x10 [ 130.364510][ T6473] do_mlock+0x622/0x730 [ 130.364531][ T6473] ? __pfx_do_mlock+0x10/0x10 [ 130.364552][ T6473] ? rcu_is_watching+0x16/0xb0 [ 130.364574][ T6473] __x64_sys_mlock+0x77/0xa0 [ 130.364590][ T6473] do_syscall_64+0x166/0x520 [ 130.364604][ T6473] ? trace_irq_disable+0x3b/0x140 [ 130.364618][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.364634][ T6473] ? clear_bhb_loop+0x70/0xc0 [ 130.364651][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.364666][ T6473] RIP: 0033:0x7fa64639e159 [ 130.364681][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.364694][ T6473] RSP: 002b:00007fa6445f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 130.364711][ T6473] RAX: ffffffffffffffda RBX: 00007fa646626090 RCX: 00007fa64639e159 [ 130.364723][ T6473] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 130.364733][ T6473] RBP: 00007fa64643506b R08: 0000000000000000 R09: 0000000000000000 [ 130.364743][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.364752][ T6473] R13: 00007fa646626128 R14: 00007fa646626090 R15: 00007ffd5ddc5078 [ 130.364777][ T6473] [ 130.849869][ T6483] trusted_key: encrypted_key: keylen parameter is missing [ 130.941984][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.964689][ T6487] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 130.968692][ T33] audit: type=1804 audit(1791092369.535:5): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.242" name="file0" dev="hugetlbfs" ino=12077 res=1 errno=0 [ 131.091839][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 131.092462][ T9] usb 3-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 131.094230][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.096197][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.096215][ T9] usb 3-1: Product: syz [ 131.096225][ T9] usb 3-1: Manufacturer: syz [ 131.096236][ T9] usb 3-1: SerialNumber: syz [ 131.100843][ T9] usb 3-1: config 0 descriptor?? [ 131.169850][ T9] asix 3-1:0.0: probe with driver asix failed with error -22 [ 131.374604][ T9] usb 3-1: USB disconnect, device number 11 [ 131.647490][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.396850][ T6513] veth1_to_bond: entered allmulticast mode [ 132.456947][ T6513] netlink: 'syz.1.248': attribute type 15 has an invalid length. [ 132.456989][ T6513] netlink: 'syz.1.248': attribute type 7 has an invalid length. [ 132.543271][ T6493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.986553][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986615][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.022032][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.152104][ T9] usb 2-1: device descriptor read/64, error -71 [ 133.199397][ T6527] FAULT_INJECTION: forcing a failure. [ 133.199397][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 133.199422][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 133.199441][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.199450][ T6527] Call Trace: [ 133.199456][ T6527] [ 133.199463][ T6527] dump_stack_lvl+0xe8/0x150 [ 133.199484][ T6527] should_fail_ex+0x3eb/0x540 [ 133.199503][ T6527] ? __pfx_dev_uevent_name+0x10/0x10 [ 133.199520][ T6527] should_failslab+0xa8/0x100 [ 133.199537][ T6527] __kmalloc_cache_noprof+0x9e/0x600 [ 133.199554][ T6527] ? kobject_uevent_env+0x289/0x9e0 [ 133.199569][ T6527] ? kobject_uevent_env+0x289/0x9e0 [ 133.199587][ T6527] ? __pfx_dev_uevent_name+0x10/0x10 [ 133.199602][ T6527] kobject_uevent_env+0x289/0x9e0 [ 133.199616][ T6527] ? __pfx_dummy_pullup+0x10/0x10 [ 133.199637][ T6527] gadget_bind_driver+0x599/0x9e0 [ 133.199661][ T6527] ? __pfx_gadget_bind_driver+0x10/0x10 [ 133.199675][ T6527] really_probe+0x254/0xae0 [ 133.199693][ T6527] __driver_probe_device+0x1e8/0x360 [ 133.199711][ T6527] driver_probe_device+0x4f/0x240 [ 133.199756][ T6527] __driver_attach+0x339/0x600 [ 133.199774][ T6527] bus_for_each_dev+0x23b/0x2c0 [ 133.199807][ T6527] ? __pfx___driver_attach+0x10/0x10 [ 133.199822][ T6527] ? __pfx_bus_for_each_dev+0x10/0x10 [ 133.199841][ T6527] ? do_raw_spin_unlock+0xf5/0x200 [ 133.199866][ T6527] bus_add_driver+0x38f/0x6e0 [ 133.199889][ T6527] driver_register+0x23a/0x320 [ 133.199912][ T6527] usb_gadget_register_driver_owner+0xf9/0x270 [ 133.199932][ T6527] raw_ioctl+0x1541/0x41c0 [ 133.199953][ T6527] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.199972][ T6527] ? do_vfs_ioctl+0x116f/0x1530 [ 133.199989][ T6527] ? __pfx_raw_ioctl+0x10/0x10 [ 133.200029][ T6527] ? __fget_files+0x2a/0x420 [ 133.200046][ T6527] ? __fget_files+0x2a/0x420 [ 133.200061][ T6527] ? __fget_files+0x2a/0x420 [ 133.200078][ T6527] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.200093][ T6527] ? __pfx_raw_ioctl+0x10/0x10 [ 133.200108][ T6527] __se_sys_ioctl+0xfc/0x170 [ 133.200126][ T6527] do_syscall_64+0x166/0x520 [ 133.200140][ T6527] ? trace_irq_disable+0x3b/0x140 [ 133.200154][ T6527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.200170][ T6527] ? clear_bhb_loop+0x70/0xc0 [ 133.200187][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.200203][ T6527] RIP: 0033:0x7f272339ddeb [ 133.200217][ T6527] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 133.200230][ T6527] RSP: 002b:00007f272419bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.200247][ T6527] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f272339ddeb [ 133.200258][ T6527] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 133.200268][ T6527] RBP: 00007f272419cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 133.200278][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.200287][ T6527] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.200310][ T6527] [ 133.312280][ T5716] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.456522][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.456623][ T5716] usb 3-1: device descriptor read/64, error -71 [ 133.632604][ T5808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 133.702815][ T5716] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 133.702911][ T9] usb 2-1: device descriptor read/64, error -71 [ 133.784089][ T5808] usb 4-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 133.784987][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.785006][ T5808] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.785034][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.832794][ T9] usb usb2-port1: attempt power cycle [ 133.833972][ T5716] usb 3-1: device descriptor read/64, error -71 [ 133.834971][ T5808] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 133.841717][ T5808] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 133.942367][ T5716] usb usb3-port1: attempt power cycle [ 134.136030][ T6530] vivid-000: ================= START STATUS ================= [ 134.136048][ T6530] vivid-000: Test Pattern: 75% Colorbar [ 134.136066][ T6530] vivid-000: Fill Percentage of Frame: 100 [ 134.136082][ T6530] vivid-000: Horizontal Movement: No Movement [ 134.136097][ T6530] vivid-000: Vertical Movement: No Movement [ 134.136111][ T6530] vivid-000: OSD Text Mode: All [ 134.136124][ T6530] vivid-000: Show Border: false [ 134.136157][ T6530] vivid-000: Show Square: false [ 134.136171][ T6530] vivid-000: Sensor Flipped Horizontally: false [ 134.136185][ T6530] vivid-000: Sensor Flipped Vertically: false [ 134.136199][ T6530] vivid-000: Insert SAV Code in Image: false [ 134.136213][ T6530] vivid-000: Insert EAV Code in Image: false [ 134.136228][ T6530] vivid-000: Insert Video Guard Band: false [ 134.136242][ T6530] vivid-000: Reduced Framerate: false [ 134.136256][ T6530] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 134.136288][ T6530] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 134.136304][ T6530] vivid-000: Enable Capture Cropping: true [ 134.136318][ T6530] vivid-000: Enable Capture Composing: false [ 134.136332][ T6530] vivid-000: Enable Capture Scaler: true [ 134.136345][ T6530] vivid-000: Timestamp Source: End of Frame [ 134.136359][ T6530] vivid-000: Colorspace: sRGB [ 134.136372][ T6530] vivid-000: Transfer Function: Default [ 134.136386][ T6530] vivid-000: Y'CbCr Encoding: Default [ 134.136400][ T6530] vivid-000: HSV Encoding: Hue 0-179 [ 134.136431][ T6530] vivid-000: Quantization: Default [ 134.136445][ T6530] vivid-000: Apply Alpha To Red Only: false [ 134.136459][ T6530] vivid-000: Standard Aspect Ratio: 4x3 [ 134.136473][ T6530] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 134.136491][ T6530] vivid-000: DV Timings: 640x480p59 inactive [ 134.136508][ T6530] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 134.136523][ T6530] vivid-000: Maximum EDID Blocks: 2 [ 134.136537][ T6530] vivid-000: Limited RGB Range (16-235): false [ 134.136568][ T6530] vivid-000: Rx RGB Quantization Range: Automatic [ 134.136582][ T6530] vivid-000: Power Present: 0x00000001 [ 134.136598][ T6530] tpg source WxH: 320x180 (R'G'B) [ 134.136607][ T6530] tpg field: 1 [ 134.136612][ T6530] tpg crop: (0,0)/320x180 [ 134.136622][ T6530] tpg compose: (0,0)/320x180 [ 134.136631][ T6530] tpg colorspace: 8 [ 134.136637][ T6530] tpg transfer function: 0/0 [ 134.136644][ T6530] tpg quantization: 0/0 [ 134.136651][ T6530] tpg RGB range: 0/2 [ 134.136657][ T6530] vivid-000: ================== END STATUS ================== [ 134.175816][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.186310][ T6527] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 134.193120][ T6527] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 134.201460][ T9] usb 2-1: device descriptor read/8, error -71 [ 134.324930][ T5716] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.443437][ T5716] usb 3-1: device descriptor read/8, error -71 [ 134.464666][ T6527] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 134.479617][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 134.498643][ T6527] FAULT_INJECTION: forcing a failure. [ 134.498643][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 134.498666][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 134.498684][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.498694][ T6527] Call Trace: [ 134.498700][ T6527] [ 134.498707][ T6527] dump_stack_lvl+0xe8/0x150 [ 134.498730][ T6527] should_fail_ex+0x3eb/0x540 [ 134.498750][ T6527] should_failslab+0xa8/0x100 [ 134.498772][ T6527] ? dup_fd+0x59/0xbf0 [ 134.498786][ T6527] kmem_cache_alloc_noprof+0x9c/0x600 [ 134.498804][ T6527] ? dup_fd+0x59/0xbf0 [ 134.498822][ T6527] dup_fd+0x59/0xbf0 [ 134.498843][ T6527] ? do_raw_spin_unlock+0xf5/0x200 [ 134.498862][ T6527] unshare_fd+0xa8/0x120 [ 134.498879][ T6527] ksys_unshare+0x4d2/0x890 [ 134.498896][ T6527] ? __pfx_ksys_unshare+0x10/0x10 [ 134.498912][ T6527] ? rcu_is_watching+0x16/0xb0 [ 134.498936][ T6527] __x64_sys_unshare+0x38/0x50 [ 134.498951][ T6527] do_syscall_64+0x166/0x520 [ 134.498966][ T6527] ? trace_irq_disable+0x3b/0x140 [ 134.498979][ T6527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.498995][ T6527] ? clear_bhb_loop+0x70/0xc0 [ 134.499013][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.499029][ T6527] RIP: 0033:0x7f272339e159 [ 134.499044][ T6527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.499057][ T6527] RSP: 002b:00007f272419e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.499074][ T6527] RAX: ffffffffffffffda RBX: 00007f2723625fa0 RCX: 00007f272339e159 [ 134.499086][ T6527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 134.499095][ T6527] RBP: 00007f272343506b R08: 0000000000000000 R09: 0000000000000000 [ 134.499105][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.499115][ T6527] R13: 00007f2723626038 R14: 00007f2723625fa0 R15: 00007fff137c5668 [ 134.499138][ T6527] [ 134.615883][ T6526] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 134.688911][ T9] usb 2-1: device descriptor read/8, error -71 [ 134.755008][ T1229] usb 4-1: USB disconnect, device number 18 [ 134.785911][ T1229] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 134.789942][ T1229] spcp8x5 4-1:1.0: device disconnected [ 134.793295][ T5716] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 134.817966][ T9] usb usb2-port1: unable to enumerate USB device [ 134.833057][ T5716] usb 3-1: device descriptor read/8, error -71 [ 134.942065][ T5716] usb usb3-port1: unable to enumerate USB device [ 136.483037][ T6664] syzkaller1: entered promiscuous mode [ 136.483055][ T6664] syzkaller1: entered allmulticast mode [ 136.936930][ T6676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.091102][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.267'. [ 137.106016][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.267'. [ 137.124784][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 137.251925][ T1229] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 137.252063][ T5716] usb 3-1: device descriptor read/64, error -71 [ 137.411355][ T1229] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.423620][ T1229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.423658][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.425538][ T1229] usb 4-1: config 0 descriptor?? [ 137.461289][ T1229] pwc: Askey VC010 type 2 USB webcam detected. [ 137.492256][ T5716] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.628116][ T5716] usb 3-1: device descriptor read/64, error -71 [ 137.732286][ T5716] usb usb3-port1: attempt power cycle [ 137.858838][ T1229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 137.892186][ T1229] pwc: recv_control_msg error -32 req 02 val 2700 [ 138.078011][ T5716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 138.097811][ T5716] usb 3-1: device descriptor read/8, error -71 [ 138.128921][ T1229] pwc: recv_control_msg error -71 req 04 val 1000 [ 138.143338][ T1229] pwc: recv_control_msg error -71 req 04 val 1300 [ 138.150210][ T1229] pwc: recv_control_msg error -71 req 04 val 1400 [ 138.150833][ T1229] pwc: recv_control_msg error -71 req 02 val 2000 [ 138.166473][ T1229] pwc: recv_control_msg error -71 req 02 val 2100 [ 138.167162][ T1229] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.181308][ T1229] pwc: recv_control_msg error -71 req 02 val 2500 [ 138.188850][ T1229] pwc: recv_control_msg error -71 req 02 val 2400 [ 138.189282][ T1229] pwc: recv_control_msg error -71 req 02 val 2600 [ 138.211962][ T1229] pwc: recv_control_msg error -71 req 02 val 2900 [ 138.213193][ T1229] pwc: recv_control_msg error -71 req 02 val 2800 [ 138.213735][ T1229] pwc: recv_control_msg error -71 req 04 val 1100 [ 138.214211][ T1229] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.261329][ T1229] pwc: Registered as video103. [ 138.269262][ T1229] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 138.293302][ T5808] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.342949][ T5716] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 138.370161][ T5716] usb 3-1: device descriptor read/8, error -71 [ 138.371159][ T1229] usb 4-1: USB disconnect, device number 19 [ 138.442877][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 138.444047][ T5808] usb 1-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e [ 138.445483][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.445510][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.477598][ T5716] usb usb3-port1: unable to enumerate USB device [ 138.512327][ T5808] usb 1-1: config 0 descriptor?? [ 138.550769][ T5808] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 138.616719][ T5808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.617075][ T5808] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 138.617108][ T5808] usb 1-1: media controller created [ 138.699843][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.776951][ T5808] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 138.776971][ T5808] error writing reg: 0xff, val: 0x00 [ 138.887863][ T5808] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 138.992657][ T1229] usb 1-1: USB disconnect, device number 11 [ 139.051534][ T6685] netlink: 376 bytes leftover after parsing attributes in process `syz.3.270'. [ 139.748173][ T6698] tmpfs: Bad value for 'mpol' [ 140.034960][ T6706] Bluetooth: MGMT ver 1.23 [ 140.055223][ T6714] futex_wake_op: syz.3.277 tries to shift op by -1; fix this program [ 140.281887][ T1229] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 140.291954][ T5808] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 140.321879][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 140.432837][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 140.440140][ T1229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.440195][ T1229] usb 2-1: New USB device found: idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 140.441234][ T1229] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 140.441252][ T1229] usb 2-1: config 4 has no interface number 0 [ 140.441272][ T1229] usb 2-1: config 4 interface 127 has no altsetting 0 [ 140.461824][ T5808] usb 3-1: Invalid ep0 maxpacket: 64 [ 140.494555][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.494703][ T1229] usb 2-1: string descriptor 0 read error: -22 [ 140.494826][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.496093][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 140.496116][ T9] usb 4-1: New USB device found: idVendor=03f0, idProduct=0307, bcdDevice=0.01 [ 140.543900][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 140.543921][ T9] usb 4-1: config 1 has no interface number 0 [ 140.543949][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 140.543965][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 140.543985][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 140.544003][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 140.544023][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.544039][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.544058][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 140.613782][ T5808] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 140.671555][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.671577][ T9] usb 4-1: Product: syz [ 140.671588][ T9] usb 4-1: Manufacturer: syz [ 140.671598][ T9] usb 4-1: SerialNumber: syz [ 140.707485][ T6714] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.707654][ T6714] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.801914][ T5808] usb 3-1: Invalid ep0 maxpacket: 64 [ 140.802209][ T5808] usb usb3-port1: attempt power cycle [ 140.944307][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.944703][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.011017][ T6713] syzkaller1: entered promiscuous mode [ 141.011035][ T6713] syzkaller1: entered allmulticast mode [ 141.040297][ T6718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.145500][ T5761] usb 2-1: USB disconnect, device number 16 [ 141.157510][ T5808] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 141.172893][ T5808] usb 3-1: Invalid ep0 maxpacket: 64 [ 141.283555][ T9] ums-usbat 4-1:1.116: USB Mass Storage device detected [ 141.302945][ T5808] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 141.323972][ T5808] usb 3-1: Invalid ep0 maxpacket: 64 [ 141.324163][ T5808] usb usb3-port1: unable to enumerate USB device [ 141.352833][ T9] ums-usbat 4-1:1.116: probe with driver ums-usbat failed with error -5 [ 141.373668][ T9] usb 4-1: USB disconnect, device number 20 [ 141.735866][ T6729] kAFS: unparsable volume name [ 142.182233][ T6738] loop0: detected capacity change from 0 to 3904 [ 142.246142][ T6738] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 142.246165][ T6738] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 142.246175][ T6738] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 142.246223][ T6738] loop0: [ 142.857394][ T6746] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 142.857433][ T6746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 143.113377][ T6750] capability: warning: `syz.3.291' uses 32-bit capabilities (legacy support in use) [ 143.384344][ T6757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 143.411265][ T5761] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.574742][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 143.576757][ T5761] usb 1-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 143.577597][ T5761] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 143.577614][ T5761] usb 1-1: config 0 has no interface number 0 [ 143.581139][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.581157][ T5761] usb 1-1: Product: syz [ 143.581167][ T5761] usb 1-1: Manufacturer: syz [ 143.581178][ T5761] usb 1-1: SerialNumber: syz [ 143.646507][ T5761] usb 1-1: config 0 descriptor?? [ 143.983120][ T5808] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 144.058784][ T5761] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 144.058810][ T5761] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.131849][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 144.132515][ T5808] usb 3-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 144.135046][ T6774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=103 (412 ns) > initial count (208 ns). Using initial count to start timer. [ 144.180034][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.180055][ T5808] usb 3-1: Product: syz [ 144.180066][ T5808] usb 3-1: Manufacturer: syz [ 144.180084][ T5808] usb 3-1: SerialNumber: syz [ 144.182747][ T5808] usb 3-1: config 0 descriptor?? [ 144.220487][ T6774] kvm: Disabled LAPIC found during irq injection [ 144.220499][ T6774] kvm: apic: phys broadcast and lowest prio [ 144.260380][ T5808] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 144.260485][ T5808] dvb-usb: bulk message failed: -22 (4/0) [ 144.260497][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 144.260601][ T5808] dvb-usb: bulk message failed: -22 (5/0) [ 144.260611][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 144.344768][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.345598][ T5808] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 144.345654][ T5808] usb 3-1: media controller created [ 144.393044][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.445893][ T5808] usb 3-1: selecting invalid altsetting 3 [ 144.445930][ T5808] ttusb2: set interface to alts=3 failed [ 144.548329][ T5808] DVB: Unable to find symbol tda10086_attach() [ 144.548344][ T5808] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 144.549077][ T5808] dvb-usb: bulk message failed: -22 (4/0) [ 144.549091][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 144.549288][ T5808] dvb-usb: bulk message failed: -22 (5/0) [ 144.549299][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 144.549344][ T5808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 144.627130][ T5808] usb 3-1: USB disconnect, device number 24 [ 144.725548][ T5808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 144.969739][ T6751] netlink: 276 bytes leftover after parsing attributes in process `syz.0.290'. [ 145.012965][ T6751] comedi comedi3: 8255: I/O port conflict (0x1000000,4) [ 145.041922][ T5761] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 145.042740][ T5761] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 145.086862][ T5761] usb 1-1: USB disconnect, device number 12 [ 145.682798][ T5761] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 145.713946][ T6801] binder: Failure in copy_transaction_data: EFAULT [ 145.832869][ T5761] usb 4-1: New USB device found: idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 145.833819][ T5761] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 145.833837][ T5761] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 145.833851][ T5761] usb 4-1: config 0 has no interface number 0 [ 145.833863][ T5761] usb 4-1: config 0 has no interface number 1 [ 145.833889][ T5761] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 145.833914][ T5761] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 145.833934][ T5761] usb 4-1: config 0 interface 255 has no altsetting 0 [ 145.837421][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.837439][ T5761] usb 4-1: Product: syz [ 145.837450][ T5761] usb 4-1: Manufacturer: syz [ 145.837461][ T5761] usb 4-1: SerialNumber: syz [ 145.851627][ T5761] usb 4-1: config 0 descriptor?? [ 145.980827][ T5761] usb 4-1: selecting invalid altsetting 0 [ 145.980846][ T5761] usb 4-1: Could not set interface, error -22 [ 146.001899][ T5808] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.154558][ T5808] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.167848][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.188975][ T5808] usb 1-1: config 0 descriptor?? [ 146.240808][ T5761] usb 4-1: USB disconnect, device number 21 [ 146.394790][ T5808] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 146.718336][ T5808] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 146.718376][ T5808] [drm] Initialized udl on minor 1 [ 147.525623][ T6828] tmpfs: Unknown parameter '' [ 148.669177][ T33] audit: type=1400 audit(1791092643.240:6): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6837 comm="syz.3.325" [ 148.669902][ T6801] syz.0.312 (6801) used greatest stack depth: 11840 bytes left [ 148.812798][ T6840] kvm [6837]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 148.813056][ T6840] kvm [6837]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 149.264853][ T6846] sctp: [Deprecated]: syz.2.327 (pid 6846) Use of int in max_burst socket option. [ 149.264853][ T6846] Use struct sctp_assoc_value instead [ 149.689833][ T6853] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 149.720168][ T6853] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 149.901970][ T5761] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 150.054512][ T5761] usb 4-1: New USB device found: idVendor=110a, idProduct=1410, bcdDevice=0.00 [ 150.055522][ T5761] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.055575][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.312162][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.312989][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.318999][ T6851] futex_wake_op: syz.3.329 tries to shift op by 32; fix this program [ 150.371596][ T5761] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 150.384200][ T5761] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 150.384263][ T5761] mxuport 4-1:1.0: probe with driver mxuport failed with error -71 [ 150.420194][ T5761] usb 4-1: USB disconnect, device number 22 [ 150.894135][ T5761] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 151.047116][ T5761] usb 3-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 151.048359][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.048381][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.048442][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.084897][ T5761] usb 3-1: config 0 descriptor?? [ 151.277270][ T6866] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 151.518875][ T6857] xt_policy: neither incoming nor outgoing policy selected [ 151.763273][ T5761] usbhid 3-1:0.0: can't add hid device: -71 [ 151.763375][ T5761] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.770042][ T5761] usb 3-1: USB disconnect, device number 25 [ 151.864236][ T5808] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 151.886914][ T5808] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 151.924417][ T5808] usb 1-1: USB disconnect, device number 13 [ 152.328553][ T6882] Bluetooth: MGMT ver 1.23 [ 152.386325][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 152.401544][ T5613] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 152.546464][ T6893] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 152.702570][ T5761] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 152.731916][ T1229] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 152.803483][ T5808] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 152.852561][ T5761] usb 4-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 152.853460][ T5761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.853479][ T5761] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.853508][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.912446][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 152.916835][ T1229] usb 3-1: New USB device found: idVendor=0586, idProduct=330a, bcdDevice=58.2c [ 152.917775][ T1229] usb 3-1: config 7 has an invalid interface number: 61 but max is 3 [ 152.917793][ T1229] usb 3-1: config 7 has an invalid interface number: 194 but max is 3 [ 152.917808][ T1229] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 152.917820][ T1229] usb 3-1: config 7 has an invalid interface number: 131 but max is 3 [ 152.917835][ T1229] usb 3-1: config 7 has an invalid interface number: 15 but max is 3 [ 152.917850][ T1229] usb 3-1: config 7 has an invalid descriptor of length 254, skipping remainder of the config [ 152.917864][ T1229] usb 3-1: config 7 has no interface number 0 [ 152.917875][ T1229] usb 3-1: config 7 has no interface number 1 [ 152.917887][ T1229] usb 3-1: config 7 has no interface number 2 [ 152.917898][ T1229] usb 3-1: config 7 has no interface number 3 [ 152.917988][ T1229] usb 3-1: config 7 interface 61 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 152.918010][ T1229] usb 3-1: config 7 interface 61 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 152.918029][ T1229] usb 3-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 152.918045][ T1229] usb 3-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 152.918069][ T1229] usb 3-1: config 7 interface 61 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 152.918097][ T1229] usb 3-1: config 7 interface 194 altsetting 35 endpoint 0x85 has invalid maxpacket 927, setting to 64 [ 152.918118][ T1229] usb 3-1: config 7 interface 194 altsetting 35 has an endpoint descriptor with address 0x3D, changing to 0xD [ 152.918136][ T1229] usb 3-1: config 7 interface 194 altsetting 35 endpoint 0xD has invalid maxpacket 59239, setting to 1024 [ 152.918155][ T1229] usb 3-1: config 7 interface 194 altsetting 35 bulk endpoint 0xD has invalid maxpacket 1024 [ 152.918173][ T1229] usb 3-1: config 7 interface 194 altsetting 35 has an invalid descriptor for endpoint zero, skipping [ 152.918188][ T1229] usb 3-1: config 7 interface 194 altsetting 35 has an endpoint descriptor with address 0x2D, changing to 0xD [ 152.918206][ T1229] usb 3-1: config 7 interface 194 altsetting 35 has a duplicate endpoint with address 0xD, skipping [ 152.918223][ T1229] usb 3-1: config 7 interface 194 altsetting 35 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 152.918243][ T1229] usb 3-1: config 7 interface 194 altsetting 35 has 6 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.918270][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 152.918288][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 152.918303][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 152.918319][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 152.918335][ T1229] usb 3-1: config 7 interface 131 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 152.918355][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 152.918371][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 152.918387][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 152.918425][ T1229] usb 3-1: config 7 interface 131 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 152.918445][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 152.918461][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 152.918477][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 152.918493][ T1229] usb 3-1: config 7 interface 131 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 152.918509][ T1229] usb 3-1: config 7 interface 131 altsetting 128 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 152.918536][ T1229] usb 3-1: config 7 interface 15 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 152.918552][ T1229] usb 3-1: config 7 interface 15 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 152.918572][ T1229] usb 3-1: config 7 interface 61 has no altsetting 0 [ 152.918585][ T1229] usb 3-1: config 7 interface 194 has no altsetting 0 [ 152.918598][ T1229] usb 3-1: config 7 interface 131 has no altsetting 0 [ 152.918612][ T1229] usb 3-1: config 7 interface 15 has no altsetting 0 [ 153.011817][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.011839][ T1229] usb 3-1: Product: Ў [ 153.011851][ T1229] usb 3-1: Manufacturer: ᰁ [ 153.011863][ T1229] usb 3-1: SerialNumber: Ⰺ [ 153.114612][ T5808] usb 1-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 153.152923][ T5808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.152945][ T5808] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.152974][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.566639][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 153.584929][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.585308][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.618629][ T5613] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 153.633842][ T5808] usb 4-1: USB disconnect, device number 23 [ 153.731366][ T5716] usb 1-1: USB disconnect, device number 14 [ 153.849088][ T1229] cxacru 3-1:7.61: usbatm_usb_probe: bind failed: -19! [ 153.870956][ T1229] cdc_ether 3-1:7.194: skipping garbage [ 153.870977][ T1229] usb 3-1: No union descriptors [ 153.885785][ T1229] cxacru 3-1:7.194: usbatm_usb_probe: bind failed: -19! [ 153.907307][ T1229] cxacru 3-1:7.131: usbatm_usb_probe: bind failed: -19! [ 153.929941][ T1229] cxacru 3-1:7.15: usbatm_usb_probe: bind failed: -19! [ 153.946712][ T1229] usb 3-1: USB disconnect, device number 26 [ 154.807307][ T6925] syzkaller1: entered promiscuous mode [ 154.807326][ T6925] syzkaller1: entered allmulticast mode [ 155.073345][ T6932] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 155.117739][ T33] audit: type=1326 audit(1791092649.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.355" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9504d9e159 code=0x0 [ 155.551963][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 155.702019][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 155.703594][ T9] usb 2-1: New USB device found: idVendor=046c, idProduct=14e8, bcdDevice=b.28 [ 155.704503][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.704521][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.704535][ T9] usb 2-1: config 0 has no interface number 0 [ 155.706778][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.706796][ T9] usb 2-1: Product: syz [ 155.706807][ T9] usb 2-1: Manufacturer: syz [ 155.706817][ T9] usb 2-1: SerialNumber: syz [ 155.748917][ T9] usb 2-1: config 0 descriptor?? [ 155.810000][ T9] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 155.810044][ T9] uvcvideo 2-1:0.105: No valid video chain found. [ 155.930936][ T6949] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 155.976506][ T6941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.357'. [ 156.108609][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'. [ 156.301140][ T6960] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 156.473138][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 156.586931][ T6967] FAULT_INJECTION: forcing a failure. [ 156.586931][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 156.586956][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.3.366 Not tainted syzkaller #0 PREEMPT(full) [ 156.586975][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.586986][ T6967] Call Trace: [ 156.586992][ T6967] [ 156.586999][ T6967] dump_stack_lvl+0xe8/0x150 [ 156.587021][ T6967] should_fail_ex+0x3eb/0x540 [ 156.587042][ T6967] should_failslab+0xa8/0x100 [ 156.587060][ T6967] __kvmalloc_node_noprof+0x171/0x820 [ 156.587077][ T6967] ? __kmalloc_cache_noprof+0x31c/0x600 [ 156.587093][ T6967] ? nf_tables_commit+0xc31/0xad60 [ 156.587107][ T6967] ? nf_tables_commit+0xc31/0xad60 [ 156.587127][ T6967] nf_tables_commit+0xc31/0xad60 [ 156.587148][ T6967] ? lock_acquire+0x115/0x350 [ 156.587172][ T6967] ? nft_pernet+0x23/0x240 [ 156.587186][ T6967] ? nft_pernet+0x23/0x240 [ 156.587204][ T6967] ? __pfx_nf_tables_commit+0x10/0x10 [ 156.587218][ T6967] ? rcu_is_watching+0x16/0xb0 [ 156.587234][ T6967] ? kfree+0x4d/0x650 [ 156.587248][ T6967] ? nft_trans_rule_add+0x315/0x440 [ 156.587266][ T6967] ? nf_tables_newrule+0x258d/0x28a0 [ 156.587293][ T6967] ? __pfx_nf_tables_newrule+0x10/0x10 [ 156.587307][ T6967] ? lock_acquire+0x115/0x350 [ 156.587337][ T6967] nfnetlink_rcv+0x1caf/0x28c0 [ 156.587378][ T6967] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.587428][ T6967] ? skb_clone+0x246/0x3a0 [ 156.587453][ T6967] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.587469][ T6967] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.587488][ T6967] netlink_unicast+0x7bd/0x940 [ 156.587512][ T6967] netlink_sendmsg+0x7c3/0xae0 [ 156.587531][ T6967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.587552][ T6967] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.587570][ T6967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.587585][ T6967] sock_sendmsg_nosec+0x14e/0x190 [ 156.587603][ T6967] ____sys_sendmsg+0x54e/0x850 [ 156.587623][ T6967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.587645][ T6967] ? import_iovec+0x73/0xa0 [ 156.587663][ T6967] ___sys_sendmsg+0x2a5/0x360 [ 156.587676][ T6967] ? __lock_acquire+0x747/0x2de0 [ 156.587695][ T6967] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.587714][ T6967] ? futex_wait+0x2a2/0x390 [ 156.587753][ T6967] ? __fget_files+0x3a2/0x420 [ 156.587767][ T6967] ? __fget_files+0x2a/0x420 [ 156.587788][ T6967] __x64_sys_sendmsg+0x1b1/0x290 [ 156.587806][ T6967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.587837][ T6967] do_syscall_64+0x166/0x520 [ 156.587852][ T6967] ? trace_irq_disable+0x3b/0x140 [ 156.587872][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.587889][ T6967] ? clear_bhb_loop+0x70/0xc0 [ 156.587905][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.587922][ T6967] RIP: 0033:0x7f272339e159 [ 156.587936][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.587951][ T6967] RSP: 002b:00007f272419e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.587968][ T6967] RAX: ffffffffffffffda RBX: 00007f2723625fa0 RCX: 00007f272339e159 [ 156.587980][ T6967] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 156.587990][ T6967] RBP: 00007f272343506b R08: 0000000000000000 R09: 0000000000000000 [ 156.588000][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.588010][ T6967] R13: 00007f2723626038 R14: 00007f2723625fa0 R15: 00007fff137c5668 [ 156.588034][ T6967] [ 156.648335][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 156.669704][ T9] usb 1-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 156.824366][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 156.824390][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10057, setting to 1024 [ 156.824430][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.824461][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.975260][ T9] usb 1-1: config 0 descriptor?? [ 156.976332][ T6958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.076831][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 157.198808][ T6955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.363'. [ 157.938954][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 157.963854][ T6979] netlink: 'syz.2.370': attribute type 2 has an invalid length. [ 157.963872][ T6979] netlink: 'syz.2.370': attribute type 11 has an invalid length. [ 157.963883][ T6979] netlink: 112 bytes leftover after parsing attributes in process `syz.2.370'. [ 158.162476][ T5716] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 158.315304][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 158.340371][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.340429][ T5716] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 158.351329][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.351350][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.351384][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.351424][ T5716] usb 4-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 158.396612][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.396634][ T5716] usb 4-1: Product: syz [ 158.396645][ T5716] usb 4-1: Manufacturer: syz [ 158.396655][ T5716] usb 4-1: SerialNumber: syz [ 158.499951][ T5808] usb 2-1: USB disconnect, device number 17 [ 158.992216][ T5808] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 159.062838][ T5761] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 159.147067][ T5808] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 159.150209][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.150262][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 159.150283][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 159.150314][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.233953][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 159.251505][ T5761] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.251571][ T5761] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 159.260319][ T5761] usb 3-1: config 14 has an invalid interface number: 57 but max is 0 [ 159.260360][ T5761] usb 3-1: config 14 has no interface number 0 [ 159.260390][ T5761] usb 3-1: config 14 interface 57 has no altsetting 0 [ 159.309948][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.309969][ T5761] usb 3-1: Product: syz [ 159.309980][ T5761] usb 3-1: Manufacturer: syz [ 159.310036][ T5761] usb 3-1: SerialNumber: syz [ 159.448714][ T6955] syz.0.363 (6955): drop_caches: 2 [ 159.498325][ T10] usb 1-1: USB disconnect, device number 15 [ 159.590382][ T5761] legousbtower 3-1:14.57: interrupt endpoints not found [ 159.635368][ T5761] usb 3-1: USB disconnect, device number 27 [ 160.153193][ T6992] kernel profiling enabled (shift: 4) [ 160.390716][ T5716] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 160.394517][ T5716] cdc_ncm 4-1:1.0: bind() failure [ 160.437151][ T5716] usb 4-1: USB disconnect, device number 24 [ 160.849010][ T7004] netlink: 64 bytes leftover after parsing attributes in process `syz.3.378'. [ 161.072304][ T5761] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 161.224485][ T5761] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.231237][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.256294][ T5761] usb 3-1: config 0 descriptor?? [ 161.445515][ T7006] 9p: Bad value for 'rfdno' [ 161.478764][ T5761] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 161.584172][ T7008] tipc: Started in network mode [ 161.584203][ T7008] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 161.589119][ T7008] tipc: Enabled bearer , priority 10 [ 161.713447][ T5761] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 161.713468][ T5761] [drm] Initialized udl on minor 1 [ 161.720248][ T5808] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 161.720310][ T5808] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 161.725357][ T5808] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 161.726825][ T5808] ATM dev 0: poll status: error -71 [ 161.726863][ T5808] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 161.726875][ T5808] ATM dev 0: usbatm_submit_urb: urb 0xffff888075bb6100 submission failed (-8)! [ 161.727017][ T5808] ATM dev 0: usbatm_submit_urb: urb 0xffff88807530b100 submission failed (-8)! [ 161.727033][ T5808] ATM dev 0: usbatm_submit_urb: urb 0xffff8880750a0d00 submission failed (-8)! [ 161.727047][ T5808] ATM dev 0: usbatm_submit_urb: urb 0xffff88802b827e00 submission failed (-8)! [ 161.833516][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802b827e00 submission failed (-8)! [ 161.875541][ T5808] usb 2-1: USB disconnect, device number 18 [ 161.891221][ T5716] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 162.045056][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.045113][ T5716] usb 1-1: New USB device found: idVendor=0582, idProduct=9b12, bcdDevice=0.40 [ 162.046349][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.046419][ T5716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 162.046436][ T5716] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 162.046453][ T5716] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.050428][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.050447][ T5716] usb 1-1: Product: syz [ 162.050458][ T5716] usb 1-1: Manufacturer: syz [ 162.050469][ T5716] usb 1-1: SerialNumber: syz [ 162.372786][ T5808] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 163.338297][ T10] tipc: Node number set to 4269801488 [ 163.442575][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.442612][ T5808] usb 2-1: New USB device found: idVendor=0582, idProduct=9b12, bcdDevice=0.40 [ 163.445817][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.445876][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 163.445893][ T5808] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 163.445910][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.449661][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.449680][ T5808] usb 2-1: Product: syz [ 163.449690][ T5808] usb 2-1: Manufacturer: syz [ 163.449701][ T5808] usb 2-1: SerialNumber: syz [ 163.671369][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.671386][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.777097][ T5716] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.777146][ T5716] usb 1-1: MIDIStreaming interface descriptor not found [ 163.793128][ T7022] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 163.793146][ T7022] device-mapper: raid: Choosing default region size of 4MiB [ 165.139908][ T5716] usb 1-1: USB disconnect, device number 16 [ 165.393523][ T7022] device-mapper: table: 248:1: raid: Component device(s) too small (-EINVAL) [ 165.393547][ T7022] device-mapper: ioctl: error adding target to table [ 165.524683][ T5808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.524724][ T5808] usb 2-1: MIDIStreaming interface descriptor not found [ 165.675324][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.947186][ T5808] usb 2-1: USB disconnect, device number 19 [ 166.194607][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.755950][ T5761] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 166.756282][ T5761] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 166.806514][ T5761] usb 3-1: USB disconnect, device number 28 [ 166.827781][ T1229] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 166.936306][ T1229] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 167.326786][ T33] audit: type=1804 audit(1791092661.900:8): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.390" name="/newroot/96/file0" dev="fuse" ino=1 res=1 errno=0 [ 167.629606][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.629934][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.695449][ T7061] netlink: 'syz.3.393': attribute type 3 has an invalid length. [ 167.854652][ T5808] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 167.952687][ T5761] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.002034][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 168.005739][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.005776][ T5808] usb 1-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 168.009500][ T5808] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.009518][ T5808] usb 1-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 168.009533][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.027523][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.027544][ T5808] usb 1-1: Product: syz [ 168.027555][ T5808] usb 1-1: Manufacturer: syz [ 168.027566][ T5808] usb 1-1: SerialNumber: syz [ 168.085565][ T5761] usb 4-1: device descriptor read/64, error -71 [ 168.125775][ T5808] usb 1-1: selecting invalid altsetting 1 [ 168.173181][ T7073] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 168.323172][ T5761] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 168.341510][ T5808] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 168.376356][ T5808] usb 1-1: USB disconnect, device number 17 [ 168.420551][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.463271][ T5761] usb 4-1: device descriptor read/64, error -71 [ 168.490705][ T7077] syzkaller1: entered promiscuous mode [ 168.490723][ T7077] syzkaller1: entered allmulticast mode [ 168.573496][ T5761] usb usb4-port1: attempt power cycle [ 168.785701][ T5716] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 168.914347][ T5761] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 168.932506][ T5716] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 168.933759][ T5761] usb 4-1: device descriptor read/8, error -71 [ 168.933889][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.933919][ T5716] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.933935][ T5716] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.934911][ T5716] usb 3-1: New USB device strings: Mfr=63, Product=0, SerialNumber=0 [ 168.934929][ T5716] usb 3-1: Manufacturer: syz [ 169.014627][ T5808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 169.163725][ T5808] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 169.164667][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.166581][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.166600][ T5808] usb 2-1: Product: syz [ 169.166611][ T5808] usb 2-1: Manufacturer: syz [ 169.166622][ T5808] usb 2-1: SerialNumber: syz [ 169.173718][ T5761] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 169.232893][ T5761] usb 4-1: device descriptor read/8, error -71 [ 169.258863][ T5716] usb 3-1: USB disconnect, device number 29 [ 169.345448][ T5761] usb usb4-port1: unable to enumerate USB device [ 169.403896][ T7099] fuse: Bad value for 'fd' [ 169.438046][ T7099] vcan0: tx address claim with dest, not broadcast [ 169.634930][ T5808] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 169.635044][ T5808] cdc_ncm 2-1:1.0: bind() failure [ 169.654804][ T5808] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 169.654838][ T5808] cdc_ncm 2-1:1.1: bind() failure [ 170.136170][ T7116] kvm [7115]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 170.136321][ T7116] kvm [7115]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 170.385325][ T7123] jffs2: notice: (7123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.660009][ T5613] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 171.159645][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.412'. [ 171.191880][ T5808] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 171.308129][ T5613] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 171.346902][ T5808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.346942][ T5808] usb 3-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 171.370607][ T5808] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 171.391660][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.391682][ T5808] usb 3-1: Product: syz [ 171.391693][ T5808] usb 3-1: Manufacturer: syz [ 171.391704][ T5808] usb 3-1: SerialNumber: syz [ 171.634994][ T5808] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.821838][ T5716] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 171.975815][ T5716] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 171.977585][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.977621][ T5716] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.030050][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.030093][ T5716] usb 4-1: Product: syz [ 172.030104][ T5716] usb 4-1: Manufacturer: syz [ 172.030115][ T5716] usb 4-1: SerialNumber: syz [ 172.188356][ T5761] usb 2-1: USB disconnect, device number 20 [ 172.274777][ T5808] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 172.413576][ T5808] usb 3-1: USB disconnect, device number 30 [ 172.451705][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.506548][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.544344][ T5761] usb 4-1: USB disconnect, device number 29 [ 172.550779][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.710208][ T7162] FAULT_INJECTION: forcing a failure. [ 172.710208][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 172.710233][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.1.419 Not tainted syzkaller #0 PREEMPT(full) [ 172.710250][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.710260][ T7162] Call Trace: [ 172.710267][ T7162] [ 172.710273][ T7162] dump_stack_lvl+0xe8/0x150 [ 172.710294][ T7162] should_fail_ex+0x3eb/0x540 [ 172.710314][ T7162] should_failslab+0xa8/0x100 [ 172.710331][ T7162] __kmalloc_noprof+0xf9/0x710 [ 172.710345][ T7162] ? rcu_is_watching+0x16/0xb0 [ 172.710361][ T7162] ? tomoyo_realpath_from_path+0xef/0x640 [ 172.710376][ T7162] ? tomoyo_realpath_from_path+0xef/0x640 [ 172.710400][ T7162] tomoyo_realpath_from_path+0xef/0x640 [ 172.710422][ T7162] ? tomoyo_path_number_perm+0x219/0x5f0 [ 172.710439][ T7162] tomoyo_path_number_perm+0x246/0x5f0 [ 172.710457][ T7162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.710472][ T7162] ? __lock_acquire+0x747/0x2de0 [ 172.710515][ T7162] ? __fget_files+0x2a/0x420 [ 172.710532][ T7162] ? __fget_files+0x2a/0x420 [ 172.710555][ T7162] ? __fget_files+0x2a/0x420 [ 172.710574][ T7162] security_file_ioctl+0xc3/0x2a0 [ 172.710592][ T7162] __se_sys_ioctl+0x47/0x170 [ 172.710608][ T7162] do_syscall_64+0x166/0x520 [ 172.710623][ T7162] ? trace_irq_disable+0x3b/0x140 [ 172.710636][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.710652][ T7162] ? clear_bhb_loop+0x70/0xc0 [ 172.710669][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.710683][ T7162] RIP: 0033:0x7fa64639e159 [ 172.710698][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.710711][ T7162] RSP: 002b:00007fa64719e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.710728][ T7162] RAX: ffffffffffffffda RBX: 00007fa646625fa0 RCX: 00007fa64639e159 [ 172.710740][ T7162] RDX: 00002000000002c0 RSI: 00000000c2604111 RDI: 0000000000000003 [ 172.710751][ T7162] RBP: 00007fa64719e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.710761][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.710770][ T7162] R13: 00007fa646626038 R14: 00007fa646625fa0 R15: 00007ffd5ddc5078 [ 172.710794][ T7162] [ 172.710819][ T7162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.551827][ T5716] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 173.685600][ T5716] usb 2-1: device descriptor read/64, error -71 [ 173.926552][ T5716] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 174.051912][ T5716] usb 2-1: device descriptor read/64, error -71 [ 174.165124][ T5716] usb usb2-port1: attempt power cycle [ 174.452296][ T5761] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 174.502142][ T5716] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 174.526799][ T5716] usb 2-1: device descriptor read/8, error -71 [ 174.616902][ T5761] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 174.620257][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 174.672667][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.672690][ T5761] usb 3-1: Product: syz [ 174.672701][ T5761] usb 3-1: Manufacturer: syz [ 174.672712][ T5761] usb 3-1: SerialNumber: syz [ 174.738214][ T5761] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 174.738827][ T5761] keyspan 3-1:1.0: unsupported endpoint type 0 [ 174.772086][ T5716] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 174.792917][ T5716] usb 2-1: device descriptor read/8, error -71 [ 174.801052][ T5761] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 174.845633][ T5761] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 174.901438][ T5761] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 174.910537][ T5716] usb usb2-port1: unable to enumerate USB device [ 174.964299][ T5761] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 175.205627][ T5716] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 175.283895][ T5761] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 175.373369][ T5716] usb 4-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 175.376444][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.376468][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.376529][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.435050][ T5761] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.437112][ T5761] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.437138][ T5761] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.437166][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.530350][ T7208] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 175.571455][ T5761] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.076585][ T5761] usb 1-1: USB disconnect, device number 18 [ 176.163613][ T5716] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/input/input15 [ 176.485332][ T5716] rc_core: IR keymap rc-rc6-mce not found [ 176.485347][ T5716] Registered IR keymap rc-empty [ 176.521427][ T5716] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/rc/rc0 [ 176.565886][ T5716] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0002/rc/rc0/input16 [ 176.812129][ T5716] hid-picolcd 0003:04D8:C002.0002: No report with id 0x94 found [ 176.815834][ T5716] hid-picolcd 0003:04D8:C002.0002: failed to configure display [ 177.170186][ T1025] rpcbind: server 127.0.0.1 not responding, timed out [ 177.632040][ T1229] usb 3-1: USB disconnect, device number 31 [ 177.699939][ T1229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 177.714955][ T5761] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 177.741686][ T1229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 177.792686][ T1229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 177.815187][ T1229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 177.836203][ T1229] keyspan 3-1:1.0: device disconnected [ 177.935088][ T5761] usb 4-1: device descriptor read/64, error -32 [ 178.181908][ T5761] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 178.275267][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 178.314476][ T5761] usb 4-1: device descriptor read/64, error -32 [ 178.552798][ T5761] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 178.583532][ T5761] usb 4-1: device descriptor read/8, error -32 [ 178.823060][ T5761] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 178.843868][ T5761] usb 4-1: device descriptor read/8, error -32 [ 178.953576][ T5761] raw-gadget.2 gadget.3: failed to queue suspend event [ 178.980438][ T5716] usb 4-1: USB disconnect, device number 30 [ 179.097064][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 179.161977][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 179.221885][ T5716] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 179.222096][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 179.223148][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 179.293946][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 179.351827][ T5716] usb 4-1: device descriptor read/64, error -32 [ 179.462336][ T5716] raw-gadget.2 gadget.3: failed to queue suspend event [ 179.464106][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 179.531942][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 179.591845][ T5716] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 179.592057][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 179.592171][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 179.663058][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 179.723080][ T5716] usb 4-1: device descriptor read/64, error -32 [ 179.750878][ T5613] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 179.832056][ T5716] raw-gadget.2 gadget.3: failed to queue suspend event [ 179.834634][ T5716] usb usb4-port1: attempt power cycle [ 179.834718][ T5716] raw-gadget.2 gadget.3: failed to queue disconnect event [ 179.836937][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 179.902488][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 179.904468][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 180.112294][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 180.171873][ T5716] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 180.192016][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 180.192124][ T5716] usb 4-1: device descriptor read/8, error -32 [ 180.223831][ T7291] netlink: 'syz.2.447': attribute type 20 has an invalid length. [ 180.302280][ T5716] raw-gadget.2 gadget.3: failed to queue suspend event [ 180.302574][ T5716] raw-gadget.2 gadget.3: failed to queue reset event [ 180.372078][ T5716] raw-gadget.2 gadget.3: failed to queue resume event [ 180.431874][ T5716] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 180.452107][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 180.452194][ T5716] usb 4-1: device descriptor read/8, error -32 [ 180.546534][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 180.561996][ T5716] raw-gadget.2 gadget.3: failed to queue suspend event [ 180.562144][ T5716] usb usb4-port1: unable to enumerate USB device [ 180.610476][ T7300] smc: net device lo applied user defined pnetid SYZ0 [ 180.749955][ T7302] overlayfs: missing 'lowerdir' [ 181.517488][ T7327] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 181.861133][ T7296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.861305][ T7296] block device autoloading is deprecated and will be removed. [ 182.487261][ T7345] bridge0: port 3(syz_tun) entered blocking state [ 182.487360][ T7345] bridge0: port 3(syz_tun) entered disabled state [ 182.487678][ T7345] syz_tun: entered allmulticast mode [ 182.570994][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 182.592050][ T5761] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 182.628732][ T7345] syz_tun: entered promiscuous mode [ 182.678210][ T7345] bridge0: port 3(syz_tun) entered blocking state [ 182.678319][ T7345] bridge0: port 3(syz_tun) entered forwarding state [ 182.752569][ T5761] usb 3-1: New USB device found: idVendor=046d, idProduct=c50c, bcdDevice=0.00 [ 182.757596][ T5761] usb 3-1: config 0 has no interfaces? [ 182.757625][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.792071][ T5761] usb 3-1: config 0 descriptor?? [ 183.032017][ T5761] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 183.182738][ T5761] usb 2-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 183.183905][ T5761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 183.183928][ T5761] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 183.183947][ T5761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 183.186790][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.186809][ T5761] usb 2-1: Product: syz [ 183.186820][ T5761] usb 2-1: Manufacturer: syz [ 183.186831][ T5761] usb 2-1: SerialNumber: syz [ 183.190711][ T5761] usb 2-1: config 0 descriptor?? [ 183.273428][ T7350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.273562][ T7350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.279686][ T5761] usb 2-1: ucan: probing device on interface #0 [ 183.904730][ T5613] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 183.931002][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.931326][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.987425][ T5761] ucan 2-1:0.0 can0: registered device [ 184.107176][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.107566][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.138189][ T5761] ucan 2-1:0.0 can0: firmware string: unknown [ 184.170458][ T5761] usb 2-1: USB disconnect, device number 25 [ 184.409379][ T7375] input: syz0 as /devices/virtual/input/input17 [ 184.455380][ T7375] xt_l2tp: unknown flags: 8b [ 184.591566][ T5761] usb 3-1: USB disconnect, device number 32 [ 184.787787][ T7216] raw-gadget.2 gadget.3: failed to queue disconnect event [ 184.790705][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.466'. [ 184.817327][ T7386] FAULT_INJECTION: forcing a failure. [ 184.817327][ T7386] name fail_futex, interval 1, probability 0, space 0, times 0 [ 184.817355][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.1.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.817377][ T7386] Tainted: [L]=SOFTLOCKUP [ 184.817383][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.817398][ T7386] Call Trace: [ 184.817404][ T7386] [ 184.817411][ T7386] dump_stack_lvl+0xe8/0x150 [ 184.817432][ T7386] should_fail_ex+0x3eb/0x540 [ 184.817453][ T7386] get_futex_key+0x1b4/0x1580 [ 184.817469][ T7386] ? arch_stack_walk+0xfb/0x150 [ 184.817499][ T7386] ? __pfx_get_futex_key+0x10/0x10 [ 184.817513][ T7386] ? stack_trace_save+0xa9/0x100 [ 184.817530][ T7386] ? __pfx_stack_trace_save+0x10/0x10 [ 184.817552][ T7386] futex_wake+0x119/0x5f0 [ 184.817567][ T7386] ? kasan_save_track+0x4f/0x80 [ 184.817582][ T7386] ? kasan_save_track+0x3e/0x80 [ 184.817596][ T7386] ? kmem_cache_free+0x182/0x650 [ 184.817611][ T7386] ? __se_sys_mkdirat+0xc9/0x150 [ 184.817627][ T7386] ? __pfx_futex_wake+0x10/0x10 [ 184.817653][ T7386] do_futex+0x458/0x4e0 [ 184.817672][ T7386] ? __pfx_do_futex+0x10/0x10 [ 184.817693][ T7386] __se_sys_futex+0x3a8/0x450 [ 184.817713][ T7386] ? __pfx___se_sys_futex+0x10/0x10 [ 184.817731][ T7386] ? __se_sys_mkdirat+0xc9/0x150 [ 184.817745][ T7386] ? kmem_cache_free+0x182/0x650 [ 184.817764][ T7386] ? __x64_sys_futex+0x21/0xf0 [ 184.817781][ T7386] do_syscall_64+0x166/0x520 [ 184.817796][ T7386] ? trace_irq_disable+0x3b/0x140 [ 184.817810][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.817827][ T7386] ? clear_bhb_loop+0x70/0xc0 [ 184.817843][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.817859][ T7386] RIP: 0033:0x7fa64639e159 [ 184.817886][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.817900][ T7386] RSP: 002b:00007fa64719e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.817917][ T7386] RAX: ffffffffffffffda RBX: 00007fa646625fa8 RCX: 00007fa64639e159 [ 184.817929][ T7386] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa646625fac [ 184.817940][ T7386] RBP: 00007fa646625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 184.817951][ T7386] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 184.817961][ T7386] R13: 00007fa646626038 R14: 00007ffd5ddc4f90 R15: 00007ffd5ddc5078 [ 184.817986][ T7386] [ 185.105620][ T7388] kAFS: Invalid Command on /proc/fs/afs/cells file [ 185.309810][ T33] audit: type=1326 audit(1791092679.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.2.470" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9504d9e159 code=0x0 [ 185.891209][ T7403] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.471'. [ 186.363573][ T5716] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 186.521972][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 186.524847][ T5716] usb 2-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 186.529302][ T5716] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 186.529321][ T5716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.530250][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 186.538040][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.538059][ T5716] usb 2-1: Product: syz [ 186.538070][ T5716] usb 2-1: Manufacturer: syz [ 186.538080][ T5716] usb 2-1: SerialNumber: syz [ 186.713372][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 186.827655][ T7408] vivid-002: ================= START STATUS ================= [ 186.827692][ T7408] vivid-002: Radio HW Seek Mode: Bounded [ 186.827711][ T7408] vivid-002: Radio Programmable HW Seek: false [ 186.827748][ T7408] vivid-002: RDS Rx I/O Mode: Block I/O [ 186.827763][ T7408] vivid-002: Generate RBDS Instead of RDS: false [ 186.827778][ T7408] vivid-002: RDS Reception: true [ 186.827792][ T7408] vivid-002: RDS Program Type: 0 inactive [ 186.827811][ T7408] vivid-002: RDS PS Name: inactive [ 186.827829][ T7408] vivid-002: RDS Radio Text: inactive [ 186.827846][ T7408] vivid-002: RDS Traffic Announcement: false inactive [ 186.827881][ T7408] vivid-002: RDS Traffic Program: false inactive [ 186.827899][ T7408] vivid-002: RDS Music: false inactive [ 186.827916][ T7408] vivid-002: ================== END STATUS ================== [ 186.866329][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 186.930410][ T10] usb 1-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 186.949095][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.966115][ T10] usb 1-1: config 0 descriptor?? [ 186.987120][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 187.129874][ T7420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.157680][ T5716] usb 2-1: USB disconnect, device number 26 [ 187.174901][ T7420] overlayfs: overlapping lowerdir path [ 187.220312][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.741950][ T1229] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 187.893278][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 187.895511][ T1229] usb 4-1: New USB device found: idVendor=28bd, idProduct=0055, bcdDevice=0.00 [ 187.898185][ T1229] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.898210][ T1229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.898234][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.935037][ T1229] usb 4-1: config 0 descriptor?? [ 188.205095][ T7436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 188.205118][ T7436] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.209525][ T7436] vhci_hcd vhci_hcd.0: Device attached [ 188.361170][ T1229] uclogic 0003:28BD:0055.0003: interface is invalid, ignoring [ 188.382772][ T5716] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 188.442016][ T5716] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 188.537429][ T7437] vhci_hcd: connection reset by peer [ 188.569732][ T46] vhci_hcd vhci_hcd.2: stop threads [ 188.581262][ T46] vhci_hcd vhci_hcd.2: release socket [ 188.596336][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 188.855671][ T10] gspca_vc032x: reg_r err -32 [ 188.855686][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855694][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855700][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855707][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855713][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855720][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855726][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855732][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855740][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855746][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855752][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855759][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855765][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855771][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855778][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855817][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855825][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855832][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.855847][ T10] gspca_vc032x: Unknown sensor... [ 188.855900][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 188.929561][ T10] usb 1-1: USB disconnect, device number 19 [ 189.463166][ T7449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.676054][ T7462] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 190.000797][ T7465] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 190.038925][ T7465] FAULT_INJECTION: forcing a failure. [ 190.038925][ T7465] name fail_futex, interval 1, probability 0, space 0, times 0 [ 190.038951][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.038974][ T7465] Tainted: [L]=SOFTLOCKUP [ 190.038980][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.038990][ T7465] Call Trace: [ 190.038996][ T7465] [ 190.039003][ T7465] dump_stack_lvl+0xe8/0x150 [ 190.039023][ T7465] should_fail_ex+0x3eb/0x540 [ 190.039044][ T7465] get_futex_key+0x1b4/0x1580 [ 190.039070][ T7465] ? __pfx_get_futex_key+0x10/0x10 [ 190.039095][ T7465] futex_wake+0x119/0x5f0 [ 190.039115][ T7465] ? __pfx_futex_wake+0x10/0x10 [ 190.039131][ T7465] ? key_put+0xb7/0x270 [ 190.039144][ T7465] ? put_watch_queue+0x143/0x270 [ 190.039169][ T7465] ? keyctl_watch_key+0x3e5/0x460 [ 190.039190][ T7465] do_futex+0x458/0x4e0 [ 190.039209][ T7465] ? __pfx_do_futex+0x10/0x10 [ 190.039222][ T7465] ? kfree+0x4d/0x650 [ 190.039243][ T7465] __se_sys_futex+0x3a8/0x450 [ 190.039263][ T7465] ? __pfx___se_sys_futex+0x10/0x10 [ 190.039278][ T7465] ? rcu_is_watching+0x16/0xb0 [ 190.039298][ T7465] ? __x64_sys_futex+0x21/0xf0 [ 190.039315][ T7465] do_syscall_64+0x166/0x520 [ 190.039330][ T7465] ? trace_irq_disable+0x3b/0x140 [ 190.039344][ T7465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.039360][ T7465] ? clear_bhb_loop+0x70/0xc0 [ 190.039377][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.039396][ T7465] RIP: 0033:0x7fa64639e159 [ 190.039411][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.039425][ T7465] RSP: 002b:00007fa64719e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 190.039442][ T7465] RAX: ffffffffffffffda RBX: 00007fa646625fa8 RCX: 00007fa64639e159 [ 190.039454][ T7465] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa646625fac [ 190.039465][ T7465] RBP: 00007fa646625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 190.039476][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.039485][ T7465] R13: 00007fa646626038 R14: 00007ffd5ddc4f90 R15: 00007ffd5ddc5078 [ 190.039509][ T7465] [ 190.528984][ T5761] usb 4-1: USB disconnect, device number 35 [ 190.548475][ T7468] mmap: syz.0.486 (7468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.838889][ T7474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.489'. [ 190.838911][ T7474] netlink: 43 bytes leftover after parsing attributes in process `syz.3.489'. [ 190.838923][ T7474] netlink: 'syz.3.489': attribute type 5 has an invalid length. [ 190.838933][ T7474] netlink: 43 bytes leftover after parsing attributes in process `syz.3.489'. [ 192.032216][ T5808] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 192.971908][ T1229] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 193.102040][ T1229] usb 3-1: device descriptor read/64, error -71 [ 193.341985][ T1229] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 193.376301][ T7522] FAULT_INJECTION: forcing a failure. [ 193.376301][ T7522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.376345][ T7522] CPU: 0 UID: 0 PID: 7522 Comm: syz.0.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.376368][ T7522] Tainted: [L]=SOFTLOCKUP [ 193.376374][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.376386][ T7522] Call Trace: [ 193.376392][ T7522] [ 193.376399][ T7522] dump_stack_lvl+0xe8/0x150 [ 193.376420][ T7522] should_fail_ex+0x3eb/0x540 [ 193.376440][ T7522] get_futex_key+0x1b4/0x1580 [ 193.376466][ T7522] ? __pfx_get_futex_key+0x10/0x10 [ 193.376490][ T7522] futex_wake+0x119/0x5f0 [ 193.376511][ T7522] ? __pfx_futex_wake+0x10/0x10 [ 193.376527][ T7522] ? key_put+0xb7/0x270 [ 193.376540][ T7522] ? put_watch_queue+0x143/0x270 [ 193.376557][ T7522] ? keyctl_watch_key+0x3e5/0x460 [ 193.376577][ T7522] do_futex+0x458/0x4e0 [ 193.376596][ T7522] ? __pfx_do_futex+0x10/0x10 [ 193.376609][ T7522] ? kfree+0x4d/0x650 [ 193.376630][ T7522] __se_sys_futex+0x3a8/0x450 [ 193.376650][ T7522] ? __pfx___se_sys_futex+0x10/0x10 [ 193.376665][ T7522] ? rcu_is_watching+0x16/0xb0 [ 193.376684][ T7522] ? __x64_sys_futex+0x21/0xf0 [ 193.376702][ T7522] do_syscall_64+0x166/0x520 [ 193.376716][ T7522] ? trace_irq_disable+0x3b/0x140 [ 193.376730][ T7522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.376747][ T7522] ? clear_bhb_loop+0x70/0xc0 [ 193.376763][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.376780][ T7522] RIP: 0033:0x7fcb62f9e159 [ 193.376795][ T7522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.376809][ T7522] RSP: 002b:00007fcb63e150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.376827][ T7522] RAX: ffffffffffffffda RBX: 00007fcb63226098 RCX: 00007fcb62f9e159 [ 193.376840][ T7522] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcb6322609c [ 193.376859][ T7522] RBP: 00007fcb63226090 R08: 3fffffffffffffff R09: 0000000000000000 [ 193.376870][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.376880][ T7522] R13: 00007fcb63226128 R14: 00007ffe732cf720 R15: 00007ffe732cf808 [ 193.376904][ T7522] [ 193.493301][ T1229] usb 3-1: device descriptor read/64, error -71 [ 193.553005][ T5716] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 193.614030][ T1229] usb usb3-port1: attempt power cycle [ 193.981845][ T1229] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 194.004854][ T1229] usb 3-1: device descriptor read/8, error -71 [ 194.242560][ T1229] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 194.265262][ T1229] usb 3-1: device descriptor read/8, error -71 [ 194.375493][ T1229] usb usb3-port1: unable to enumerate USB device [ 194.426853][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426897][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.782713][ T1229] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 194.800707][ T7537] [ 194.803060][ T7537] ====================================================== [ 194.810080][ T7537] WARNING: possible circular locking dependency detected [ 194.817111][ T7537] syzkaller #0 Tainted: G L [ 194.823174][ T7537] ------------------------------------------------------ [ 194.830187][ T7537] syz.3.512/7537 is trying to acquire lock: [ 194.836080][ T7537] ffff888035f03960 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 194.845566][ T7537] [ 194.845566][ T7537] but task is already holding lock: [ 194.852922][ T7537] ffff88823bfd4100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 194.862668][ T7537] [ 194.862668][ T7537] which lock already depends on the new lock. [ 194.862668][ T7537] [ 194.873079][ T7537] [ 194.873079][ T7537] the existing dependency chain (in reverse order) is: [ 194.882101][ T7537] [ 194.882101][ T7537] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 194.889932][ T7537] __d_alloc_parallel+0xc32/0x1700 [ 194.895591][ T7537] __lookup_slow+0x82/0x2f0 [ 194.900620][ T7537] lookup_slow+0x59/0x80 [ 194.905386][ T7537] link_path_walk+0xd22/0x1910 [ 194.910669][ T7537] path_openat+0x1c4/0x1da0 [ 194.915705][ T7537] do_file_open+0x23e/0x4a0 [ 194.920737][ T7537] do_sys_openat2+0x115/0x200 [ 194.925957][ T7537] __x64_sys_openat+0x138/0x170 [ 194.931343][ T7537] do_syscall_64+0x166/0x520 [ 194.936490][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.942962][ T7537] [ 194.942962][ T7537] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 194.951413][ T7537] __lock_acquire+0x164c/0x2de0 [ 194.956807][ T7537] lock_acquire+0x115/0x350 [ 194.961852][ T7537] down_read+0x45/0x320 [ 194.966540][ T7537] lookup_slow+0x46/0x80 [ 194.971312][ T7537] ovl_lookup_single+0x323/0xe90 [ 194.976776][ T7537] ovl_lookup_layer+0x377/0x440 [ 194.982150][ T7537] ovl_lookup+0x5e5/0x1c80 [ 194.987087][ T7537] __lookup_slow+0x1fb/0x2f0 [ 194.992216][ T7537] lookup_slow+0x59/0x80 [ 194.996993][ T7537] link_path_walk+0xd22/0x1910 [ 195.002298][ T7537] __filename_parentat+0x287/0x6f0 [ 195.007946][ T7537] filename_renameat2+0x202/0x9a0 [ 195.013515][ T7537] __se_sys_renameat2+0x5a/0x2c0 [ 195.018986][ T7537] do_syscall_64+0x166/0x520 [ 195.024118][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.030549][ T7537] [ 195.030549][ T7537] other info that might help us debug this: [ 195.030549][ T7537] [ 195.040788][ T7537] Possible unsafe locking scenario: [ 195.040788][ T7537] [ 195.048274][ T7537] CPU0 CPU1 [ 195.053657][ T7537] ---- ---- [ 195.059028][ T7537] lock(DCACHE_PAR_LOOKUP); [ 195.063629][ T7537] lock(&type->i_mutex_dir_key#5); [ 195.071373][ T7537] lock(DCACHE_PAR_LOOKUP); [ 195.078491][ T7537] rlock(&type->i_mutex_dir_key#5); [ 195.083795][ T7537] [ 195.083795][ T7537] *** DEADLOCK *** [ 195.083795][ T7537] [ 195.091944][ T7537] locks held by syz.3.512/7537: 2, last CPU#0: [ 195.098102][ T7537] #0: ffff88805aa03810 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 195.108495][ T7537] #1: ffff88823bfd4100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 195.118723][ T7537] [ 195.118723][ T7537] stack backtrace: [ 195.124635][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.3.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.135524][ T7537] Tainted: [L]=SOFTLOCKUP [ 195.139856][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.149919][ T7537] Call Trace: [ 195.153211][ T7537] [ 195.156157][ T7537] dump_stack_lvl+0xe8/0x150 [ 195.160770][ T7537] print_circular_bug+0x2e2/0x300 [ 195.165818][ T7537] check_noncircular+0x12f/0x150 [ 195.170792][ T7537] __lock_acquire+0x164c/0x2de0 [ 195.175668][ T7537] ? lock_acquire+0x115/0x350 [ 195.180375][ T7537] lock_acquire+0x115/0x350 [ 195.184903][ T7537] ? lookup_slow+0x46/0x80 [ 195.189331][ T7537] down_read+0x45/0x320 [ 195.193492][ T7537] ? lookup_slow+0x46/0x80 [ 195.197909][ T7537] ? d_lookup+0x8a/0xa0 [ 195.202065][ T7537] lookup_slow+0x46/0x80 [ 195.206310][ T7537] ovl_lookup_single+0x323/0xe90 [ 195.211276][ T7537] ? __pfx_ovl_lookup_single+0x10/0x10 [ 195.216742][ T7537] ? __lock_acquire+0x747/0x2de0 [ 195.221688][ T7537] ovl_lookup_layer+0x377/0x440 [ 195.226580][ T7537] ovl_lookup+0x5e5/0x1c80 [ 195.231034][ T7537] ? lock_acquire+0x115/0x350 [ 195.235730][ T7537] ? __d_alloc_parallel+0x156f/0x1700 [ 195.241118][ T7537] ? __d_alloc_parallel+0x39e/0x1700 [ 195.246429][ T7537] ? __pfx_ovl_lookup+0x10/0x10 [ 195.251303][ T7537] ? __pfx___d_alloc_parallel+0x10/0x10 [ 195.256856][ T7537] ? lock_acquire+0x232/0x350 [ 195.261547][ T7537] __lookup_slow+0x1fb/0x2f0 [ 195.266190][ T7537] lookup_slow+0x59/0x80 [ 195.270451][ T7537] link_path_walk+0xd22/0x1910 [ 195.275232][ T7537] __filename_parentat+0x287/0x6f0 [ 195.280373][ T7537] ? __pfx___filename_parentat+0x10/0x10 [ 195.286021][ T7537] ? kasan_save_track+0x4f/0x80 [ 195.290912][ T7537] filename_renameat2+0x202/0x9a0 [ 195.295956][ T7537] ? __pfx_filename_renameat2+0x10/0x10 [ 195.301543][ T7537] ? do_getname+0x151/0x250 [ 195.306081][ T7537] __se_sys_renameat2+0x5a/0x2c0 [ 195.311048][ T7537] do_syscall_64+0x166/0x520 [ 195.315677][ T7537] ? trace_irq_disable+0x3b/0x140 [ 195.320707][ T7537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.326793][ T7537] ? clear_bhb_loop+0x70/0xc0 [ 195.331493][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.337392][ T7537] RIP: 0033:0x7f272339e159 [ 195.341832][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.361445][ T7537] RSP: 002b:00007f272419e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 195.369882][ T7537] RAX: ffffffffffffffda RBX: 00007f2723625fa0 RCX: 00007f272339e159 [ 195.377856][ T7537] RDX: ffffffffffffff9c RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 195.385846][ T7537] RBP: 00007f272343506b R08: 0000000000000000 R09: 0000000000000000 [ 195.393822][ T7537] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 195.401799][ T7537] R13: 00007f2723626038 R14: 00007f2723625fa0 R15: 00007fff137c5668 [ 195.409784][ T7537] [ 195.512535][ T1229] usb 2-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 195.513538][ T1229] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 195.513560][ T1229] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 195.513624][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.728209][ T7532] FAULT_INJECTION: forcing a failure. [ 195.728209][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 195.728235][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.1.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.728258][ T7532] Tainted: [L]=SOFTLOCKUP [ 195.728264][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.728274][ T7532] Call Trace: [ 195.728280][ T7532] [ 195.728286][ T7532] dump_stack_lvl+0xe8/0x150 [ 195.728308][ T7532] should_fail_ex+0x3eb/0x540 [ 195.728325][ T7532] should_failslab+0xa8/0x100 [ 195.728340][ T7532] ? __kernfs_new_node+0xe6/0x980 [ 195.728355][ T7532] kmem_cache_alloc_noprof+0x9c/0x600 [ 195.728370][ T7532] ? kstrdup+0x81/0x100 [ 195.728383][ T7532] ? __kernfs_new_node+0xe6/0x980 [ 195.728399][ T7532] __kernfs_new_node+0xe6/0x980 [ 195.728413][ T7532] ? vsnprintf+0xe42/0xef0 [ 195.728430][ T7532] ? __pfx___kernfs_new_node+0x10/0x10 [ 195.728444][ T7532] ? rcu_is_watching+0x16/0xb0 [ 195.728459][ T7532] ? kernfs_root+0x1c/0x230 [ 195.728473][ T7532] ? rcu_is_watching+0x16/0xb0 [ 195.728485][ T7532] ? kernfs_root+0x1c/0x230 [ 195.728499][ T7532] ? lock_release+0x4b/0x3c0 [ 195.728514][ T7532] ? kernfs_root+0x1c/0x230 [ 195.728538][ T7532] kernfs_new_node+0xeb/0x140 [ 195.728554][ T7532] __kernfs_create_file+0x4b/0x2e0 [ 195.728569][ T7532] cgroup_addrm_files+0x8f4/0xd50 [ 195.728590][ T7532] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 195.728604][ T7532] ? node_tag_clear+0x187/0x2b0 [ 195.728619][ T7532] ? idr_alloc_u32+0x1f1/0x330 [ 195.728633][ T7532] ? rcu_is_watching+0x16/0xb0 [ 195.728651][ T7532] ? idr_replace+0x136/0x1b0 [ 195.728664][ T7532] ? css_next_descendant_pre+0x17d/0x260 [ 195.728682][ T7532] css_populate_dir+0x123/0x3d0 [ 195.728698][ T7532] cgroup_apply_control_enable+0x797/0xda0 [ 195.728718][ T7532] cgroup_mkdir+0x1220/0x14b0 [ 195.728736][ T7532] ? __pfx_cgroup_mkdir+0x10/0x10 [ 195.728750][ T7532] kernfs_iop_mkdir+0x213/0x360 [ 195.728765][ T7532] vfs_mkdir+0x40e/0x630 [ 195.728781][ T7532] filename_mkdirat+0x285/0x510 [ 195.728797][ T7532] ? __pfx_filename_mkdirat+0x10/0x10 [ 195.728812][ T7532] ? do_getname+0x151/0x250 [ 195.728827][ T7532] __se_sys_mkdirat+0x35/0x150 [ 195.728841][ T7532] do_syscall_64+0x166/0x520 [ 195.728855][ T7532] ? trace_irq_disable+0x3b/0x140 [ 195.728869][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.728884][ T7532] ? clear_bhb_loop+0x70/0xc0 [ 195.728899][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.728914][ T7532] RIP: 0033:0x7fa64639e159 [ 195.728928][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.728941][ T7532] RSP: 002b:00007fa64719e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 195.728958][ T7532] RAX: ffffffffffffffda RBX: 00007fa646625fa0 RCX: 00007fa64639e159 [ 195.728970][ T7532] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 195.728981][ T7532] RBP: 00007fa64643506b R08: 0000000000000000 R09: 0000000000000000 [ 195.728991][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.729001][ T7532] R13: 00007fa646626038 R14: 00007fa646625fa0 R15: 00007ffd5ddc5078 [ 195.729018][ T7532] [ 195.730200][ T7532] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12 [ 195.848359][ T1229] ims_pcu 2-1:1.0: Failed to set line coding, error: -71 [ 195.855159][ T1229] ims_pcu 2-1:1.0: probe with driver ims_pcu failed with error -71 [ 196.117261][ T1229] usb 2-1: USB disconnect, device number 27