last executing test programs: 2m39.745528545s ago: executing program 3 (id=192): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 2m39.713179903s ago: executing program 3 (id=194): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="ecfe5100000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2m32.856993732s ago: executing program 3 (id=222): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(r0, 0x0) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) 2m32.388242462s ago: executing program 3 (id=224): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000080)={0x100, 0x0, 0x1, 0x14, 0x4}) 2m32.214728582s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="0000010042", 0x5, 0x1be) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1fe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000300)='PRIVHEAD', 0x8, 0xc00) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc0c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc30) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd23) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd2b) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_RENAME(r2, 0xc138fd05, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0xc420, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @name={'syz', 0x0, '1\x00'}}) write(r0, &(0x7f0000000200)='27', 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000540)=0xceb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ptrace(0x10, r3) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000004c0)=@mmap={0x7d53, 0x4, 0x4, 0x800000, 0x8, {}, {0x5, 0x8, 0x6, 0x0, 0x66, 0x8, "38d98383"}, 0x2, 0x1, {}, 0xa, 0x0, r0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r3) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) 2m31.852664263s ago: executing program 3 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300000fff00000004920800024000000001"], 0xfea1}}, 0x800) 2m16.54898956s ago: executing program 32 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300000fff00000004920800024000000001"], 0xfea1}}, 0x800) 22.119710746s ago: executing program 2 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1bb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1d7) syz_usb_connect(0x0, 0x5a, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='8\n', 0x2) 20.838783843s ago: executing program 2 (id=991): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) write$dsp(r4, &(0x7f0000001880)="a52876830a602214", 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000001940)=ANY=[@ANYRESOCT=r5], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0x6}, {0x4, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, r7, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x4048888) 16.486133647s ago: executing program 5 (id=1000): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x62002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0xe8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r0, &(0x7f00000006c0)=0x900, 0x12) 16.466245646s ago: executing program 2 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1bb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1d7) syz_usb_connect(0x0, 0x5a, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='8\n', 0x2) 16.314914667s ago: executing program 5 (id=1002): openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x106f) 16.172883368s ago: executing program 5 (id=1003): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 16.114900376s ago: executing program 5 (id=1004): syz_usb_connect(0x0, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="671723d7c6012c", 0x7}, {&(0x7f0000000640)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000680)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000006c0)="2bc4", 0x4b}], 0x4}, 0x20008b88) 15.045465334s ago: executing program 2 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208", @ANYRES32=r0, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)="e164", 0x2) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r2, 0x0, 0xffff, 0x2) 14.023643015s ago: executing program 5 (id=1009): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3800, 0x4000) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000280)={'comedi_test\x00', [0x140, 0x2, 0x357, 0x2, 0x4, 0x1, 0x100, 0x2, 0x21027, 0xc72d, 0x8, 0xffffffff, 0x0, 0x6, 0x4d1, 0xfffffffe, 0xfc, 0x2, 0x3, 0x2000000, 0x4, 0x0, 0x4, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x7fffffff, 0x1007ff, 0x2]}) syz_open_procfs(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000025c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d6777506be3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x90, 0x0, 0x9, {0x0, 0x200000009, 0x8, 0x3, 0x8, 0xc, {0x1, 0x8010001, 0x4d2, 0x40d, 0x6, 0xfffffffffffffffe, 0xfce, 0x2, 0x5, 0x6000, 0x6ff, 0x0, 0x0, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004a00)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a80)={&(0x7f0000004ac0)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000004880)='ns/ipc\x00') ioctl$COMEDI_SETRSUBD(r3, 0x6410) write(r2, &(0x7f0000000200)='+192.168.1.1', 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100feffffff887ab7834c1a47f6fc23c33dc850794a238fcdceb7479a66f598e3c3"], 0x1c}}, 0x800) 13.534040799s ago: executing program 2 (id=1012): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x90, 0x0, 0x9, {0x0, 0x200000009, 0x8, 0x3, 0x8, 0xc, {0x1, 0x8010001, 0x4d2, 0x40d, 0x6, 0xfffffffffffffffe, 0xfce, 0x2, 0x5, 0x6000, 0x6ff, 0x0, 0x0, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) write(r1, &(0x7f0000000200)='+192.168.1.1', 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100feffffff887ab7834c1a47f6fc23c33dc850"], 0x1c}}, 0x800) 13.009255416s ago: executing program 5 (id=1018): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000007c0), 0x400, 0x0) 12.943379181s ago: executing program 2 (id=1019): syz_usb_connect(0x0, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="671723d7c6012c", 0x7}, {&(0x7f0000000640)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000680)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000006c0)="2bc4", 0x4b}], 0x4}, 0x20008b88) 4.700848221s ago: executing program 1 (id=1046): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) 4.333222618s ago: executing program 1 (id=1047): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x14}) 4.132551219s ago: executing program 1 (id=1048): openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x106f) 3.948495687s ago: executing program 1 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000780)='./file0\x00', 0x8fff5) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=[0x8], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3.337743525s ago: executing program 1 (id=1052): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x104}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4) 3.017678692s ago: executing program 0 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000008c0), 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x103881, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.716999336s ago: executing program 0 (id=1055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 2.42250375s ago: executing program 4 (id=1056): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000006c0), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0xea13, 0x10000, 0x3, 0x12}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32c2, 0x400, 0x1, 0xe6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a26, 0x20000, 0x3, 0xf5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc97, 0x1000, 0x1, 0x183}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x353f, 0x2000, 0x3, 0x27c, 0x0, r1}}], 0x4, 0x0, &(0x7f00000019c0)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000180)={0x28, 0x1f, 0x0, r1, &(0x7f0000002c80)="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", 0x0, 0x8, 0x1, 0x0, {0x0, 0x0, r2, 0xfff}}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="03dd10ff"], 0x9) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000001b40)=""/4098, 0x1002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x401, 0xffffffff, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r4 = fsopen(&(0x7f00000001c0)='overlay\x00', 0x1) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='workdir', 0x0, r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.339990238s ago: executing program 1 (id=1057): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.961163874s ago: executing program 0 (id=1058): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002f80)='./nfsd\x00', &(0x7f0000002fc0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000030c0)='3', 0x1) 1.624736261s ago: executing program 0 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300030000000500050036000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 1.373367804s ago: executing program 0 (id=1060): mkdir(&(0x7f0000000000)='./file1\x00', 0x92) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='tmpfs\x00', 0x8, &(0x7f0000000140)='usrquota') pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000480)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000004c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_inode_har']) 1.136371736s ago: executing program 0 (id=1061): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000010cc0)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000010d00), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000010d40)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) 1.121298461s ago: executing program 4 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0xdd893852e2a0cb80, @desc1}) 872.029883ms ago: executing program 4 (id=1063): r0 = open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000008c40)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000008cc0)={{{@in6, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000008e00)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0xffffffffffffffff, 0x7, 0x7, 0x5, {0x6, 0x6, 0x9, 0x4, 0x0, 0x8000, 0xe148, 0x6, 0xba67, 0x2000, 0x4, 0xee00, 0x0, 0x9, 0x4}}, {0x6, 0x6, 0x0, 0xffd}}]}, 0xa8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') 574.887392ms ago: executing program 4 (id=1064): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 313.929907ms ago: executing program 4 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000008c0)='1', 0x1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x103881, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 0s ago: executing program 4 (id=1066): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./gadget\x00', &(0x7f0000000340)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f00000003c0)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x802, 0x104) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.028204][ T7502] Call Trace: [ 186.028212][ T7502] [ 186.028221][ T7502] dump_stack_lvl+0xe8/0x150 [ 186.028264][ T7502] should_fail_ex+0x447/0x5e0 [ 186.028292][ T7502] should_failslab+0xa8/0x100 [ 186.028325][ T7502] ? fib_insert_alias+0x300/0x10f0 [ 186.028354][ T7502] kmem_cache_alloc_noprof+0x99/0x680 [ 186.028389][ T7502] ? fib_insert_alias+0x300/0x10f0 [ 186.028419][ T7502] fib_insert_alias+0x300/0x10f0 [ 186.028443][ T7502] ? lockdep_rtnl_is_held+0x26/0x40 [ 186.028471][ T7502] ? fib_find_node+0x28d/0x2f0 [ 186.028497][ T7502] fib_trie_unmerge+0x34a/0xd20 [ 186.028533][ T7502] fib_unmerge+0xc5/0x350 [ 186.028570][ T7502] fib4_rule_configure+0x2c9/0x9d0 [ 186.028603][ T7502] fib_newrule+0x61e/0xf20 [ 186.028635][ T7502] ? __lock_acquire+0x747/0x2de0 [ 186.028670][ T7502] ? __pfx_fib_newrule+0x10/0x10 [ 186.028726][ T7502] ? __pfx_fib_nl_newrule+0x10/0x10 [ 186.028753][ T7502] rtnetlink_rcv_msg+0x802/0xc00 [ 186.028789][ T7502] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 186.028818][ T7502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.028849][ T7502] ? __copy_skb_header+0xa3/0x4a0 [ 186.028871][ T7502] ? __asan_memcpy+0x40/0x70 [ 186.028906][ T7502] netlink_rcv_skb+0x226/0x4a0 [ 186.028931][ T7502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.028962][ T7502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.029003][ T7502] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.029028][ T7502] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.029055][ T7502] netlink_unicast+0x90c/0xac0 [ 186.029096][ T7502] netlink_sendmsg+0x7f0/0xb20 [ 186.029128][ T7502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.029154][ T7502] ? __lock_acquire+0x747/0x2de0 [ 186.029189][ T7502] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.029219][ T7502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.029246][ T7502] sock_sendmsg_nosec+0x14e/0x190 [ 186.029277][ T7502] ____sys_sendmsg+0x565/0x870 [ 186.029307][ T7502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.029348][ T7502] ? import_iovec+0x73/0xa0 [ 186.029379][ T7502] ___sys_sendmsg+0x2a5/0x360 [ 186.029398][ T7502] ? __lock_acquire+0x747/0x2de0 [ 186.029433][ T7502] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.029458][ T7502] ? futex_wait+0x2a2/0x390 [ 186.029519][ T7502] ? __fget_files+0x3a8/0x420 [ 186.029546][ T7502] ? __fget_files+0x2a/0x420 [ 186.029584][ T7502] __x64_sys_sendmsg+0x1b7/0x290 [ 186.029609][ T7502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.029653][ T7502] do_syscall_64+0x166/0x520 [ 186.029677][ T7502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.029706][ T7502] ? clear_bhb_loop+0x70/0xc0 [ 186.029733][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.029755][ T7502] RIP: 0033:0x7f07e3c7fb19 [ 186.029774][ T7502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.029792][ T7502] RSP: 002b:00007f07e1ed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.029815][ T7502] RAX: ffffffffffffffda RBX: 00007f07e3f05fa0 RCX: 00007f07e3c7fb19 [ 186.029830][ T7502] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000005 [ 186.029843][ T7502] RBP: 00007f07e3d17b70 R08: 0000000000000000 R09: 0000000000000000 [ 186.029856][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.029869][ T7502] R13: 00007f07e3f06038 R14: 00007f07e3f05fa0 R15: 00007ffdd6d068d8 [ 186.029904][ T7502] [ 186.448618][ T5891] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 186.448651][ T5891] usb 2-1: Warning! Unlikely big volume step count (=2702), linear volume or wrong cval->res? [ 186.448670][ T5891] usb 2-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/2702/1 [ 186.487521][ T200] dvb-usb: schedule remote query interval to 400 msecs. [ 186.487549][ T200] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.490115][ T5891] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.518990][ T5891] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 186.544864][ T5891] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 186.548174][ T200] usb 3-1: USB disconnect, device number 7 [ 186.585614][ T5891] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 186.629637][ T5891] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 186.781714][ T5891] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.897693][ T5891] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 186.961365][ T5891] usb 2-1: USB disconnect, device number 10 [ 187.259014][ T200] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.334372][ T7485] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 187.366339][ T1007] usb 1-1: USB disconnect, device number 12 [ 187.872936][ T7535] FAULT_INJECTION: forcing a failure. [ 187.872936][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 187.872968][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.2.510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.872990][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.873001][ T7535] Call Trace: [ 187.873008][ T7535] [ 187.873016][ T7535] dump_stack_lvl+0xe8/0x150 [ 187.873053][ T7535] should_fail_ex+0x447/0x5e0 [ 187.873088][ T7535] should_failslab+0xa8/0x100 [ 187.873113][ T7535] __kmalloc_noprof+0xf6/0x790 [ 187.873134][ T7535] ? do_handle_open+0x4ec/0xb10 [ 187.873166][ T7535] ? do_handle_open+0x4ec/0xb10 [ 187.873200][ T7535] do_handle_open+0x4ec/0xb10 [ 187.873232][ T7535] ? __pfx_do_handle_open+0x10/0x10 [ 187.873265][ T7535] ? rcu_is_watching+0x16/0xb0 [ 187.873299][ T7535] do_syscall_64+0x166/0x520 [ 187.873323][ T7535] ? trace_irq_disable+0x3b/0x140 [ 187.873343][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.873363][ T7535] ? clear_bhb_loop+0x70/0xc0 [ 187.873389][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.873410][ T7535] RIP: 0033:0x7fadb007fb19 [ 187.873429][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.873447][ T7535] RSP: 002b:00007fadae2ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 187.873471][ T7535] RAX: ffffffffffffffda RBX: 00007fadb0305fa0 RCX: 00007fadb007fb19 [ 187.873486][ T7535] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000003 [ 187.873499][ T7535] RBP: 00007fadb0117b70 R08: 0000000000000000 R09: 0000000000000000 [ 187.873512][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.873524][ T7535] R13: 00007fadb0306038 R14: 00007fadb0305fa0 R15: 00007ffee77787c8 [ 187.873562][ T7535] [ 188.204703][ T7517] bonding: bond0 is being deleted... [ 188.297054][ T7540] netlink: 'syz.2.513': attribute type 4 has an invalid length. [ 188.297079][ T7540] netlink: 17 bytes leftover after parsing attributes in process `syz.2.513'. [ 188.465504][ T7517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.535457][ T7517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.583013][ T7517] bond0 (unregistering): Released all slaves [ 188.656322][ T7540] FAULT_INJECTION: forcing a failure. [ 188.656322][ T7540] name failslab, interval 1, probability 0, space 0, times 0 [ 188.656378][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.2.513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.656403][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.656417][ T7540] Call Trace: [ 188.656425][ T7540] [ 188.656434][ T7540] dump_stack_lvl+0xe8/0x150 [ 188.656474][ T7540] should_fail_ex+0x447/0x5e0 [ 188.656508][ T7540] should_failslab+0xa8/0x100 [ 188.656548][ T7540] __kmalloc_noprof+0xf6/0x790 [ 188.656569][ T7540] ? trace_kmem_cache_alloc+0x29/0xe0 [ 188.656598][ T7540] ? tnode_new+0xc7/0x3b0 [ 188.656622][ T7540] ? tnode_new+0xc7/0x3b0 [ 188.656653][ T7540] tnode_new+0xc7/0x3b0 [ 188.656681][ T7540] fib_insert_alias+0x9e0/0x10f0 [ 188.656717][ T7540] fib_trie_unmerge+0x34a/0xd20 [ 188.656750][ T7540] fib_unmerge+0xc5/0x350 [ 188.656782][ T7540] fib4_rule_configure+0x2c9/0x9d0 [ 188.656813][ T7540] fib_newrule+0x61e/0xf20 [ 188.656844][ T7540] ? __lock_acquire+0x747/0x2de0 [ 188.656879][ T7540] ? __pfx_fib_newrule+0x10/0x10 [ 188.656937][ T7540] ? __pfx_fib_nl_newrule+0x10/0x10 [ 188.656963][ T7540] rtnetlink_rcv_msg+0x802/0xc00 [ 188.657001][ T7540] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 188.657034][ T7540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.657066][ T7540] ? __copy_skb_header+0xa3/0x4a0 [ 188.657087][ T7540] ? __asan_memcpy+0x40/0x70 [ 188.657124][ T7540] netlink_rcv_skb+0x226/0x4a0 [ 188.657154][ T7540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.657187][ T7540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.657226][ T7540] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.657253][ T7540] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.657284][ T7540] netlink_unicast+0x90c/0xac0 [ 188.657324][ T7540] netlink_sendmsg+0x7f0/0xb20 [ 188.657359][ T7540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.657404][ T7540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.657430][ T7540] sock_sendmsg_nosec+0x14e/0x190 [ 188.657466][ T7540] ____sys_sendmsg+0x565/0x870 [ 188.657494][ T7540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.657534][ T7540] ? import_iovec+0x73/0xa0 [ 188.657567][ T7540] ___sys_sendmsg+0x2a5/0x360 [ 188.657586][ T7540] ? __lock_acquire+0x747/0x2de0 [ 188.657620][ T7540] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.657645][ T7540] ? futex_wake+0x51e/0x600 [ 188.657704][ T7540] ? __fget_files+0x3a8/0x420 [ 188.657734][ T7540] ? __fget_files+0x2a/0x420 [ 188.657772][ T7540] __x64_sys_sendmsg+0x1b7/0x290 [ 188.657798][ T7540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.657842][ T7540] do_syscall_64+0x166/0x520 [ 188.657868][ T7540] ? trace_irq_disable+0x3b/0x140 [ 188.657891][ T7540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.657909][ T7540] ? clear_bhb_loop+0x70/0xc0 [ 188.657932][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.657953][ T7540] RIP: 0033:0x7fadb007fb19 [ 188.657974][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.657992][ T7540] RSP: 002b:00007fadae2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.658015][ T7540] RAX: ffffffffffffffda RBX: 00007fadb0305fa0 RCX: 00007fadb007fb19 [ 188.658031][ T7540] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000005 [ 188.658045][ T7540] RBP: 00007fadb0117b70 R08: 0000000000000000 R09: 0000000000000000 [ 188.658059][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.658072][ T7540] R13: 00007fadb0306038 R14: 00007fadb0305fa0 R15: 00007ffee77787c8 [ 188.658104][ T7540] [ 188.781940][ T7545] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.514'. [ 189.526182][ T200] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.527173][ T5891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 189.638905][ T7568] block nbd2: shutting down sockets [ 189.654310][ T5891] usb 6-1: device descriptor read/64, error -71 [ 189.679773][ T200] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.681227][ T200] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 189.681260][ T200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.714999][ T200] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.715029][ T200] usb 1-1: Product: syz [ 189.715045][ T200] usb 1-1: Manufacturer: syz [ 189.715059][ T200] usb 1-1: SerialNumber: syz [ 189.753070][ T7572] netlink: 'syz.1.525': attribute type 4 has an invalid length. [ 189.753093][ T7572] netlink: 17 bytes leftover after parsing attributes in process `syz.1.525'. [ 189.753278][ T7572] FAULT_INJECTION: forcing a failure. [ 189.753278][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 189.753300][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.1.525 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.753320][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.753331][ T7572] Call Trace: [ 189.753338][ T7572] [ 189.753347][ T7572] dump_stack_lvl+0xe8/0x150 [ 189.753381][ T7572] should_fail_ex+0x447/0x5e0 [ 189.753410][ T7572] should_failslab+0xa8/0x100 [ 189.753434][ T7572] __kmalloc_noprof+0xf6/0x790 [ 189.753451][ T7572] ? trace_kmem_cache_alloc+0x29/0xe0 [ 189.753478][ T7572] ? tnode_new+0xc7/0x3b0 [ 189.753498][ T7572] ? tnode_new+0xc7/0x3b0 [ 189.753524][ T7572] tnode_new+0xc7/0x3b0 [ 189.753550][ T7572] fib_insert_alias+0x9e0/0x10f0 [ 189.753578][ T7572] fib_trie_unmerge+0x34a/0xd20 [ 189.753609][ T7572] fib_unmerge+0xc5/0x350 [ 189.753637][ T7572] fib4_rule_configure+0x2c9/0x9d0 [ 189.753663][ T7572] fib_newrule+0x61e/0xf20 [ 189.753696][ T7572] ? __lock_acquire+0x747/0x2de0 [ 189.753726][ T7572] ? __pfx_fib_newrule+0x10/0x10 [ 189.753776][ T7572] ? __pfx_fib_nl_newrule+0x10/0x10 [ 189.753797][ T7572] rtnetlink_rcv_msg+0x802/0xc00 [ 189.753827][ T7572] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 189.753850][ T7572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.753879][ T7572] ? __copy_skb_header+0xa3/0x4a0 [ 189.753899][ T7572] ? __asan_memcpy+0x40/0x70 [ 189.753934][ T7572] netlink_rcv_skb+0x226/0x4a0 [ 189.753968][ T7572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.753997][ T7572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.754032][ T7572] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.754057][ T7572] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.754087][ T7572] netlink_unicast+0x90c/0xac0 [ 189.754126][ T7572] netlink_sendmsg+0x7f0/0xb20 [ 189.754158][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.754180][ T7572] ? __lock_acquire+0x747/0x2de0 [ 189.754210][ T7572] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 189.754238][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.754261][ T7572] sock_sendmsg_nosec+0x14e/0x190 [ 189.754298][ T7572] ____sys_sendmsg+0x565/0x870 [ 189.754326][ T7572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.754356][ T7572] ? import_iovec+0x73/0xa0 [ 189.754383][ T7572] ___sys_sendmsg+0x2a5/0x360 [ 189.754400][ T7572] ? __lock_acquire+0x747/0x2de0 [ 189.754431][ T7572] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.754454][ T7572] ? futex_wake+0x51e/0x600 [ 189.754511][ T7572] ? __fget_files+0x3a8/0x420 [ 189.754541][ T7572] ? __fget_files+0x2a/0x420 [ 189.754579][ T7572] __x64_sys_sendmsg+0x1b7/0x290 [ 189.754603][ T7572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.754644][ T7572] do_syscall_64+0x166/0x520 [ 189.754667][ T7572] ? trace_irq_disable+0x3b/0x140 [ 189.754690][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.754713][ T7572] ? clear_bhb_loop+0x70/0xc0 [ 189.754739][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.754759][ T7572] RIP: 0033:0x7fc7cfb7fb19 [ 189.754776][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.754793][ T7572] RSP: 002b:00007fc7cddd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.754815][ T7572] RAX: ffffffffffffffda RBX: 00007fc7cfe05fa0 RCX: 00007fc7cfb7fb19 [ 189.754831][ T7572] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000005 [ 189.754845][ T7572] RBP: 00007fc7cfc17b70 R08: 0000000000000000 R09: 0000000000000000 [ 189.754859][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.754871][ T7572] R13: 00007fc7cfe06038 R14: 00007fc7cfe05fa0 R15: 00007ffd598f2b38 [ 189.754904][ T7572] [ 189.757751][ T200] usb 1-1: config 0 descriptor?? [ 189.760330][ T7556] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 190.016055][ T5608] svc: failed to register nfsdv3 RPC service (errno 5). [ 190.016076][ T5608] failed to unregister tcp with rpcbind [ 190.085579][ T200] usb 1-1: selecting invalid altsetting 0 [ 190.252589][ T200] usb 1-1: USB disconnect, device number 13 [ 190.328456][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.336152][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.464455][ T5891] usb 6-1: device descriptor read/64, error -71 [ 190.600398][ T5891] usb usb6-port1: attempt power cycle [ 190.654203][ T5764] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.728050][ T36] audit: type=1326 audit(1793766872.289:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.0.532" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3173d5fb19 code=0x0 [ 190.784598][ T7592] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.530'. [ 190.816538][ T5764] usb 3-1: Using ep0 maxpacket: 8 [ 190.817363][ T5764] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.819329][ T5764] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 190.819376][ T5764] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.819396][ T5764] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.819417][ T5764] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.819439][ T5764] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.819475][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.960052][ T7599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.974786][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.995131][ T5891] usb 6-1: device descriptor read/8, error -71 [ 191.062272][ T5764] usb 3-1: usb_control_msg returned -32 [ 191.062302][ T5764] usbtmc 3-1:16.0: can't read capabilities [ 191.071394][ T7601] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 191.244413][ T5891] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.283964][ T5891] usb 6-1: device descriptor read/8, error -71 [ 191.390946][ T5891] usb usb6-port1: unable to enumerate USB device [ 191.682773][ T5891] usb 3-1: USB disconnect, device number 8 [ 191.864351][ T7628] netlink: 'syz.4.537': attribute type 4 has an invalid length. [ 191.864375][ T7628] netlink: 17 bytes leftover after parsing attributes in process `syz.4.537'. [ 193.142274][ T7654] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.544'. [ 193.615033][ T7679] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 193.615065][ T7679] netlink: 17 bytes leftover after parsing attributes in process `syz.1.548'. [ 193.615244][ T7679] FAULT_INJECTION: forcing a failure. [ 193.615244][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 193.615295][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.1.548 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.615321][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.615334][ T7679] Call Trace: [ 193.615343][ T7679] [ 193.615351][ T7679] dump_stack_lvl+0xe8/0x150 [ 193.615394][ T7679] should_fail_ex+0x447/0x5e0 [ 193.615425][ T7679] should_failslab+0xa8/0x100 [ 193.615453][ T7679] __kmalloc_noprof+0xf6/0x790 [ 193.615475][ T7679] ? trace_kmem_cache_alloc+0x29/0xe0 [ 193.615503][ T7679] ? tnode_new+0xc7/0x3b0 [ 193.615528][ T7679] ? tnode_new+0xc7/0x3b0 [ 193.615563][ T7679] tnode_new+0xc7/0x3b0 [ 193.615594][ T7679] fib_insert_alias+0x9e0/0x10f0 [ 193.615625][ T7679] fib_trie_unmerge+0x34a/0xd20 [ 193.615659][ T7679] fib_unmerge+0xc5/0x350 [ 193.615691][ T7679] fib4_rule_configure+0x2c9/0x9d0 [ 193.615720][ T7679] fib_newrule+0x61e/0xf20 [ 193.615750][ T7679] ? __lock_acquire+0x747/0x2de0 [ 193.615795][ T7679] ? __pfx_fib_newrule+0x10/0x10 [ 193.615857][ T7679] ? __pfx_fib_nl_newrule+0x10/0x10 [ 193.615881][ T7679] rtnetlink_rcv_msg+0x802/0xc00 [ 193.615916][ T7679] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 193.615945][ T7679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.615980][ T7679] ? __copy_skb_header+0xa3/0x4a0 [ 193.616005][ T7679] ? __asan_memcpy+0x40/0x70 [ 193.616044][ T7679] netlink_rcv_skb+0x226/0x4a0 [ 193.616082][ T7679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.616116][ T7679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.616161][ T7679] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.616189][ T7679] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.616225][ T7679] netlink_unicast+0x90c/0xac0 [ 193.616270][ T7679] netlink_sendmsg+0x7f0/0xb20 [ 193.616307][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.616335][ T7679] ? __lock_acquire+0x747/0x2de0 [ 193.616370][ T7679] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 193.616403][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.616432][ T7679] sock_sendmsg_nosec+0x14e/0x190 [ 193.616463][ T7679] ____sys_sendmsg+0x565/0x870 [ 193.616495][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.616528][ T7679] ? import_iovec+0x73/0xa0 [ 193.616557][ T7679] ___sys_sendmsg+0x2a5/0x360 [ 193.616577][ T7679] ? __lock_acquire+0x747/0x2de0 [ 193.616613][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.616643][ T7679] ? futex_wait+0x2a2/0x390 [ 193.616708][ T7679] ? __fget_files+0x3a8/0x420 [ 193.616740][ T7679] ? __fget_files+0x2a/0x420 [ 193.616780][ T7679] __x64_sys_sendmsg+0x1b7/0x290 [ 193.616806][ T7679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.616850][ T7679] do_syscall_64+0x166/0x520 [ 193.616874][ T7679] ? trace_irq_disable+0x3b/0x140 [ 193.616896][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.616918][ T7679] ? clear_bhb_loop+0x70/0xc0 [ 193.616943][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.616964][ T7679] RIP: 0033:0x7fc7cfb7fb19 [ 193.616983][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.617002][ T7679] RSP: 002b:00007fc7cddd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.617025][ T7679] RAX: ffffffffffffffda RBX: 00007fc7cfe05fa0 RCX: 00007fc7cfb7fb19 [ 193.617041][ T7679] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000006 [ 193.617063][ T7679] RBP: 00007fc7cfc17b70 R08: 0000000000000000 R09: 0000000000000000 [ 193.617077][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.617090][ T7679] R13: 00007fc7cfe06038 R14: 00007fc7cfe05fa0 R15: 00007ffd598f2b38 [ 193.617125][ T7679] [ 193.794423][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 193.812050][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.036736][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.164629][ T5892] usb 3-1: device descriptor read/64, error -71 [ 194.420256][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424725][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.434271][ T7708] No source specified [ 194.565965][ T5892] usb 3-1: device descriptor read/64, error -71 [ 194.676334][ T5892] usb usb3-port1: attempt power cycle [ 194.855781][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 195.014237][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 195.016598][ T5891] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 195.019614][ T5891] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 195.019638][ T5891] usb 2-1: config 1 has no interface number 0 [ 195.024129][ T5891] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 195.024155][ T5891] usb 2-1: config 1 has no interface number 0 [ 195.040014][ T5892] usb 3-1: device descriptor read/8, error -71 [ 195.061715][ T7728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.092678][ T5891] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 195.092708][ T5891] usb 2-1: config 1 has no interface number 0 [ 195.118364][ T5891] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 195.118393][ T5891] usb 2-1: config 1 has no interface number 0 [ 195.121966][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.122002][ T5891] usb 2-1: Product: syz [ 195.122016][ T5891] usb 2-1: Manufacturer: syz [ 195.122029][ T5891] usb 2-1: SerialNumber: syz [ 195.195141][ T5891] usb 2-1: 3:0 : does not exist [ 195.195198][ T5891] usb 2-1: 3:0 : does not exist [ 195.283779][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 195.305452][ T5892] usb 3-1: device descriptor read/8, error -71 [ 195.313477][ T7724] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.563'. [ 195.402257][ T5891] usb 2-1: USB disconnect, device number 11 [ 195.435040][ T5764] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 195.437718][ T5892] usb usb3-port1: unable to enumerate USB device [ 195.471199][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.596615][ T5764] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 195.598014][ T5764] usb 5-1: config 0 has no interfaces? [ 195.600379][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.600404][ T5764] usb 5-1: Product: syz [ 195.600419][ T5764] usb 5-1: Manufacturer: syz [ 195.608040][ T5764] usb 5-1: config 0 descriptor?? [ 195.849069][ T5892] usb 5-1: USB disconnect, device number 16 [ 196.462184][ T7780] netlink: 'syz.1.579': attribute type 4 has an invalid length. [ 196.561129][ T7784] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 196.561151][ T7784] netlink: 17 bytes leftover after parsing attributes in process `syz.0.581'. [ 197.503255][ T7823] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 197.503280][ T7823] netlink: 17 bytes leftover after parsing attributes in process `syz.2.593'. [ 197.503470][ T7823] FAULT_INJECTION: forcing a failure. [ 197.503470][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 197.503501][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.2.593 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.503527][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.503541][ T7823] Call Trace: [ 197.503549][ T7823] [ 197.503559][ T7823] dump_stack_lvl+0xe8/0x150 [ 197.503602][ T7823] should_fail_ex+0x447/0x5e0 [ 197.503635][ T7823] should_failslab+0xa8/0x100 [ 197.503660][ T7823] ? fib_trie_unmerge+0x2a8/0xd20 [ 197.503687][ T7823] kmem_cache_alloc_noprof+0x99/0x680 [ 197.503718][ T7823] ? lockdep_rtnl_is_held+0x26/0x40 [ 197.503746][ T7823] ? fib_trie_unmerge+0x2a8/0xd20 [ 197.503777][ T7823] fib_trie_unmerge+0x2a8/0xd20 [ 197.503823][ T7823] fib_unmerge+0xc5/0x350 [ 197.503858][ T7823] fib4_rule_configure+0x2c9/0x9d0 [ 197.503889][ T7823] fib_newrule+0x61e/0xf20 [ 197.503921][ T7823] ? __lock_acquire+0x747/0x2de0 [ 197.503956][ T7823] ? __pfx_fib_newrule+0x10/0x10 [ 197.504015][ T7823] ? __pfx_fib_nl_newrule+0x10/0x10 [ 197.504041][ T7823] rtnetlink_rcv_msg+0x802/0xc00 [ 197.504075][ T7823] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 197.504102][ T7823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.504134][ T7823] ? __copy_skb_header+0xa3/0x4a0 [ 197.504155][ T7823] ? __asan_memcpy+0x40/0x70 [ 197.504191][ T7823] netlink_rcv_skb+0x226/0x4a0 [ 197.504220][ T7823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.504254][ T7823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.504291][ T7823] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.504318][ T7823] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.504351][ T7823] netlink_unicast+0x90c/0xac0 [ 197.504393][ T7823] netlink_sendmsg+0x7f0/0xb20 [ 197.504428][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.504455][ T7823] ? __lock_acquire+0x747/0x2de0 [ 197.504490][ T7823] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 197.504524][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.504551][ T7823] sock_sendmsg_nosec+0x14e/0x190 [ 197.504583][ T7823] ____sys_sendmsg+0x565/0x870 [ 197.504613][ T7823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.504646][ T7823] ? import_iovec+0x73/0xa0 [ 197.504678][ T7823] ___sys_sendmsg+0x2a5/0x360 [ 197.504699][ T7823] ? __lock_acquire+0x747/0x2de0 [ 197.504735][ T7823] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.504762][ T7823] ? futex_wake+0x51e/0x600 [ 197.504831][ T7823] ? __fget_files+0x3a8/0x420 [ 197.504860][ T7823] ? __fget_files+0x2a/0x420 [ 197.504898][ T7823] __x64_sys_sendmsg+0x1b7/0x290 [ 197.504923][ T7823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.504968][ T7823] do_syscall_64+0x166/0x520 [ 197.504993][ T7823] ? trace_irq_disable+0x3b/0x140 [ 197.505016][ T7823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.505038][ T7823] ? clear_bhb_loop+0x70/0xc0 [ 197.505064][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.505085][ T7823] RIP: 0033:0x7fadb007fb19 [ 197.505106][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.505125][ T7823] RSP: 002b:00007fadae2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.505149][ T7823] RAX: ffffffffffffffda RBX: 00007fadb0305fa0 RCX: 00007fadb007fb19 [ 197.505165][ T7823] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000006 [ 197.505178][ T7823] RBP: 00007fadb0117b70 R08: 0000000000000000 R09: 0000000000000000 [ 197.505192][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.505205][ T7823] R13: 00007fadb0306038 R14: 00007fadb0305fa0 R15: 00007ffee77787c8 [ 197.505238][ T7823] [ 198.277670][ T200] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.424944][ T200] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 198.425609][ T200] usb 6-1: config 0 has no interfaces? [ 198.433346][ T200] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.433377][ T200] usb 6-1: Product: syz [ 198.433392][ T200] usb 6-1: Manufacturer: syz [ 198.477360][ T200] usb 6-1: config 0 descriptor?? [ 198.690962][ T200] usb 6-1: USB disconnect, device number 6 [ 199.054571][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 199.247817][ T5892] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 199.349499][ T5892] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.398586][ T5892] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.446896][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.446924][ T5892] usb 5-1: Product: syz [ 199.446938][ T5892] usb 5-1: Manufacturer: syz [ 199.446949][ T5892] usb 5-1: SerialNumber: syz [ 199.704185][ T5892] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 199.984470][ T5892] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 200.298409][ T5892] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 203.125093][ T7862] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 203.442579][ T5808] usb 5-1: USB disconnect, device number 17 [ 203.495881][ T5808] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 203.532709][ T5808] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 203.533873][ T5808] ti_usb_3410_5052 5-1:2.0: device disconnected [ 203.815014][ T7887] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 204.304302][ T5749] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 204.364284][ T5808] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.467642][ T5749] usb 6-1: New USB device found: idVendor=056a, idProduct=0343, bcdDevice=0.00 [ 204.468800][ T5749] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.468832][ T5749] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.468847][ T5749] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.468866][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.479446][ T5749] usb 6-1: config 0 descriptor?? [ 204.527149][ T5808] usb 2-1: device descriptor read/64, error -71 [ 204.594235][ T1007] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.828887][ T5808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.845124][ T1007] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 204.847264][ T1007] usb 3-1: config 0 has no interfaces? [ 204.849214][ T1007] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.849241][ T1007] usb 3-1: Product: syz [ 204.849256][ T1007] usb 3-1: Manufacturer: syz [ 204.886306][ T1007] usb 3-1: config 0 descriptor?? [ 204.954337][ T5808] usb 2-1: device descriptor read/64, error -71 [ 204.975104][ T5749] wacom 0003:056A:0343.0006: unknown main item tag 0x0 [ 204.975147][ T5749] wacom 0003:056A:0343.0006: unknown main item tag 0x0 [ 204.975173][ T5749] wacom 0003:056A:0343.0006: unbalanced collection at end of report description [ 204.975973][ T5749] wacom 0003:056A:0343.0006: parse failed [ 204.976071][ T5749] wacom 0003:056A:0343.0006: probe with driver wacom failed with error -22 [ 205.066247][ T5808] usb usb2-port1: attempt power cycle [ 205.097713][ T5749] usb 3-1: USB disconnect, device number 13 [ 205.223847][ T5892] usb 6-1: USB disconnect, device number 7 [ 205.404346][ T5808] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.425278][ T5808] usb 2-1: device descriptor read/8, error -71 [ 205.664385][ T5808] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 205.685064][ T5808] usb 2-1: device descriptor read/8, error -71 [ 205.794993][ T5808] usb usb2-port1: unable to enumerate USB device [ 206.044360][ T5808] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.214874][ T5808] usb 6-1: Using ep0 maxpacket: 32 [ 206.215719][ T5808] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 206.217226][ T5808] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 206.217278][ T5808] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 206.217305][ T5808] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.217332][ T5808] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 206.221527][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.221555][ T5808] usb 6-1: Product: syz [ 206.221624][ T5808] usb 6-1: Manufacturer: syz [ 206.221640][ T5808] usb 6-1: SerialNumber: syz [ 206.305156][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 206.313349][ T7916] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 206.592430][ T5808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input10 [ 206.710736][ T7927] FAULT_INJECTION: forcing a failure. [ 206.710736][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 206.710775][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.0.633 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.710804][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.710817][ T7927] Call Trace: [ 206.710826][ T7927] [ 206.710835][ T7927] dump_stack_lvl+0xe8/0x150 [ 206.710877][ T7927] should_fail_ex+0x447/0x5e0 [ 206.710909][ T7927] should_failslab+0xa8/0x100 [ 206.710936][ T7927] __kmalloc_noprof+0xf6/0x790 [ 206.710957][ T7927] ? security_key_alloc+0x51/0x390 [ 206.710986][ T7927] ? security_key_alloc+0x51/0x390 [ 206.711026][ T7927] security_key_alloc+0x51/0x390 [ 206.711057][ T7927] key_alloc+0x7fd/0xfe0 [ 206.711089][ T7927] keyring_alloc+0x45/0xb0 [ 206.711117][ T7927] call_sbin_request_key+0x32f/0xbf0 [ 206.711139][ T7927] ? request_key_auth_free_preparse+0x9/0x10 [ 206.711173][ T7927] ? __pfx_call_sbin_request_key+0x10/0x10 [ 206.711226][ T7927] ? __pfx_request_key_auth_new+0x10/0x10 [ 206.711262][ T7927] request_key_and_link+0xf15/0x15a0 [ 206.711303][ T7927] ? __pfx_request_key_and_link+0x10/0x10 [ 206.711337][ T7927] ? lock_acquire+0x115/0x350 [ 206.711377][ T7927] ? __pfx_key_default_cmp+0x10/0x10 [ 206.711402][ T7927] ? __pfx_keyring_search_iterator+0x10/0x10 [ 206.711430][ T7927] ? down_read+0x151/0x200 [ 206.711455][ T7927] ? __pfx_down_read+0x10/0x10 [ 206.711484][ T7927] ? _copy_from_user+0x94/0xb0 [ 206.711517][ T7927] __se_sys_request_key+0x29a/0x350 [ 206.711549][ T7927] ? __pfx___se_sys_request_key+0x10/0x10 [ 206.711593][ T7927] do_syscall_64+0x166/0x520 [ 206.711617][ T7927] ? trace_irq_disable+0x3b/0x140 [ 206.711639][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.711660][ T7927] ? clear_bhb_loop+0x70/0xc0 [ 206.711686][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.711715][ T7927] RIP: 0033:0x7f3173d5fb19 [ 206.711736][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.711756][ T7927] RSP: 002b:00007f3171fae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 206.711779][ T7927] RAX: ffffffffffffffda RBX: 00007f3173fe5fa0 RCX: 00007f3173d5fb19 [ 206.711795][ T7927] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 206.711811][ T7927] RBP: 00007f3173df7b70 R08: 0000000000000000 R09: 0000000000000000 [ 206.711825][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.711838][ T7927] R13: 00007f3173fe6038 R14: 00007f3173fe5fa0 R15: 00007ffdde9875a8 [ 206.711874][ T7927] [ 206.724195][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 206.794294][ T5808] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 206.794336][ T5808] (id 0x00) [ 206.804256][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 207.055127][ T5808] rc_core: IR keymap rc-imon-pad not found [ 207.055150][ T5808] Registered IR keymap rc-empty [ 207.080001][ T5808] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 207.080026][ T5808] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 207.150166][ T5808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 207.192123][ T5808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input11 [ 207.208498][ T5808] imon 6-1:155.0: iMON device (15c2:ffdc) on usb<6:8> initialized [ 207.219691][ T5808] usb 6-1: USB disconnect, device number 8 [ 207.487919][ T7941] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 208.129598][ T7945] process 'syz.0.637' launched './file2' with NULL argv: empty string added [ 208.365301][ T7948] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 208.851790][ T7962] lo: entered allmulticast mode [ 208.871011][ T7961] lo: left allmulticast mode [ 208.950096][ T552] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 209.013406][ T7941] rtrs_client L2656: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 209.184540][ T7968] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 209.196089][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.345395][ T7973] kAFS: unable to lookup cell '/,c¾ûL' [ 209.346071][ T9] usb 5-1: device descriptor read/64, error -71 [ 210.135125][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 210.437948][ T9] usb 5-1: device descriptor read/64, error -71 [ 210.681088][ T9] usb usb5-port1: attempt power cycle [ 211.144336][ T200] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.254585][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 211.274220][ T200] usb 6-1: device descriptor read/64, error -71 [ 211.275105][ T9] usb 5-1: device descriptor read/8, error -71 [ 211.514235][ T200] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.514440][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 211.535169][ T9] usb 5-1: device descriptor read/8, error -71 [ 211.644657][ T9] usb usb5-port1: unable to enumerate USB device [ 211.645330][ T200] usb 6-1: device descriptor read/64, error -71 [ 211.767978][ T200] usb usb6-port1: attempt power cycle [ 212.104285][ T200] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.124910][ T200] usb 6-1: device descriptor read/8, error -71 [ 212.208431][ T8025] lo: entered allmulticast mode [ 212.209836][ T8024] lo: left allmulticast mode [ 212.284278][ T5808] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.364218][ T200] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.385152][ T200] usb 6-1: device descriptor read/8, error -71 [ 212.435871][ T5808] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 212.439385][ T5808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.439415][ T5808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.474670][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.474701][ T5808] usb 5-1: Product: syz [ 212.474802][ T5808] usb 5-1: Manufacturer: syz [ 212.501763][ T200] usb usb6-port1: unable to enumerate USB device [ 212.775634][ T5764] usb 5-1: USB disconnect, device number 22 [ 214.024244][ T5764] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 214.154253][ T5764] usb 1-1: device descriptor read/64, error -71 [ 214.444311][ T5764] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 214.583692][ T5764] usb 1-1: device descriptor read/64, error -71 [ 214.718774][ T5764] usb usb1-port1: attempt power cycle [ 215.364260][ T5764] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.386217][ T5764] usb 1-1: device descriptor read/8, error -71 [ 215.654490][ T5892] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.654651][ T5764] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 215.675133][ T5764] usb 1-1: device descriptor read/8, error -71 [ 215.802809][ T5764] usb usb1-port1: unable to enumerate USB device [ 215.815124][ T5892] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 215.816708][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.816737][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.816774][ T5892] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 215.819278][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 215.819305][ T5892] usb 5-1: Product: syz [ 215.819320][ T5892] usb 5-1: Manufacturer: syz [ 216.076359][ T8052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.082250][ T5892] usb 5-1: USB disconnect, device number 23 [ 216.407579][ T8095] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 216.797528][ T8111] netlink: 'syz.2.704': attribute type 4 has an invalid length. [ 216.797554][ T8111] netlink: 17 bytes leftover after parsing attributes in process `syz.2.704'. [ 219.214257][ T200] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 219.314221][ T5764] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.376308][ T200] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 219.377580][ T200] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 219.377630][ T200] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.378854][ T200] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 219.378914][ T200] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.381104][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.381127][ T200] usb 6-1: Product: syz [ 219.381141][ T200] usb 6-1: Manufacturer: syz [ 219.381155][ T200] usb 6-1: SerialNumber: syz [ 219.384960][ T1007] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 219.464591][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 219.467206][ T5764] usb 2-1: New USB device found: idVendor=ee8d, idProduct=0000, bcdDevice=0.00 [ 219.467268][ T5764] usb 2-1: no configurations [ 219.467280][ T5764] usb 2-1: can't read configurations, error -22 [ 219.494232][ T5892] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.511303][ T200] ti_usb_3410_5052 6-1:2.0: required endpoints missing [ 219.545937][ T1007] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 219.547357][ T1007] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.547374][ T1007] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.547394][ T1007] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 219.549233][ T1007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.549249][ T1007] usb 3-1: Product: syz [ 219.549258][ T1007] usb 3-1: Manufacturer: syz [ 219.608237][ T5764] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.624244][ T5892] usb 1-1: device descriptor read/64, error -71 [ 219.740888][ T1007] usb 6-1: USB disconnect, device number 13 [ 219.774395][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 219.775114][ T5764] usb 2-1: New USB device found: idVendor=ee8d, idProduct=0000, bcdDevice=0.00 [ 219.775153][ T5764] usb 2-1: no configurations [ 219.775160][ T5764] usb 2-1: can't read configurations, error -22 [ 219.780655][ T5764] usb usb2-port1: attempt power cycle [ 219.822684][ T200] usb 3-1: USB disconnect, device number 14 [ 219.884287][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.033076][ T5892] usb 1-1: device descriptor read/64, error -71 [ 220.124353][ T5764] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 220.135831][ T5892] usb usb1-port1: attempt power cycle [ 220.149031][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 220.149651][ T5764] usb 2-1: New USB device found: idVendor=ee8d, idProduct=0000, bcdDevice=0.00 [ 220.149708][ T5764] usb 2-1: no configurations [ 220.149721][ T5764] usb 2-1: can't read configurations, error -22 [ 220.284265][ T5764] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 220.305648][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 220.306352][ T5764] usb 2-1: New USB device found: idVendor=ee8d, idProduct=0000, bcdDevice=0.00 [ 220.306411][ T5764] usb 2-1: no configurations [ 220.306424][ T5764] usb 2-1: can't read configurations, error -22 [ 220.306789][ T5764] usb usb2-port1: unable to enumerate USB device [ 220.339045][ T8146] netlink: 'syz.5.717': attribute type 4 has an invalid length. [ 220.339069][ T8146] netlink: 17 bytes leftover after parsing attributes in process `syz.5.717'. [ 220.474306][ T5892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 220.495074][ T5892] usb 1-1: device descriptor read/8, error -71 [ 220.664239][ T1007] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.734338][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 220.755141][ T5892] usb 1-1: device descriptor read/8, error -71 [ 220.817333][ T1007] usb 3-1: Using ep0 maxpacket: 16 [ 220.819146][ T1007] usb 3-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 220.820264][ T1007] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.820289][ T1007] usb 3-1: config 0 has no interfaces? [ 220.822573][ T1007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.822597][ T1007] usb 3-1: Product: syz [ 220.822612][ T1007] usb 3-1: Manufacturer: syz [ 220.822622][ T1007] usb 3-1: SerialNumber: syz [ 220.832834][ T1007] usb 3-1: config 0 descriptor?? [ 220.864950][ T5892] usb usb1-port1: unable to enumerate USB device [ 221.070401][ T1007] usb 3-1: USB disconnect, device number 15 [ 221.284326][ T8139] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 221.333897][ T5619] Bluetooth: Wrong link type (-71) [ 221.924297][ T5808] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 221.971962][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'. [ 222.029318][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 222.106249][ T5808] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.107489][ T5808] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61 [ 222.107521][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.112062][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.112091][ T5808] usb 3-1: Product: syz [ 222.112106][ T5808] usb 3-1: Manufacturer: syz [ 222.112120][ T5808] usb 3-1: SerialNumber: syz [ 222.173350][ T5808] usb 3-1: config 0 descriptor?? [ 222.187127][ T8156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.191510][ T5808] usb 3-1: selecting invalid altsetting 0 [ 222.364328][ T1007] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 222.396008][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.396259][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.396683][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.397206][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.397440][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.397646][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.397910][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.398123][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.398335][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.398584][ T8156] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 222.516096][ T5764] usb 3-1: USB disconnect, device number 16 [ 222.518442][ T1007] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 222.519546][ T1007] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 222.519592][ T1007] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.520638][ T1007] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 222.520688][ T1007] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.523041][ T1007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.523066][ T1007] usb 2-1: Product: syz [ 222.523080][ T1007] usb 2-1: Manufacturer: syz [ 222.523095][ T1007] usb 2-1: SerialNumber: syz [ 222.625673][ T1007] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 222.834266][ T5808] usb 2-1: USB disconnect, device number 20 [ 222.994213][ T1007] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.146468][ T1007] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 223.147762][ T1007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.147789][ T1007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.147825][ T1007] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 223.150030][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 223.150057][ T1007] usb 5-1: Product: syz [ 223.150131][ T1007] usb 5-1: Manufacturer: syz [ 223.340834][ T8189] jffs2: notice: (8189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 223.415498][ T9] usb 5-1: USB disconnect, device number 24 [ 223.578119][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.739'. [ 223.579145][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 223.579163][ T8200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.579185][ T8200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.614417][ T5808] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 223.662231][ T8200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.662262][ T8200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.687458][ T5619] Bluetooth: Wrong link type (-71) [ 223.687543][ T5619] Bluetooth: hci5: link tx timeout [ 223.687552][ T5619] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.764322][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 223.765218][ T5808] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.765276][ T5808] usb 1-1: no configurations [ 223.765287][ T5808] usb 1-1: can't read configurations, error -22 [ 223.784327][ T200] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 223.904278][ T5808] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 223.934404][ T200] usb 3-1: device descriptor read/64, error -71 [ 224.064221][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 224.065989][ T5808] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.066027][ T5808] usb 1-1: no configurations [ 224.066035][ T5808] usb 1-1: can't read configurations, error -22 [ 224.066326][ T5808] usb usb1-port1: attempt power cycle [ 224.174276][ T200] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.204295][ T1007] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.314205][ T200] usb 3-1: device descriptor read/64, error -71 [ 224.355093][ T1007] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.356319][ T1007] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.356354][ T1007] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 224.356377][ T1007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.359478][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.359505][ T1007] usb 5-1: Product: syz [ 224.359520][ T1007] usb 5-1: Manufacturer: syz [ 224.359531][ T1007] usb 5-1: SerialNumber: syz [ 224.364920][ T1007] usb 5-1: config 0 descriptor?? [ 224.384956][ T8204] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 224.395885][ T1007] usb 5-1: selecting invalid altsetting 0 [ 224.441499][ T5808] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 224.453832][ T200] usb usb3-port1: attempt power cycle [ 224.477805][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 224.478436][ T5808] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.478486][ T5808] usb 1-1: no configurations [ 224.478499][ T5808] usb 1-1: can't read configurations, error -22 [ 224.604396][ T5808] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 224.626381][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 224.627298][ T5808] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.627356][ T5808] usb 1-1: no configurations [ 224.627378][ T5808] usb 1-1: can't read configurations, error -22 [ 224.628615][ T5808] usb usb1-port1: unable to enumerate USB device [ 224.794345][ T200] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 224.814893][ T200] usb 3-1: device descriptor read/8, error -71 [ 225.057192][ T200] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 225.246572][ T200] usb 3-1: device descriptor read/8, error -71 [ 225.772680][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 226.189486][ T200] usb usb3-port1: unable to enumerate USB device [ 226.332006][ T8220] jffs2: notice: (8220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 226.494259][ T5891] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 226.656340][ T5891] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 226.658352][ T5891] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 226.658405][ T5891] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.660373][ T5891] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 226.660423][ T5891] usb 6-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.720629][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.720658][ T5891] usb 6-1: Product: syz [ 226.720673][ T5891] usb 6-1: Manufacturer: syz [ 226.720685][ T5891] usb 6-1: SerialNumber: syz [ 226.764486][ T5891] ti_usb_3410_5052 6-1:2.0: required endpoints missing [ 226.973514][ T200] usb 6-1: USB disconnect, device number 14 [ 227.044526][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 227.205198][ T5891] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 227.215034][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.240469][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 227.240499][ T5891] usb 2-1: Product: syz [ 227.240527][ T5891] usb 2-1: Manufacturer: syz [ 227.282904][ T5891] usb 2-1: selecting invalid altsetting 1 [ 227.283343][ T5891] dvb_ttusb_budget: ttusb_init_controller: error [ 227.283360][ T5891] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 227.360541][ T5764] usb 5-1: USB disconnect, device number 25 [ 227.427982][ T5891] DVB: Unable to find symbol cx22700_attach() [ 227.651053][ T5891] DVB: Unable to find symbol tda10046_attach() [ 227.651072][ T5891] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 227.681184][ T5623] Bluetooth: Wrong link type (-71) [ 227.778505][ T5891] usb 2-1: USB disconnect, device number 21 [ 230.008087][ T8257] jffs2: notice: (8257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 230.084196][ T5891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 230.234209][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 230.235068][ T5891] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.235125][ T5891] usb 3-1: no configurations [ 230.235138][ T5891] usb 3-1: can't read configurations, error -22 [ 230.364324][ T5891] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 230.364468][ T200] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.444310][ T5764] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 230.504293][ T200] usb 5-1: device descriptor read/64, error -71 [ 230.524202][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 230.525973][ T5891] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.526040][ T5891] usb 3-1: no configurations [ 230.526053][ T5891] usb 3-1: can't read configurations, error -22 [ 230.526760][ T5891] usb usb3-port1: attempt power cycle [ 230.595448][ T5764] usb 1-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 230.597509][ T5764] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 230.597566][ T5764] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.597589][ T5764] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.599833][ T5764] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 230.599896][ T5764] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.599919][ T5764] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.602937][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.602966][ T5764] usb 1-1: Product: syz [ 230.602980][ T5764] usb 1-1: Manufacturer: syz [ 230.602996][ T5764] usb 1-1: SerialNumber: syz [ 230.615420][ T5764] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 230.615835][ T5764] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 230.734261][ T200] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 230.864256][ T200] usb 5-1: device descriptor read/64, error -71 [ 230.952053][ T5808] usb 1-1: USB disconnect, device number 26 [ 230.974721][ T200] usb usb5-port1: attempt power cycle [ 231.162318][ T5764] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 231.747538][ T5764] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 231.749069][ T5764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.752748][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 231.752775][ T5764] usb 6-1: Product: syz [ 231.752790][ T5764] usb 6-1: Manufacturer: syz [ 231.801558][ T5764] usb 6-1: selecting invalid altsetting 1 [ 231.801727][ T5764] dvb_ttusb_budget: ttusb_init_controller: error [ 231.801741][ T5764] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 231.826446][ T5891] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 231.855012][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 231.856085][ T5891] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.856143][ T5891] usb 3-1: no configurations [ 231.856156][ T5891] usb 3-1: can't read configurations, error -22 [ 231.989372][ T5764] DVB: Unable to find symbol cx22700_attach() [ 232.004312][ T5891] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 232.030268][ T5764] DVB: Unable to find symbol tda10046_attach() [ 232.030280][ T5764] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 232.046524][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 232.058090][ T5891] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.058147][ T5891] usb 3-1: no configurations [ 232.058169][ T5891] usb 3-1: can't read configurations, error -22 [ 232.060743][ T5891] usb usb3-port1: unable to enumerate USB device [ 232.076080][ T5764] usb 6-1: USB disconnect, device number 15 [ 232.164688][ T200] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 232.195024][ T200] usb 5-1: device descriptor read/8, error -71 [ 232.444261][ T200] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 232.467021][ T200] usb 5-1: device descriptor read/8, error -71 [ 232.579238][ T200] usb usb5-port1: unable to enumerate USB device [ 232.728009][ T8291] FAULT_INJECTION: forcing a failure. [ 232.728009][ T8291] name failslab, interval 1, probability 5, space 0, times 10000 [ 232.728034][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.728047][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.728055][ T8291] Call Trace: [ 232.728060][ T8291] [ 232.728066][ T8291] dump_stack_lvl+0xe8/0x150 [ 232.728091][ T8291] should_fail_ex+0x447/0x5e0 [ 232.728112][ T8291] should_failslab+0xa8/0x100 [ 232.728127][ T8291] ? security_file_alloc+0x34/0x310 [ 232.728145][ T8291] kmem_cache_alloc_noprof+0x99/0x680 [ 232.728163][ T8291] ? rcu_is_watching+0x16/0xb0 [ 232.728177][ T8291] ? security_file_alloc+0x34/0x310 [ 232.728193][ T8291] ? alloc_empty_file+0x5b/0x1d0 [ 232.728212][ T8291] security_file_alloc+0x34/0x310 [ 232.728228][ T8291] init_file+0x96/0x2d0 [ 232.728243][ T8291] alloc_empty_file+0x74/0x1d0 [ 232.728257][ T8291] path_openat+0x96/0x2100 [ 232.728268][ T8291] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.728291][ T8291] do_file_open+0x23e/0x4a0 [ 232.728300][ T8291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 232.728317][ T8291] ? __pfx_do_file_open+0x10/0x10 [ 232.728343][ T8291] ? alloc_fd+0x6b2/0x760 [ 232.728364][ T8291] do_sys_openat2+0x115/0x200 [ 232.728379][ T8291] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.728397][ T8291] ? do_user_addr_fault+0xd3f/0x1480 [ 232.728413][ T8291] __x64_sys_openat+0x138/0x170 [ 232.728430][ T8291] do_syscall_64+0x166/0x520 [ 232.728442][ T8291] ? trace_irq_disable+0x3b/0x140 [ 232.728454][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.728465][ T8291] ? clear_bhb_loop+0x70/0xc0 [ 232.728478][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.728489][ T8291] RIP: 0033:0x7f07e3c4034e [ 232.728501][ T8291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.728510][ T8291] RSP: 002b:00007f07e1ed5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.728522][ T8291] RAX: ffffffffffffffda RBX: 00007f07e1ed66c0 RCX: 00007f07e3c4034e [ 232.728531][ T8291] RDX: 0000000000000002 RSI: 00007f07e1ed5c00 RDI: ffffffffffffff9c [ 232.728538][ T8291] RBP: 00007f07e1ed5c00 R08: 0000000000000000 R09: 0000000000000000 [ 232.728545][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 232.728552][ T8291] R13: 00007f07e3f06038 R14: 00007f07e3f05fa0 R15: 00007ffdd6d068d8 [ 232.728569][ T8291] [ 232.749880][ T8291] FAULT_INJECTION: forcing a failure. [ 232.749880][ T8291] name failslab, interval 1, probability 5, space 0, times 9999 [ 232.749917][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.749940][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.749953][ T8291] Call Trace: [ 232.749961][ T8291] [ 232.749969][ T8291] dump_stack_lvl+0xe8/0x150 [ 232.750011][ T8291] should_fail_ex+0x447/0x5e0 [ 232.750041][ T8291] should_failslab+0xa8/0x100 [ 232.750067][ T8291] __kmalloc_cache_noprof+0x9c/0x670 [ 232.750089][ T8291] ? tipc_conn_alloc+0x57/0x500 [ 232.750110][ T8291] ? tipc_conn_alloc+0x57/0x500 [ 232.750139][ T8291] tipc_conn_alloc+0x57/0x500 [ 232.750167][ T8291] tipc_topsrv_kern_subscr+0xf8/0x250 [ 232.750188][ T8291] ? tipc_own_addr+0x45/0x2a0 [ 232.750212][ T8291] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 232.750238][ T8291] ? tipc_own_addr+0x45/0x2a0 [ 232.750263][ T8291] ? __asan_memset+0x22/0x50 [ 232.750295][ T8291] tipc_group_create+0x35b/0x4f0 [ 232.750324][ T8291] tipc_sk_join+0x25d/0x6a0 [ 232.750351][ T8291] ? __pfx_tipc_sk_join+0x10/0x10 [ 232.750371][ T8291] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 232.750400][ T8291] ? lockdep_hardirqs_on+0x7b/0x110 [ 232.750428][ T8291] tipc_setsockopt+0x73e/0x9a0 [ 232.750464][ T8291] ? __pfx_tipc_setsockopt+0x10/0x10 [ 232.750502][ T8291] ? __fget_files+0x3a8/0x420 [ 232.750529][ T8291] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 232.750549][ T8291] ? __pfx_tipc_setsockopt+0x10/0x10 [ 232.750593][ T8291] do_sock_setsockopt+0x17c/0x1b0 [ 232.750619][ T8291] __x64_sys_setsockopt+0x143/0x1b0 [ 232.750649][ T8291] do_syscall_64+0x166/0x520 [ 232.750673][ T8291] ? trace_irq_disable+0x3b/0x140 [ 232.750696][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.750723][ T8291] ? clear_bhb_loop+0x70/0xc0 [ 232.750748][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.750769][ T8291] RIP: 0033:0x7f07e3c7fb19 [ 232.750789][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.750807][ T8291] RSP: 002b:00007f07e1ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.750829][ T8291] RAX: ffffffffffffffda RBX: 00007f07e3f05fa0 RCX: 00007f07e3c7fb19 [ 232.750844][ T8291] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 232.750857][ T8291] RBP: 00007f07e3d17b70 R08: 0000000000000010 R09: 0000000000000000 [ 232.750871][ T8291] R10: 0000200000002740 R11: 0000000000000246 R12: 0000000000000000 [ 232.750885][ T8291] R13: 00007f07e3f06038 R14: 00007f07e3f05fa0 R15: 00007ffdd6d068d8 [ 232.750918][ T8291] [ 232.776893][ T8291] FAULT_INJECTION: forcing a failure. [ 232.776893][ T8291] name failslab, interval 1, probability 5, space 0, times 9998 [ 232.776932][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.776957][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.776970][ T8291] Call Trace: [ 232.776977][ T8291] [ 232.776985][ T8291] dump_stack_lvl+0xe8/0x150 [ 232.777024][ T8291] should_fail_ex+0x447/0x5e0 [ 232.777056][ T8291] should_failslab+0xa8/0x100 [ 232.777081][ T8291] ? security_inode_alloc+0x39/0x310 [ 232.777106][ T8291] kmem_cache_alloc_noprof+0x99/0x680 [ 232.777140][ T8291] ? security_inode_alloc+0x39/0x310 [ 232.777169][ T8291] security_inode_alloc+0x39/0x310 [ 232.777193][ T8291] inode_init_always_gfp+0x983/0xd40 [ 232.777225][ T8291] ? __pfx_sock_alloc_inode+0x10/0x10 [ 232.777252][ T8291] alloc_inode+0x82/0x1b0 [ 232.777280][ T8291] __sock_create+0x127/0xac0 [ 232.777317][ T8291] __sys_socket+0xd6/0x1b0 [ 232.777347][ T8291] __x64_sys_socket+0x7a/0x90 [ 232.777376][ T8291] do_syscall_64+0x166/0x520 [ 232.777400][ T8291] ? trace_irq_disable+0x3b/0x140 [ 232.777421][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.777442][ T8291] ? clear_bhb_loop+0x70/0xc0 [ 232.777466][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.777487][ T8291] RIP: 0033:0x7f07e3c7fb19 [ 232.777505][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.777524][ T8291] RSP: 002b:00007f07e1ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 232.777544][ T8291] RAX: ffffffffffffffda RBX: 00007f07e3f05fa0 RCX: 00007f07e3c7fb19 [ 232.777559][ T8291] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 232.777572][ T8291] RBP: 00007f07e3d17b70 R08: 0000000000000000 R09: 0000000000000000 [ 232.777585][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.777598][ T8291] R13: 00007f07e3f06038 R14: 00007f07e3f05fa0 R15: 00007ffdd6d068d8 [ 232.777630][ T8291] [ 232.777663][ T8291] socket: no more sockets [ 233.728193][ T8314] netlink: 'syz.5.783': attribute type 1 has an invalid length. [ 233.765081][ T70] IPVS: starting estimator thread 0... [ 233.812417][ T200] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 234.278710][ T8313] IPVS: using max 10 ests per chain, 24000 per kthread [ 234.624827][ T8323] overlayfs: missing 'workdir' [ 234.669673][ T8314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.796258][ T200] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 234.798516][ T200] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 234.798580][ T200] usb 2-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.798672][ T200] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 234.801546][ T200] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 234.801600][ T200] usb 2-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.801621][ T200] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 234.842552][ T8318] bond1: (slave geneve2): making interface the new active one [ 234.856867][ T8318] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 234.857088][ T8321] tipc: Started in network mode [ 234.857132][ T8321] tipc: Node identity 0010000000000000002, cluster identity 1 [ 234.882822][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.882851][ T200] usb 2-1: Product: syz [ 234.882876][ T200] usb 2-1: Manufacturer: syz [ 234.882891][ T200] usb 2-1: SerialNumber: syz [ 234.888428][ T5764] Dead loop on virtual device lo (net 52), fix it urgently! [ 234.973072][ T200] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 234.973434][ T200] ti_usb_3410_5052 2-1:2.0: missing endpoints [ 235.041290][ T137] Dead loop on virtual device lo (net 52), fix it urgently! [ 235.054571][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 235.074239][ T5808] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 235.117413][ T8333] FAULT_INJECTION: forcing a failure. [ 235.117413][ T8333] name failslab, interval 1, probability 5, space 0, times 9992 [ 235.117450][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.117482][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 235.117495][ T8333] Call Trace: [ 235.117504][ T8333] [ 235.117513][ T8333] dump_stack_lvl+0xe8/0x150 [ 235.117556][ T8333] should_fail_ex+0x447/0x5e0 [ 235.117592][ T8333] should_failslab+0xa8/0x100 [ 235.117619][ T8333] __kmalloc_cache_noprof+0x9c/0x670 [ 235.117721][ T8333] ? call_usermodehelper_setup+0x8e/0x270 [ 235.117762][ T8333] ? call_usermodehelper_setup+0x8e/0x270 [ 235.117805][ T8333] call_usermodehelper_setup+0x8e/0x270 [ 235.117833][ T8333] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 235.117852][ T8333] ? __pfx_umh_keys_init+0x10/0x10 [ 235.117876][ T8333] call_sbin_request_key+0x7db/0xbf0 [ 235.117898][ T8333] ? request_key_auth_free_preparse+0x9/0x10 [ 235.117924][ T8333] ? __pfx_call_sbin_request_key+0x10/0x10 [ 235.117978][ T8333] ? __pfx_request_key_auth_new+0x10/0x10 [ 235.118018][ T8333] request_key_and_link+0xf15/0x15a0 [ 235.118069][ T8333] ? __pfx_request_key_and_link+0x10/0x10 [ 235.118101][ T8333] ? lock_acquire+0x115/0x350 [ 235.118141][ T8333] ? __pfx_key_default_cmp+0x10/0x10 [ 235.118165][ T8333] ? __pfx_keyring_search_iterator+0x10/0x10 [ 235.118190][ T8333] ? down_read+0x151/0x200 [ 235.118213][ T8333] ? __pfx_down_read+0x10/0x10 [ 235.118237][ T8333] ? _copy_from_user+0x94/0xb0 [ 235.118266][ T8333] __se_sys_request_key+0x29a/0x350 [ 235.118298][ T8333] ? __pfx___se_sys_request_key+0x10/0x10 [ 235.118336][ T8333] do_syscall_64+0x166/0x520 [ 235.118361][ T8333] ? trace_irq_disable+0x3b/0x140 [ 235.118383][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.118404][ T8333] ? clear_bhb_loop+0x70/0xc0 [ 235.118428][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.118445][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 235.118448][ T8333] RIP: 0033:0x7fadb007fb19 [ 235.118465][ T8330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.118479][ T8333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.118488][ T8330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.118498][ T8333] RSP: 002b:00007fadae2ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 235.118520][ T8333] RAX: ffffffffffffffda RBX: 00007fadb0305fa0 RCX: 00007fadb007fb19 [ 235.118536][ T8333] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 235.118552][ T8333] RBP: 00007fadb0117b70 R08: 0000000000000000 R09: 0000000000000000 [ 235.118566][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.118581][ T8333] R13: 00007fadb0306038 R14: 00007fadb0305fa0 R15: 00007ffee77787c8 [ 235.118617][ T8333] [ 235.173819][ T5764] usb 2-1: USB disconnect, device number 22 [ 235.205071][ T1007] Dead loop on virtual device lo (net 52), fix it urgently! [ 235.285202][ T5808] usb 1-1: device descriptor read/64, error -71 [ 235.323831][ T8330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.323863][ T8330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.564421][ T5808] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 235.705102][ T5808] usb 1-1: device descriptor read/64, error -71 [ 235.788611][ T552] Dead loop on virtual device lo (net 52), fix it urgently! [ 235.815012][ T5808] usb usb1-port1: attempt power cycle [ 236.835541][ T552] Dead loop on virtual device lo (net 52), fix it urgently! [ 236.836335][ T552] Dead loop on virtual device lo (net 52), fix it urgently! [ 237.014267][ T5808] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 237.035029][ T5808] usb 1-1: device descriptor read/8, error -71 [ 237.285666][ T5808] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 237.286137][ T5764] Dead loop on virtual device lo (net 52), fix it urgently! [ 237.312593][ T5808] usb 1-1: device descriptor read/8, error -71 [ 237.414628][ T5808] usb usb1-port1: unable to enumerate USB device [ 237.434266][ T5749] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 237.585039][ T5749] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 237.586291][ T5749] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.586347][ T5749] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.586369][ T5749] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.587453][ T5749] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.587505][ T5749] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.587527][ T5749] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.592479][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.592508][ T5749] usb 6-1: Product: syz [ 237.592523][ T5749] usb 6-1: Manufacturer: syz [ 237.592539][ T5749] usb 6-1: SerialNumber: syz [ 237.653858][ T5749] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 237.656216][ T5749] ti_usb_3410_5052 6-1:2.0: missing endpoints [ 237.862607][ T200] usb 6-1: USB disconnect, device number 16 [ 238.236215][ T8420] jffs2: notice: (8420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 238.719658][ T200] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 238.886325][ T200] usb 1-1: Using ep0 maxpacket: 8 [ 238.887296][ T200] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.888749][ T200] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 238.888777][ T200] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 238.888826][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.745954][ T5749] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 239.864254][ T1007] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 239.895080][ T5749] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 239.897033][ T5749] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 239.897090][ T5749] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.897112][ T5749] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.897136][ T5749] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.901677][ T5749] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 239.901735][ T5749] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.901762][ T5749] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.901786][ T5749] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.969887][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.969916][ T5749] usb 3-1: Product: syz [ 239.969931][ T5749] usb 3-1: Manufacturer: syz [ 239.969945][ T5749] usb 3-1: SerialNumber: syz [ 240.017219][ T1007] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 240.046540][ T5749] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 240.050012][ T1007] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.052647][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.052680][ T1007] usb 6-1: Product: syz [ 240.052695][ T1007] usb 6-1: Manufacturer: syz [ 240.101631][ T5749] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 240.192980][ T8477] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.348638][ T8462] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 240.381989][ T1007] usb 6-1: selecting invalid altsetting 1 [ 240.429947][ T5749] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 240.439512][ T1007] dvb_ttusb_budget: ttusb_init_controller: error [ 240.458032][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 240.537520][ T1007] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 240.645567][ C1] Dead loop on virtual device lo (net 52), fix it urgently! [ 240.937754][ T8484] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 240.937781][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.4.851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.937819][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.937851][ T8484] Call Trace: [ 240.937860][ T8484] [ 240.937869][ T8484] dump_stack_lvl+0xe8/0x150 [ 240.937912][ T8484] sysfs_create_dir_ns+0x271/0x2a0 [ 240.937939][ T8484] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.937967][ T8484] ? rt_spin_unlock+0x165/0x200 [ 240.938002][ T8484] kobject_add_internal+0x62c/0xce0 [ 240.938041][ T8484] kobject_add+0x163/0x240 [ 240.938075][ T8484] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 240.938109][ T8484] ? __pfx_kobject_add+0x10/0x10 [ 240.938145][ T8484] ? get_device_parent+0x370/0x3a0 [ 240.938165][ T8484] ? __pfx_klist_children_get+0x10/0x10 [ 240.938195][ T8484] device_add+0x3fa/0xb80 [ 240.938219][ T8484] tty_register_device_attr+0x428/0x9b0 [ 240.938274][ T8484] ? __pfx_tty_register_device_attr+0x10/0x10 [ 240.938313][ T8484] ? tty_port_init+0x140/0x1b0 [ 240.938344][ T8484] ? gsm_dlci_alloc+0x341/0x650 [ 240.938379][ T8484] gsm_activate_mux+0x110/0x2a0 [ 240.938416][ T8484] gsmld_ioctl+0x12d3/0x1930 [ 240.938454][ T8484] ? __pfx_gsmld_ioctl+0x10/0x10 [ 240.938500][ T8484] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 240.938530][ T8484] ? ldsem_down_read+0x12/0x40 [ 240.938556][ T8484] ? __pfx_gsmld_ioctl+0x10/0x10 [ 240.938593][ T8484] tty_ioctl+0x9c3/0xde0 [ 240.938621][ T8484] ? __pfx_tty_ioctl+0x10/0x10 [ 240.938646][ T8484] __se_sys_ioctl+0xff/0x170 [ 240.938670][ T8484] do_syscall_64+0x166/0x520 [ 240.938692][ T8484] ? trace_irq_disable+0x3b/0x140 [ 240.938718][ T8484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.938739][ T8484] ? clear_bhb_loop+0x70/0xc0 [ 240.938764][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.938784][ T8484] RIP: 0033:0x7f18303afb19 [ 240.938803][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.938821][ T8484] RSP: 002b:00007f182e5bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.938844][ T8484] RAX: ffffffffffffffda RBX: 00007f1830636180 RCX: 00007f18303afb19 [ 240.938861][ T8484] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 240.938876][ T8484] RBP: 00007f1830447b70 R08: 0000000000000000 R09: 0000000000000000 [ 240.938889][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.938902][ T8484] R13: 00007f1830636218 R14: 00007f1830636180 R15: 00007fffe00eecf8 [ 240.938934][ T8484] [ 240.993203][ T8484] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 241.011950][ T5749] usb 3-1: USB disconnect, device number 25 [ 241.800639][ T200] usb 1-1: USB disconnect, device number 31 [ 242.119480][ T5623] Bluetooth: Wrong link type (-71) [ 242.409833][ T1007] DVB: Unable to find symbol cx22700_attach() [ 242.573564][ T8504] ubi0: attaching mtd0 [ 243.789850][ T5749] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 243.871103][ T1007] DVB: Unable to find symbol tda10046_attach() [ 243.871121][ T1007] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 244.413657][ T1007] usb 6-1: USB disconnect, device number 17 [ 244.434133][ T5749] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 244.467959][ T5749] ti_usb_3410_5052 3-1:2.0: device disconnected [ 244.631380][ T8504] ubi0: scanning is finished [ 244.631423][ T8504] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 244.802130][ T8499] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 244.939324][ T8499] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 244.962175][ T8499] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 245.654989][ T8504] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 246.224273][ T5808] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 246.400160][ T5808] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 246.402008][ T5808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.431463][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 246.431492][ T5808] usb 6-1: Product: syz [ 246.431508][ T5808] usb 6-1: Manufacturer: syz [ 246.550751][ T5808] usb 6-1: selecting invalid altsetting 1 [ 246.550905][ T5808] dvb_ttusb_budget: ttusb_init_controller: error [ 246.550919][ T5808] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 246.852803][ T5808] DVB: Unable to find symbol cx22700_attach() [ 247.030310][ T5808] DVB: Unable to find symbol tda10046_attach() [ 247.030324][ T5808] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 247.126504][ T5808] usb 6-1: USB disconnect, device number 18 [ 247.187149][ T200] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 247.339644][ T200] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 247.366366][ T200] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 247.366430][ T200] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.366451][ T200] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.366474][ T200] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.372204][ T200] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 247.372263][ T200] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.372285][ T200] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.372309][ T200] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.481191][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.481219][ T200] usb 3-1: Product: syz [ 247.481233][ T200] usb 3-1: Manufacturer: syz [ 247.481247][ T200] usb 3-1: SerialNumber: syz [ 247.560681][ T200] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 247.741368][ T200] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 247.822084][ T200] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 247.833093][ T8533] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 247.988938][ T200] usb 3-1: USB disconnect, device number 26 [ 248.038188][ T200] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 248.104020][ T200] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 248.148940][ T200] ti_usb_3410_5052 3-1:2.0: device disconnected [ 248.350215][ T5623] Bluetooth: Wrong link type (-71) [ 248.410746][ T8520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 248.791176][ T8546] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 248.804754][ C1] Dead loop on virtual device lo (net 52), fix it urgently! [ 248.850219][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.868'. [ 249.374453][ T200] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 249.532007][ T8569] device-mapper: clone metadata: Superblock check failed: magic 1623043, expected 2331148132 [ 249.532390][ T8569] device-mapper: block manager: superblock validator check failed for block 0 [ 249.532417][ T8569] device-mapper: clone metadata: Failed to read_lock superblock [ 249.544345][ T200] usb 3-1: Using ep0 maxpacket: 16 [ 249.545260][ T200] usb 3-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 249.547094][ T200] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 249.547119][ T200] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.547140][ T200] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.547159][ T200] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 249.547179][ T200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.547199][ T200] usb 3-1: config 0 has no interface number 0 [ 249.547243][ T200] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 249.547270][ T200] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.547307][ T200] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.547342][ T200] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.547370][ T200] usb 3-1: config 0 interface 125 has no altsetting 0 [ 249.547389][ T200] usb 3-1: config 0 interface 125 has no altsetting 2 [ 249.709785][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.709814][ T200] usb 3-1: Product: syz [ 249.709830][ T200] usb 3-1: Manufacturer: syz [ 249.709844][ T200] usb 3-1: SerialNumber: syz [ 249.740334][ T200] usb 3-1: config 0 descriptor?? [ 249.763832][ T200] usb 3-1: selecting invalid altsetting 2 [ 249.950191][ C0] usb 3-1: async_complete: urb error -71 [ 249.950272][ C0] usb 3-1: async_complete: urb error -71 [ 249.950332][ C0] usb 3-1: async_complete: urb error -71 [ 249.950392][ C0] usb 3-1: async_complete: urb error -71 [ 249.986164][ T200] get_1284_register: usb error -71 [ 250.006449][ T200] usb 3-1: USB disconnect, device number 27 [ 250.231938][ T8569] device-mapper: table: 248:0: clone: Failed to load metadata (-EILSEQ) [ 250.231966][ T8569] device-mapper: ioctl: error adding target to table [ 250.269739][ T8578] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 250.745279][ T8584] rxe_eth0 speed is unknown, defaulting to 1000 [ 251.025388][ T8576] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 251.577744][ T8603] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.892'. [ 252.087325][ T1007] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 252.234247][ T1007] usb 5-1: Using ep0 maxpacket: 16 [ 252.235063][ T1007] usb 5-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 252.236563][ T1007] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 252.236591][ T1007] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.236611][ T1007] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.236631][ T1007] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.236651][ T1007] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.236671][ T1007] usb 5-1: config 0 has no interface number 0 [ 252.236715][ T1007] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 252.236744][ T1007] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 252.236766][ T1007] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.236801][ T1007] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.236827][ T1007] usb 5-1: config 0 interface 125 has no altsetting 0 [ 252.236843][ T1007] usb 5-1: config 0 interface 125 has no altsetting 2 [ 252.241116][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.241142][ T1007] usb 5-1: Product: syz [ 252.241157][ T1007] usb 5-1: Manufacturer: syz [ 252.241171][ T1007] usb 5-1: SerialNumber: syz [ 252.314872][ T1007] usb 5-1: config 0 descriptor?? [ 252.345836][ T1007] usb 5-1: selecting invalid altsetting 2 [ 252.562478][ C1] usb 5-1: async_complete: urb error -71 [ 252.562588][ C1] usb 5-1: async_complete: urb error -71 [ 252.562679][ C1] usb 5-1: async_complete: urb error -71 [ 252.562768][ C1] usb 5-1: async_complete: urb error -71 [ 252.569298][ T1007] get_1284_register: usb error -71 [ 252.679264][ T1007] usb 5-1: USB disconnect, device number 30 [ 252.780506][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 252.970209][ T5749] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 252.987850][ T8631] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 253.157643][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'. [ 253.465236][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.483778][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.995101][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 255.578390][ T30] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 255.610912][ T8654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.734217][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 255.735211][ T30] usb 2-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 255.737585][ T30] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 255.737621][ T30] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 255.737640][ T30] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 255.737658][ T30] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 255.737676][ T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 255.737696][ T30] usb 2-1: config 0 has no interface number 0 [ 255.737735][ T30] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 255.737751][ T30] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 255.737823][ T30] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.737858][ T30] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.737885][ T30] usb 2-1: config 0 interface 125 has no altsetting 0 [ 255.737903][ T30] usb 2-1: config 0 interface 125 has no altsetting 2 [ 255.740096][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.740121][ T30] usb 2-1: Product: syz [ 255.740135][ T30] usb 2-1: Manufacturer: syz [ 255.740149][ T30] usb 2-1: SerialNumber: syz [ 255.746919][ T1341] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.747343][ T1321] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.747382][ T1321] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.753322][ T30] usb 2-1: config 0 descriptor?? [ 255.787967][ T30] usb 2-1: selecting invalid altsetting 2 [ 255.870711][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991587][ C1] usb 2-1: async_complete: urb error -71 [ 255.991654][ C1] usb 2-1: async_complete: urb error -71 [ 255.991703][ C1] usb 2-1: async_complete: urb error -71 [ 255.991751][ C1] usb 2-1: async_complete: urb error -71 [ 255.991802][ T30] get_1284_register: usb error -71 [ 256.047163][ T30] usb 2-1: USB disconnect, device number 23 [ 256.267918][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 256.440621][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 256.586609][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 257.717770][ T8719] jffs2: notice: (8719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 258.742056][ T8749] jffs2: notice: (8749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 258.824289][ T7423] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 258.877319][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 258.964530][ T7423] usb 6-1: Using ep0 maxpacket: 16 [ 258.964867][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 258.965696][ T7423] usb 6-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 258.966783][ T7423] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 258.966806][ T7423] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.966824][ T7423] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.966841][ T7423] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.966858][ T7423] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.966875][ T7423] usb 6-1: config 0 has no interface number 0 [ 258.966912][ T7423] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 258.966937][ T7423] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 258.966958][ T7423] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.966986][ T7423] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.967010][ T7423] usb 6-1: config 0 interface 125 has no altsetting 0 [ 258.967028][ T7423] usb 6-1: config 0 interface 125 has no altsetting 2 [ 258.970535][ T7423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.970560][ T7423] usb 6-1: Product: syz [ 258.970575][ T7423] usb 6-1: Manufacturer: syz [ 258.970589][ T7423] usb 6-1: SerialNumber: syz [ 259.155638][ T7423] usb 6-1: config 0 descriptor?? [ 259.178429][ T7423] usb 6-1: selecting invalid altsetting 2 [ 259.364859][ C0] usb 6-1: async_complete: urb error -71 [ 259.364949][ C0] usb 6-1: async_complete: urb error -71 [ 259.365024][ C0] usb 6-1: async_complete: urb error -71 [ 259.365100][ C0] usb 6-1: async_complete: urb error -71 [ 259.365167][ T7423] get_1284_register: usb error -71 [ 259.418440][ T7423] usb 6-1: USB disconnect, device number 19 [ 260.432508][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 260.503720][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 261.024290][ T30] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 261.174243][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 261.176055][ T30] usb 5-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 261.179585][ T30] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 261.179615][ T30] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.179636][ T30] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.179657][ T30] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.179677][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.179699][ T30] usb 5-1: config 0 has no interface number 0 [ 261.179743][ T30] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 261.179771][ T30] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 261.179801][ T30] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.179836][ T30] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.179864][ T30] usb 5-1: config 0 interface 125 has no altsetting 0 [ 261.179883][ T30] usb 5-1: config 0 interface 125 has no altsetting 2 [ 261.182687][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.182710][ T30] usb 5-1: Product: syz [ 261.182724][ T30] usb 5-1: Manufacturer: syz [ 261.182738][ T30] usb 5-1: SerialNumber: syz [ 261.199483][ T30] usb 5-1: config 0 descriptor?? [ 261.215003][ T30] usb 5-1: selecting invalid altsetting 2 [ 261.433670][ C1] usb 5-1: async_complete: urb error -71 [ 261.433737][ C1] usb 5-1: async_complete: urb error -71 [ 261.433786][ C1] usb 5-1: async_complete: urb error -71 [ 261.433833][ C1] usb 5-1: async_complete: urb error -71 [ 261.437114][ T30] get_1284_register: usb error -71 [ 261.535339][ T30] usb 5-1: USB disconnect, device number 31 [ 262.306871][ T8843] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.308658][ T8850] warning: `syz.5.978' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.193504][ T8860] lo: entered promiscuous mode [ 263.193995][ T8860] tunl0: entered promiscuous mode [ 263.213323][ T8860] gre0: entered promiscuous mode [ 263.566066][ T8860] gretap0: entered promiscuous mode [ 263.601843][ T8854] syz.5.979 (8854) used greatest stack depth: 17248 bytes left [ 264.437591][ T8860] erspan0: entered promiscuous mode [ 264.457030][ T8860] ip_vti0: entered promiscuous mode [ 264.474472][ T8860] ip6_vti0: entered promiscuous mode [ 264.507945][ T8860] sit0: entered promiscuous mode [ 264.588904][ T8860] ip6tnl0: entered promiscuous mode [ 264.651024][ T8860] ip6gre0: entered promiscuous mode [ 264.693434][ T8860] syz_tun: entered promiscuous mode [ 264.753559][ T8860] ip6gretap0: entered promiscuous mode [ 264.778494][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.779508][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.782140][ T8860] bridge0: entered promiscuous mode [ 264.836281][ T8860] vcan0: entered promiscuous mode [ 264.852375][ T8860] team0: entered promiscuous mode [ 264.852401][ T8860] team_slave_0: entered promiscuous mode [ 264.852630][ T8860] team_slave_1: entered promiscuous mode [ 264.890074][ T8860] dummy0: entered promiscuous mode [ 264.944217][ T5808] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 264.945803][ T8860] nlmon0: entered promiscuous mode [ 264.955229][ T8860] vxcan0: entered promiscuous mode [ 264.960531][ T8860] vxcan1: entered promiscuous mode [ 265.022907][ T8860] veth0: entered promiscuous mode [ 265.037897][ T8860] veth1: entered promiscuous mode [ 265.064876][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 265.085574][ T8860] wg0: entered promiscuous mode [ 265.094365][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 265.095273][ T5808] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.096763][ T5808] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 265.096788][ T5808] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 265.096873][ T5808] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.096914][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.174014][ T5808] usbtmc 6-1:16.0: bulk endpoints not found [ 265.181178][ T8860] wg1: entered promiscuous mode [ 265.187012][ T8860] wg2: entered promiscuous mode [ 265.203678][ T8860] veth0_to_bridge: entered promiscuous mode [ 265.214283][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 265.219017][ T30] usb 3-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 265.220516][ T30] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 265.220545][ T30] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.220564][ T30] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.220574][ T30] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.220584][ T30] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 265.220596][ T30] usb 3-1: config 0 has no interface number 0 [ 265.220625][ T30] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 265.220648][ T30] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.220660][ T30] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.220684][ T30] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.220699][ T30] usb 3-1: config 0 interface 125 has no altsetting 0 [ 265.220708][ T30] usb 3-1: config 0 interface 125 has no altsetting 2 [ 265.240919][ T8860] veth1_to_bridge: entered promiscuous mode [ 265.249011][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.249052][ T30] usb 3-1: Product: syz [ 265.249067][ T30] usb 3-1: Manufacturer: syz [ 265.249081][ T30] usb 3-1: SerialNumber: syz [ 265.265308][ T30] usb 3-1: config 0 descriptor?? [ 265.288604][ T30] usb 3-1: selecting invalid altsetting 2 [ 265.379065][ T8860] veth0_to_bond: entered promiscuous mode [ 265.403593][ T8860] bond_slave_0: entered promiscuous mode [ 265.424379][ T8860] veth1_to_bond: entered promiscuous mode [ 265.444652][ C1] Dead loop on virtual device lo (net 52), fix it urgently! [ 265.448415][ T8860] bond_slave_1: entered promiscuous mode [ 265.448822][ T8860] veth0_to_team: entered promiscuous mode [ 265.476179][ T8860] veth1_to_team: entered promiscuous mode [ 265.483301][ T8860] veth0_to_batadv: entered promiscuous mode [ 265.498186][ C1] usb 3-1: async_complete: urb error -71 [ 265.498290][ C1] usb 3-1: async_complete: urb error -71 [ 265.498378][ C1] usb 3-1: async_complete: urb error -71 [ 265.498470][ C1] usb 3-1: async_complete: urb error -71 [ 265.498572][ T30] get_1284_register: usb error -71 [ 265.499599][ T8860] batadv_slave_0: entered promiscuous mode [ 265.547566][ T8860] veth1_to_batadv: entered promiscuous mode [ 265.552240][ T8860] batadv_slave_1: entered promiscuous mode [ 265.568473][ T8860] xfrm0: entered promiscuous mode [ 265.572562][ T8860] veth0_to_hsr: entered promiscuous mode [ 265.591458][ T30] usb 3-1: USB disconnect, device number 28 [ 265.600401][ T8860] veth1_to_hsr: entered promiscuous mode [ 265.615823][ T8860] hsr0: entered promiscuous mode [ 265.619846][ T8860] veth1_virt_wifi: entered promiscuous mode [ 265.623425][ T8860] veth0_virt_wifi: entered promiscuous mode [ 265.648548][ T8860] virt_wifi0: entered promiscuous mode [ 265.660719][ T8860] vlan0: entered promiscuous mode [ 265.664049][ T8860] vlan1: entered promiscuous mode [ 265.704294][ T8860] macvlan0: entered promiscuous mode [ 265.744272][ T8860] macvlan1: entered promiscuous mode [ 265.747354][ T8860] ipvlan0: entered promiscuous mode [ 265.747494][ T8860] ipvlan1: entered promiscuous mode [ 265.824375][ T8860] macvtap0: entered promiscuous mode [ 265.827864][ T8860] macsec0: entered promiscuous mode [ 265.831937][ T8860] geneve0: entered promiscuous mode [ 265.851290][ T8860] geneve1: entered promiscuous mode [ 265.935369][ T8860] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 266.018278][ T8860] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 266.059257][ T8884] jffs2: notice: (8884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 266.112104][ T8884] FAULT_INJECTION: forcing a failure. [ 266.112104][ T8884] name failslab, interval 1, probability 5, space 0, times 9991 [ 266.112131][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.0.990 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 266.112145][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 266.112152][ T8884] Call Trace: [ 266.112158][ T8884] [ 266.112163][ T8884] dump_stack_lvl+0xe8/0x150 [ 266.112198][ T8884] should_fail_ex+0x447/0x5e0 [ 266.112217][ T8884] should_failslab+0xa8/0x100 [ 266.112233][ T8884] __kmalloc_noprof+0xf6/0x790 [ 266.112245][ T8884] ? load_xattr_datum+0x347/0xaf0 [ 266.112260][ T8884] ? load_xattr_datum+0x347/0xaf0 [ 266.112277][ T8884] load_xattr_datum+0x347/0xaf0 [ 266.112301][ T8884] ? __pfx_load_xattr_datum+0x10/0x10 [ 266.112314][ T8884] ? rwbase_write_lock+0x5ad/0x780 [ 266.112339][ T8884] check_xattr_ref_inode+0x11d/0x720 [ 266.112361][ T8884] do_jffs2_getxattr+0x97/0x4d0 [ 266.112375][ T8884] ? rcu_is_watching+0x16/0xb0 [ 266.112390][ T8884] ? __pfx_jffs2_security_getxattr+0x10/0x10 [ 266.112407][ T8884] __vfs_getxattr+0x412/0x440 [ 266.112428][ T8884] smk_fetch+0xb4/0x140 [ 266.112443][ T8884] smack_d_instantiate+0x5bb/0x810 [ 266.112463][ T8884] ? __pfx_smack_d_instantiate+0x10/0x10 [ 266.112486][ T8884] security_d_instantiate+0x106/0x1d0 [ 266.112500][ T8884] d_splice_alias_ops+0x72/0x440 [ 266.112511][ T8884] ? d_splice_alias+0x12/0x30 [ 266.112524][ T8884] lookup_one_qstr_excl+0x12d/0x360 [ 266.112545][ T8884] filename_create+0x20e/0x370 [ 266.112559][ T8884] ? __pfx_filename_create+0x10/0x10 [ 266.112576][ T8884] filename_mknodat+0x18c/0x690 [ 266.112591][ T8884] ? __pfx_filename_mknodat+0x10/0x10 [ 266.112605][ T8884] ? do_getname+0x151/0x250 [ 266.112620][ T8884] __se_sys_mknodat+0x3b/0x150 [ 266.112633][ T8884] do_syscall_64+0x166/0x520 [ 266.112645][ T8884] ? trace_irq_disable+0x3b/0x140 [ 266.112657][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.112668][ T8884] ? clear_bhb_loop+0x70/0xc0 [ 266.112682][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.112696][ T8884] RIP: 0033:0x7f3173d5fb19 [ 266.112708][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.112718][ T8884] RSP: 002b:00007f3171fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 266.112730][ T8884] RAX: ffffffffffffffda RBX: 00007f3173fe5fa0 RCX: 00007f3173d5fb19 [ 266.112738][ T8884] RDX: 0000000000006180 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 266.112747][ T8884] RBP: 00007f3173df7b70 R08: 0000000000000000 R09: 0000000000000000 [ 266.112754][ T8884] R10: 0000000000000900 R11: 0000000000000246 R12: 0000000000000000 [ 266.112761][ T8884] R13: 00007f3173fe6038 R14: 00007f3173fe5fa0 R15: 00007ffdde9875a8 [ 266.112779][ T8884] [ 266.121665][ T8860] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 266.681360][ T8860] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 267.794314][ T5808] usb 6-1: USB disconnect, device number 20 [ 268.185453][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 268.711907][ T8860] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 268.719734][ T8860] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 268.769344][ T8890] pim6reg: entered allmulticast mode [ 268.836953][ T8900] device-mapper: table: 248:7: crypt: Invalid number of feature args (-EINVAL) [ 268.836984][ T8900] device-mapper: ioctl: error adding target to table [ 269.031617][ T1321] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.031680][ T1321] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.031715][ T1321] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.031747][ T1321] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.474226][ T1007] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 270.634225][ T1007] usb 2-1: Using ep0 maxpacket: 16 [ 270.634909][ T1007] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 270.636084][ T1007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.636108][ T1007] usb 2-1: config 0 has no interfaces? [ 270.638367][ T1007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.638392][ T1007] usb 2-1: Product: syz [ 270.638407][ T1007] usb 2-1: Manufacturer: syz [ 270.638420][ T1007] usb 2-1: SerialNumber: syz [ 270.703416][ T1007] usb 2-1: config 0 descriptor?? [ 270.735525][ T7423] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 270.894770][ T7423] usb 3-1: Using ep0 maxpacket: 16 [ 270.895918][ T7423] usb 3-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 270.898386][ T7423] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 270.898414][ T7423] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.898435][ T7423] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.898455][ T7423] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.898474][ T7423] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.898495][ T7423] usb 3-1: config 0 has no interface number 0 [ 270.899546][ T7423] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 270.899565][ T7423] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.899577][ T7423] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.899596][ T7423] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.899611][ T7423] usb 3-1: config 0 interface 125 has no altsetting 0 [ 270.899621][ T7423] usb 3-1: config 0 interface 125 has no altsetting 2 [ 270.901799][ T7423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.901823][ T7423] usb 3-1: Product: syz [ 270.901837][ T7423] usb 3-1: Manufacturer: syz [ 270.901851][ T7423] usb 3-1: SerialNumber: syz [ 270.932261][ T7423] usb 3-1: config 0 descriptor?? [ 270.967168][ T7423] usb 3-1: selecting invalid altsetting 2 [ 271.004727][ T5891] usb 2-1: USB disconnect, device number 24 [ 271.134271][ T1007] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 271.195091][ T8929] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 271.260801][ C0] usb 3-1: async_complete: urb error -71 [ 271.260892][ C0] usb 3-1: async_complete: urb error -71 [ 271.260965][ C0] usb 3-1: async_complete: urb error -71 [ 271.261054][ C0] usb 3-1: async_complete: urb error -71 [ 271.267885][ T7423] get_1284_register: usb error -71 [ 271.294574][ T1007] usb 6-1: Using ep0 maxpacket: 8 [ 271.315888][ T1007] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.316932][ T1007] usb 6-1: config 0 has no interfaces? [ 271.316966][ T1007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.347632][ T1007] usb 6-1: config 0 descriptor?? [ 271.358410][ T7423] usb 3-1: USB disconnect, device number 29 [ 271.486858][ T8929] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.622833][ T1007] usb 6-1: USB disconnect, device number 21 [ 271.733594][ T8929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.733613][ T8929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.760141][ T8929] veth1_vlan: left promiscuous mode [ 271.761220][ T8929] veth0_vlan: left promiscuous mode [ 271.762601][ T8929] veth0_vlan: entered promiscuous mode [ 271.779063][ T8929] veth1_vlan: entered promiscuous mode [ 271.791444][ T8929] veth1_macvtap: left promiscuous mode [ 271.792522][ T8929] veth0_macvtap: left promiscuous mode [ 271.793447][ T8929] veth0_macvtap: entered promiscuous mode [ 271.795715][ T8929] veth1_macvtap: entered promiscuous mode [ 271.833180][ T8929] 8021q: adding VLAN 0 to HW filter on device eth0 [ 271.879749][ T8933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1007'. [ 271.882072][ T8929] 8021q: adding VLAN 0 to HW filter on device eth1 [ 271.893671][ T8929] 8021q: adding VLAN 0 to HW filter on device eth2 [ 271.897857][ T8929] 8021q: adding VLAN 0 to HW filter on device eth3 [ 271.966967][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.967190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.969751][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.969902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.282957][ T137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.283008][ T137] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.283044][ T137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.283078][ T137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.061407][ T8941] comedi comedi2: comedi_test: 320 microvolt, 2 microsecond waveform attached [ 273.602329][ T8954] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 273.617572][ T8954] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 274.295944][ T8967] jffs2: notice: (8967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 274.374238][ T5728] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 274.525795][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 274.526574][ T5728] usb 1-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 274.534688][ T5728] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 274.534719][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.534739][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.534758][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.534778][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 274.534799][ T5728] usb 1-1: config 0 has no interface number 0 [ 274.534844][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 274.534870][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.534892][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.534931][ T5728] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.534958][ T5728] usb 1-1: config 0 interface 125 has no altsetting 0 [ 274.534975][ T5728] usb 1-1: config 0 interface 125 has no altsetting 2 [ 274.666611][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.666641][ T5728] usb 1-1: Product: syz [ 274.666655][ T5728] usb 1-1: Manufacturer: syz [ 274.666670][ T5728] usb 1-1: SerialNumber: syz [ 274.690938][ T5728] usb 1-1: config 0 descriptor?? [ 274.730769][ T5728] usb 1-1: selecting invalid altsetting 2 [ 274.921188][ C0] usb 1-1: async_complete: urb error -71 [ 274.921290][ C0] usb 1-1: async_complete: urb error -71 [ 274.921372][ C0] usb 1-1: async_complete: urb error -71 [ 274.921449][ C0] usb 1-1: async_complete: urb error -71 [ 274.921519][ T5728] get_1284_register: usb error -71 [ 275.120968][ T5728] usb 1-1: USB disconnect, device number 32 [ 275.383670][ T8977] md/raid10:md1: active with 1 out of 3 devices [ 275.389833][ T8977] md1: detected capacity change from 0 to 3840 [ 276.207502][ T9000] ubi0: attaching mtd0 [ 276.292358][ T9000] ubi0: scanning is finished [ 276.292410][ T9000] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 277.150410][ T9000] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 279.527578][ T9002] syz.1.1032 (9002): drop_caches: 2 [ 280.603696][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.641401][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.106237][ T5728] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 281.235635][ T5728] usb 1-1: device descriptor read/64, error -71 [ 281.475086][ T5728] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 281.604273][ T5728] usb 1-1: device descriptor read/64, error -71 [ 281.723179][ T5728] usb usb1-port1: attempt power cycle [ 282.087684][ T5728] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 282.106485][ T5728] usb 1-1: device descriptor read/8, error -71 [ 282.344630][ T5728] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 282.372285][ T5728] usb 1-1: device descriptor read/8, error -71 [ 282.489084][ T5728] usb usb1-port1: unable to enumerate USB device [ 282.894207][ T137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.894256][ T137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.894290][ T137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.894323][ T137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.148180][ T9087] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.609900][ T9103] tmpfs: Unknown parameter 'grpquota_inode_har' [ 286.195189][ T5764] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 286.329710][ T5764] usb 1-1: device descriptor read/64, error -71 [ 286.487071][ T9119] siw: device registration error -23 [ 286.566170][ T5764] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 286.694229][ T5764] usb 1-1: device descriptor read/64, error -71 [ 286.695912][ T9123] FAULT_INJECTION: forcing a failure. [ 286.695912][ T9123] name fail_futex, interval 1, probability 0, space 0, times 0 [ 286.695944][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.4.1065 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.695969][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 286.695981][ T9123] Call Trace: [ 286.695989][ T9123] [ 286.695997][ T9123] dump_stack_lvl+0xe8/0x150 [ 286.696037][ T9123] should_fail_ex+0x447/0x5e0 [ 286.696071][ T9123] get_futex_key+0x1ab/0x1410 [ 286.696094][ T9123] ? kstrtouint+0x6e/0xe0 [ 286.696123][ T9123] ? __lock_acquire+0x747/0x2de0 [ 286.696154][ T9123] ? __pfx_get_futex_key+0x10/0x10 [ 286.696188][ T9123] futex_wake+0x119/0x600 [ 286.696234][ T9123] ? __pfx_futex_wake+0x10/0x10 [ 286.696265][ T9123] ? do_raw_spin_lock+0x12b/0x2f0 [ 286.696309][ T9123] do_futex+0x458/0x4e0 [ 286.696342][ T9123] ? __pfx_do_futex+0x10/0x10 [ 286.696368][ T9123] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.696408][ T9123] __se_sys_futex+0x3a8/0x450 [ 286.696440][ T9123] ? ksys_write+0x248/0x270 [ 286.696459][ T9123] ? __pfx___se_sys_futex+0x10/0x10 [ 286.696487][ T9123] ? __pfx_ksys_write+0x10/0x10 [ 286.696512][ T9123] ? __x64_sys_futex+0x21/0xf0 [ 286.696542][ T9123] do_syscall_64+0x166/0x520 [ 286.696565][ T9123] ? trace_irq_disable+0x3b/0x140 [ 286.696587][ T9123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.696608][ T9123] ? clear_bhb_loop+0x70/0xc0 [ 286.696634][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.696654][ T9123] RIP: 0033:0x7f18303afb19 [ 286.696673][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.696692][ T9123] RSP: 002b:00007f182e5fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.696715][ T9123] RAX: ffffffffffffffda RBX: 00007f1830635fa8 RCX: 00007f18303afb19 [ 286.696730][ T9123] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1830635fac [ 286.696745][ T9123] RBP: 00007f1830635fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 286.696759][ T9123] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 286.696773][ T9123] R13: 00007f1830636038 R14: 00007fffe00eec10 R15: 00007fffe00eecf8 [ 286.696806][ T9123] [ 286.824539][ T5764] usb usb1-port1: attempt power cycle [ 287.073976][ T9128] gadgetfs: bound to dummy_udc driver [ 287.181722][ T9129] ================================================================== [ 287.181740][ T9129] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0xc4/0x1c0 ** replaying previous printk message ** [ 287.181740][ T9129] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0xc4/0x1c0 [ 287.181789][ T9129] Read of size 8 at addr ffff888061dbfc50 by task syz.4.1066/9129 [ 287.181807][ T9129] [ 287.181820][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.4.1066 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.181845][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.181859][ T9129] Call Trace: [ 287.181867][ T9129] [ 287.181876][ T9129] dump_stack_lvl+0xe8/0x150 [ 287.181920][ T9129] print_address_description+0x55/0x1e0 [ 287.181954][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 287.181985][ T9129] print_report+0x58/0x70 [ 287.182016][ T9129] kasan_report+0x117/0x150 [ 287.182038][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 287.182067][ T9129] ? ep_open+0x4e/0x270 [ 287.182099][ T9129] mutex_lock_interruptible_nested+0xc4/0x1c0 [ 287.182131][ T9129] ep_open+0x4e/0x270 [ 287.182159][ T9129] ? do_dentry_open+0x832/0x1410 [ 287.182185][ T9129] ? __pfx_ep_open+0x10/0x10 [ 287.182213][ T9129] do_dentry_open+0x841/0x1410 [ 287.182242][ T9129] vfs_open_consume+0x4a/0x360 [ 287.182266][ T9129] ? path_openat+0x16e6/0x2100 [ 287.182288][ T9129] path_openat+0x1701/0x2100 [ 287.182316][ T9129] do_file_open+0x23e/0x4a0 [ 287.182338][ T9129] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 287.182367][ T9129] ? __pfx_do_file_open+0x10/0x10 [ 287.182403][ T9129] ? alloc_fd+0x6b2/0x760 [ 287.182437][ T9129] do_sys_openat2+0x115/0x200 [ 287.182465][ T9129] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.182496][ T9129] __x64_sys_openat+0x138/0x170 [ 287.182523][ T9129] do_syscall_64+0x166/0x520 [ 287.182548][ T9129] ? trace_irq_disable+0x3b/0x140 [ 287.182569][ T9129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.182590][ T9129] ? clear_bhb_loop+0x70/0xc0 [ 287.182614][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.182634][ T9129] RIP: 0033:0x7f18303afb19 [ 287.182652][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.182669][ T9129] RSP: 002b:00007f182e5dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.182692][ T9129] RAX: ffffffffffffffda RBX: 00007f1830636090 RCX: 00007f18303afb19 [ 287.182706][ T9129] RDX: 0000000000000802 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 287.182721][ T9129] RBP: 00007f1830447b70 R08: 0000000000000000 R09: 0000000000000000 [ 287.182734][ T9129] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000000 [ 287.182746][ T9129] R13: 00007f1830636128 R14: 00007f1830636090 R15: 00007fffe00eecf8 [ 287.182768][ T9129] [ 287.182790][ T9129] [ 287.182795][ T9129] Allocated by task 9128: [ 287.182804][ T9129] kasan_save_track+0x3e/0x80 [ 287.182824][ T9129] __kasan_kmalloc+0x93/0xb0 [ 287.182842][ T9129] __kmalloc_cache_noprof+0x3d0/0x670 [ 287.182859][ T9129] gadgetfs_bind+0x2f5/0xb20 [ 287.182886][ T9129] gadget_bind_driver+0x2ca/0x9e0 [ 287.182913][ T9129] really_probe+0x254/0xae0 [ 287.182934][ T9129] __driver_probe_device+0x1e8/0x360 [ 287.182953][ T9129] driver_probe_device+0x4f/0x240 [ 287.182973][ T9129] __driver_attach+0x34e/0x630 [ 287.182992][ T9129] bus_for_each_dev+0x23e/0x2c0 [ 287.183016][ T9129] bus_add_driver+0x392/0x6e0 [ 287.183040][ T9129] driver_register+0x23a/0x320 [ 287.183061][ T9129] usb_gadget_register_driver_owner+0xf9/0x270 [ 287.183086][ T9129] dev_config+0xe4e/0x12c0 [ 287.183108][ T9129] vfs_write+0x29f/0xbb0 [ 287.183130][ T9129] ksys_write+0x156/0x270 [ 287.183144][ T9129] do_syscall_64+0x166/0x520 [ 287.183163][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.183180][ T9129] [ 287.183184][ T9129] Freed by task 9128: [ 287.183193][ T9129] kasan_save_track+0x3e/0x80 [ 287.183208][ T9129] kasan_save_free_info+0x40/0x50 [ 287.183234][ T9129] __kasan_slab_free+0x5c/0x80 [ 287.183253][ T9129] kfree+0x1c5/0x6d0 [ 287.183277][ T9129] destroy_ep_files+0x2a3/0x330 [ 287.183303][ T9129] gadgetfs_unbind+0x112/0x2c0 [ 287.183329][ T9129] gadget_unbind_driver+0x1cb/0x410 [ 287.183353][ T9129] device_release_driver_internal+0x42b/0x7d0 [ 287.183374][ T9129] driver_detach+0x1f3/0x2d0 [ 287.183393][ T9129] bus_remove_driver+0x229/0x320 [ 287.183417][ T9129] usb_gadget_unregister_driver+0x4e/0x70 [ 287.183437][ T9129] dev_release+0x86/0x210 [ 287.183462][ T9129] __fput+0x41a/0xa70 [ 287.183484][ T9129] task_work_run+0x1d9/0x260 [ 287.183504][ T9129] exit_to_user_mode_loop+0x204/0x770 [ 287.183521][ T9129] do_syscall_64+0x328/0x520 [ 287.183539][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.183572][ T9129] [ 287.183577][ T9129] The buggy address belongs to the object at ffff888061dbfc00 [ 287.183577][ T9129] which belongs to the cache kmalloc-512 of size 512 [ 287.183595][ T9129] The buggy address is located 80 bytes inside of [ 287.183595][ T9129] freed 512-byte region [ffff888061dbfc00, ffff888061dbfe00) [ 287.183615][ T9129] [ 287.183620][ T9129] The buggy address belongs to the physical page: [ 287.183649][ T9129] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61dbc [ 287.183672][ T9129] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.183690][ T9129] flags: 0x80000000000040(head|node=0|zone=1) [ 287.183710][ T9129] page_type: f5(slab) [ 287.183728][ T9129] raw: 0080000000000040 ffff88813ff13c80 dead000000000100 dead000000000122 [ 287.183746][ T9129] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.183764][ T9129] head: 0080000000000040 ffff88813ff13c80 dead000000000100 dead000000000122 [ 287.183790][ T9129] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.183808][ T9129] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 287.183824][ T9129] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 287.183834][ T9129] page dumped because: kasan: bad access detected [ 287.183848][ T9129] page_owner tracks the page as allocated [ 287.183856][ T9129] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5614, tgid 5614 (syz-executor), ts 280038323598 [ 287.183889][ T9129] post_alloc_hook+0x1f9/0x250 [ 287.183927][ T9129] get_page_from_freelist+0x258b/0x2600 [ 287.183947][ T9129] __alloc_frozen_pages_noprof+0x227/0x440 [ 287.183968][ T9129] allocate_slab+0x7d/0x5e0 [ 287.183992][ T9129] refill_objects+0x2d8/0x350 [ 287.184017][ T9129] __pcs_replace_empty_main+0x339/0x690 [ 287.184041][ T9129] __kmalloc_cache_noprof+0x46a/0x670 [ 287.184058][ T9129] kernfs_fop_open+0x38f/0xd40 [ 287.184081][ T9129] do_dentry_open+0x841/0x1410 [ 287.184100][ T9129] vfs_open_consume+0x4a/0x360 [ 287.184120][ T9129] path_openat+0x1701/0x2100 [ 287.184136][ T9129] do_file_open+0x23e/0x4a0 [ 287.184150][ T9129] do_sys_openat2+0x115/0x200 [ 287.184171][ T9129] __x64_sys_openat+0x138/0x170 [ 287.184191][ T9129] do_syscall_64+0x166/0x520 [ 287.184210][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.184227][ T9129] page last free pid 5614 tgid 5614 ts 279957916446 stack trace: [ 287.184241][ T9129] __free_frozen_pages+0xf8a/0x1060 [ 287.184268][ T9129] __slab_free+0x26e/0x2c0 [ 287.184283][ T9129] qlist_free_all+0x99/0x100 [ 287.184299][ T9129] kasan_quarantine_reduce+0x148/0x160 [ 287.184315][ T9129] __kasan_slab_alloc+0x22/0x80 [ 287.184333][ T9129] kmem_cache_alloc_noprof+0x35b/0x680 [ 287.184358][ T9129] do_getname+0x2e/0x250 [ 287.184379][ T9129] do_sys_openat2+0xce/0x200 [ 287.184400][ T9129] __x64_sys_openat+0x138/0x170 [ 287.184422][ T9129] do_syscall_64+0x166/0x520 [ 287.184442][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.184459][ T9129] [ 287.184463][ T9129] Memory state around the buggy address: [ 287.184473][ T9129] ffff888061dbfb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.184485][ T9129] ffff888061dbfb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.184497][ T9129] >ffff888061dbfc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.184514][ T9129] ^ [ 287.184526][ T9129] ffff888061dbfc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.184538][ T9129] ffff888061dbfd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.184548][ T9129] ================================================================== [ 287.201761][ T9129] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.006058][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.4.1066 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.015879][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 288.025951][ T9129] Call Trace: [ 288.029242][ T9129] [ 288.032181][ T9129] vpanic+0x26f/0x710 [ 288.036186][ T9129] panic+0xc5/0xd0 [ 288.039933][ T9129] ? __pfx_panic+0x10/0x10 [ 288.044376][ T9129] ? preempt_schedule_common+0x7f/0xd0 [ 288.049851][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 288.056121][ T9129] check_panic_on_warn+0x89/0xb0 [ 288.061080][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 288.067520][ T9129] end_report+0x73/0x170 [ 288.071786][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 288.078064][ T9129] kasan_report+0x128/0x150 [ 288.082593][ T9129] ? mutex_lock_interruptible_nested+0xc4/0x1c0 [ 288.088858][ T9129] ? ep_open+0x4e/0x270 [ 288.093041][ T9129] mutex_lock_interruptible_nested+0xc4/0x1c0 [ 288.099188][ T9129] ep_open+0x4e/0x270 [ 288.103230][ T9129] ? do_dentry_open+0x832/0x1410 [ 288.108186][ T9129] ? __pfx_ep_open+0x10/0x10 [ 288.112799][ T9129] do_dentry_open+0x841/0x1410 [ 288.117580][ T9129] vfs_open_consume+0x4a/0x360 [ 288.122350][ T9129] ? path_openat+0x16e6/0x2100 [ 288.127120][ T9129] path_openat+0x1701/0x2100 [ 288.131729][ T9129] do_file_open+0x23e/0x4a0 [ 288.136231][ T9129] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.142050][ T9129] ? __pfx_do_file_open+0x10/0x10 [ 288.147089][ T9129] ? alloc_fd+0x6b2/0x760 [ 288.151432][ T9129] do_sys_openat2+0x115/0x200 [ 288.156131][ T9129] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.161348][ T9129] __x64_sys_openat+0x138/0x170 [ 288.166394][ T9129] do_syscall_64+0x166/0x520 [ 288.170997][ T9129] ? trace_irq_disable+0x3b/0x140 [ 288.176062][ T9129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.182229][ T9129] ? clear_bhb_loop+0x70/0xc0 [ 288.186926][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.192832][ T9129] RIP: 0033:0x7f18303afb19 [ 288.197268][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.216974][ T9129] RSP: 002b:00007f182e5dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.225408][ T9129] RAX: ffffffffffffffda RBX: 00007f1830636090 RCX: 00007f18303afb19 [ 288.233405][ T9129] RDX: 0000000000000802 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 288.241380][ T9129] RBP: 00007f1830447b70 R08: 0000000000000000 R09: 0000000000000000 [ 288.249360][ T9129] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000000 [ 288.257343][ T9129] R13: 00007f1830636128 R14: 00007f1830636090 R15: 00007fffe00eecf8 [ 288.265334][ T9129] [ 288.268702][ T9129] Kernel Offset: disabled [ 288.273037][ T9129] Rebooting in 86400 seconds..