last executing test programs: 5m51.496415387s ago: executing program 32 (id=592): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x1b) 5m26.938982072s ago: executing program 33 (id=754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) getresgid(&(0x7f00000004c0), 0x0, 0x0) setfsgid(0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4801) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') close_range(r0, r1, 0x0) pread64(r2, &(0x7f0000000300)=""/17, 0x11, 0x800000000000000) 5m7.031782792s ago: executing program 6 (id=844): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x1, 0x4b9, &(0x7f0000001040)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001580)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 5m6.638860512s ago: executing program 6 (id=845): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000008c0)={0x8000000000000047, 0x201, 0x1, 0xb47}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000d0}, 0x44004) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="00022cbd700001000100140000002000078008000100610f000008000100f8fffff70c000300ffffff7f00000000340001801c000280080001000b000000080004000180000008000400005241e714000280080002000900000008000300000000001c0003800800030008000000eb6d7dcd3f7e0c33a981080002005f397b4b9f87e88be46347ac5f481e0153431be1345b9c6678502cda08f62d05cb96547b6ade7ae96dc922a0aba22b57cf8d08e8bc113efd2d8ae021f8f6805b7dbf23dbeed22c9f38af"], 0x84}, 0x1, 0x0, 0x0, 0x48810}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m6.193224602s ago: executing program 6 (id=848): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) syz_emit_ethernet(0x86, 0x0, 0x0) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000680)="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", 0x559, 0xffffffffffffffff) 5m4.863789325s ago: executing program 6 (id=851): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000380)="$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") creat(&(0x7f0000000840)='./bus\x00', 0x182) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000980)="d422e30670", 0x5) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_create_resource$binfmt(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f80)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) 5m4.194442422s ago: executing program 6 (id=861): r0 = io_uring_setup(0x3650, &(0x7f0000000080)={0x0, 0x65c9, 0x80, 0x3, 0x80}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x2009, 0xfffffffe}, 0x8) bind$bt_sco(r1, &(0x7f0000000240), 0x8) listen(r1, 0x0) shutdown(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m2.924322193s ago: executing program 6 (id=874): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000400)) 5m2.843005335s ago: executing program 34 (id=874): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000400)) 4m58.18831926s ago: executing program 1 (id=894): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000001c0)={0x46, 0x20000005, 0x8}) 4m58.113656402s ago: executing program 1 (id=897): rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0xb, 0x7ffc0001}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 4m57.964285845s ago: executing program 1 (id=900): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peekuser(0x3, r0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000380)='6', 0x1) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) 4m56.731530015s ago: executing program 1 (id=902): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000380)="$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") creat(&(0x7f0000000840)='./bus\x00', 0x182) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000980)="d422e30670", 0x5) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_create_resource$binfmt(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f80)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) 4m53.652957341s ago: executing program 1 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) capset(&(0x7f0000000e40)={0x20080522}, &(0x7f0000000e80)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r4 = fsopen(&(0x7f0000000ec0)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000f00)='.\x00', 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000f80)={0x0, 0x0, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) syz_open_pts(0xffffffffffffffff, 0x41) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r6, 0x0, 0xb, 0x0, &(0x7f0000000080)) 4m52.322538394s ago: executing program 1 (id=922): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 4m52.132715559s ago: executing program 35 (id=922): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 2m34.410004629s ago: executing program 7 (id=1462): openat$dir(0xffffffffffffff9c, 0x0, 0x4001, 0x30) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x801, 0x0, 0x0, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='3', 0x1}], 0x1, 0x800, 0x0) listen(r0, 0x0) 2m33.200246859s ago: executing program 7 (id=1467): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x5, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@noquota}, {@nodiscard}, {@resuid}, {@abort}]}, 0x1, 0x625, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvncnvvPeShsd7r2/xXkC0BW3SpK0UEWwRXJVSfywEN45NWmqnP2gimlppAnUjiBsXgisX1oX/gxYEV/4DLty4kkoR6UYpOnInd8ZpMjeZxMxMm/l8YDr33HNzz7nJfHvOnDnnTgA9azL9pxCxNyIuJxETDXl9kWVOrh539+drp9NHEpXKiz8lce16stx4riR7Ho2INOO3sUi+joiJ4vpyF5auni+Vy/NXsvT04oXL0wtLVw+cu1A6O392/uLsk7NHjxw+cnTmYMNPnXluq9e3p2H7xI3X3xx77+Qrn358L5n57LuTSRyrVzq9rq2eezOTMRmVTOP+9Pd6dKcL65Ji/XXyp2TtjrWebWOF2JLa368/Iv4dY1Fs+GuOxbvPd7VyQFtVkqi3UUCvScQ/9KhaP6D23r6198EDbe6VAJ1w53jEY/X474+I1fg/NpuNDcZQdWxg5G5y3zhPEhEHd6D8tIxvvjp5I31Em8bhgOaWVwazIfC17X9Sjc3xGKqmRu4W7ov/QjaMO56NH76wcTFjeRmTa9JZ+YPbvR6gdcsrEfGfZv3/zeP/1ew53f/aNsvPiX8AAAAAAABgG24dj4gnmn3+V6jP/xloMv9nNCKO7UD5m3/+V7i9A8UATdw5HvF00/m/hdoh48Us9ffqfID+5My58vzBiPhHROyP/sE0PdN40s8bfjoiDrw/8VFe+Y3z/9JHWn5tLmBWj9t9a2YDzZUWSztw6dDz7qxE/Lcvf/5P2v4nTdr/NL4vt1jGxKM3T+XlbR7/QLtUPonY17T9T+rHJBvfn2O62h+YrvUK1vvf2x98kVe++IfuSdv/kY3jfzBpvF/PwtbOPxARh5b6Knn52+3/DyQvFaNhJeJbpcXFKzMRA8mJ9ftnt1ZneJgMtX7oOxFRjYdavKTxv/+Rjcf/6v3/hjgczu7x1Yp//T76fV6e9h+6J43/uY3b//H72/+tb8zeHP8yr/xTLbX/h6tt+v5sj/E/2FirAdrtegIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw6gQEX+LpDBV3y4UpqYiRiPinzFSKF9aWHz8zKU3Ls6ledXv/y/Uvul3bDWd1L7/f7whPbsmfSgi9kTEh8Xhanrq9KXyXLcvHgAAAAAAAAAAAAAAAAAAAB4Qo6tP69b/p34odrVqQCf0Zc/iHXpPX7crAHSN+IfeJf6hd+XH/y/3KlUdrQ7QQa22/5Xrba4I0HHb7P/7uAB2Ae//oVf1t3bYULvrAXSD9h8AAAAAAHaVPf+/9W0SEctPDVcfqYEsr/7B4HC3age0UyEvY7Cz9QA6zxxe6F2m/kDvanHyL7CLJfWtX5su9s+f/Z+0p0IAAAAAAAAAAAAAwDr79raw/h/YlXLX/wO73gbr/5st7HG7ANhFrP+H3uU2X0Cts5/3Tf/W/wMAAAAAAAAAAADAA2Do6vlSuTx/ZWGp5Y3rWzn4r2/8GHlZz9Q2VjpQjUpxZ86zXOrcr+4h3+iPiDVZlbHVl+35Uvnl6Gx9ahHTibIGOlhWzkaX/j8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+SMAAP//fSQouA==") 2m29.638500376s ago: executing program 7 (id=1481): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000740), 0x1, 0x4e6, &(0x7f0000000240)="$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") 2m29.194920687s ago: executing program 7 (id=1484): syz_mount_image$udf(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', 0x804000, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x2, 0xc2d, &(0x7f0000000f00)="$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") mount(&(0x7f0000001b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000001b80)='./file1\x00', 0x0, 0x41002, 0x0) r0 = open(&(0x7f0000001bc0)='./file1\x00', 0x14f840, 0xa2) read$msr(r0, &(0x7f0000001c00)=""/102400, 0x19000) 2m28.774382578s ago: executing program 7 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019440)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet(0x2, 0x5, 0xfffffffd) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000002010100000000000000000a0000000400018004000380300002802c0001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2m27.324120553s ago: executing program 7 (id=1495): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x400, &(0x7f0000000280), 0x2, 0x79a, &(0x7f0000002e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000003600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000003680)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000036c0)=0x7) syz_open_dev$usbfs(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003780)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000003840), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000003880)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000038c0)='veth1\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) connect$inet(r3, &(0x7f0000003940)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000003980)=[{{&(0x7f00000039c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x0, @mcast2, 0x724}}, 0x0, 0x0, 0x7, 0x0, "4b530945dd0de2cb7d737b6dfd52e2e14aaf1fa24199e75174704f429eb26530aa47d121b6bd42ad6dff9ca8e0da37f1b4b007dc53d5353d80d7a5fd609bb74f80af05dff3cdf76146bfff0259481739"}, 0xd8) 2m27.202572776s ago: executing program 36 (id=1495): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x400, &(0x7f0000000280), 0x2, 0x79a, &(0x7f0000002e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000003600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000003680)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000036c0)=0x7) syz_open_dev$usbfs(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003780)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000003840), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000003880)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000038c0)='veth1\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) connect$inet(r3, &(0x7f0000003940)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000003980)=[{{&(0x7f00000039c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x0, @mcast2, 0x724}}, 0x0, 0x0, 0x7, 0x0, "4b530945dd0de2cb7d737b6dfd52e2e14aaf1fa24199e75174704f429eb26530aa47d121b6bd42ad6dff9ca8e0da37f1b4b007dc53d5353d80d7a5fd609bb74f80af05dff3cdf76146bfff0259481739"}, 0xd8) 2m6.516963036s ago: executing program 4 (id=1561): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000004c0)={r5, r5, 0x6, 0xe, &(0x7f0000000580)="b0fdd7cbd7c176d47932beefea71", 0x9, 0x74, 0x10cf, 0x5500, 0x43, 0x0, 0x8, 'syz0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000008000000000000000000711045000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r8 = fanotify_init(0x200, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="409cc24ccb3e283000", @ANYRES16=r9, @ANYRES32, @ANYBLOB="0400f080"], 0x2c}, 0x1, 0x0, 0x0, 0x40040850}, 0x4000000) fanotify_mark(r8, 0x441, 0x800003a, r7, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 2m4.697957841s ago: executing program 4 (id=1562): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x8005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x318, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='loginuid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x19, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000f40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000040)=0x2, 0x4) pwritev(r2, &(0x7f0000000a40)=[{&(0x7f0000000a80)='0', 0x1}, {&(0x7f0000000b40)="45b6", 0x2}], 0x2, 0x0, 0x0) 2m2.603173072s ago: executing program 4 (id=1576): syz_clone3(&(0x7f0000000500)={0x122125000, &(0x7f0000000580), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m2.373917168s ago: executing program 4 (id=1582): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x5, 0x459, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000f80)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) 2m2.032489816s ago: executing program 4 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="6d1332b37c6d", 0x6) 2m1.04969132s ago: executing program 4 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="a146998aded9"}]}}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x109002, 0x0) write(r1, &(0x7f0000000740)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000645000/0x3000)=nil, 0x3000) 2m0.879980584s ago: executing program 37 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="a146998aded9"}]}}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x109002, 0x0) write(r1, &(0x7f0000000740)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000645000/0x3000)=nil, 0x3000) 44.151761033s ago: executing program 0 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000067c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000006800)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006880)={&(0x7f00000068c0)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 44.084247705s ago: executing program 0 (id=2003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4d, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001380)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) unshare(0x20040400) r4 = semget$private(0x0, 0x7, 0x195) semtimedop(r4, &(0x7f000001a380)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r4, &(0x7f000001a3c0)=[{0x4, 0x10, 0x1800}], 0x5) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) 42.797677377s ago: executing program 0 (id=2006): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000340)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0x3, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff, 0xffffffff, 0x2a5a, 0xffffffff, 0xfffffffe, 0xffffffff, 0x3, 0xffdfffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x5, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224"], 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000600)=0x6) 42.200207801s ago: executing program 0 (id=2011): openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40040, 0xa0) 41.945991877s ago: executing program 0 (id=2016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4d, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000001380)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) unshare(0x20040400) r5 = semget$private(0x0, 0x7, 0x195) semtimedop(r5, &(0x7f000001a380)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r5, &(0x7f000001a3c0)=[{0x4, 0x10, 0x1800}], 0x5) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x30, r2, 0x1, 0x200, 0x25dfdc01, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}]}, 0x30}}, 0x0) 38.325756747s ago: executing program 0 (id=2026): syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x207e) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_delete(r1) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000025c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002600)={0x0, 0x0, 0xfd8b, 0x5, r0}) syz_usb_connect(0x0, 0x36, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000002980)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000002a00)="33000000080006010100fff40200", 0xe) r4 = syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x804818, &(0x7f0000002ac0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r2, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="866ff9fe733e642811fc5c14f3db6649243af1096294cb829b55796c04537f706e607eb898358700a8e41d56c47d54964d75181aa57762c62788923f4929520eba67", @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c1722f4866c3b851cb7d97bffea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426ba9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a600858512b16d9cce2410663a060a7694b4a343448c749092b67567edbe", @ANYRESDEC=r2, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec8ecab677ebe3c11acdffc890d218a41f668954cb9f57fa7f41864980255fecb29d43e8b084cdf3dcf5584943ee09efe4b782455431e5d62094f53df24c0c9b4ce5a92df2df13b14c8dfe01a6672cef5bf9f7a85b28a2daf9a356628ceb1694aaf1f4d93d4f9899e9ac3e0a84f8c05d6e0950ccb425bb047f35444f226c142ab2dfff7daa29429d647ae932e8d707bbebf408fb2b90492606da41cbed08c5b70377e87b2253c9e210c13d9c13", @ANYRESOCT=r2], 0x2, 0x593, &(0x7f0000002dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000003380)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f00000033c0)=ANY=[@ANYBLOB="0c0000000100000020006856e0a64e6b864000"], 0x201) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000002640)={{}, {0x77359400}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002700)='wg1\x00', 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r4, 0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002680)={0x1, &(0x7f00000026c0)=[{0x2, 0x0, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x3, 0x21, 0x0, &(0x7f0000002940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) 38.325529417s ago: executing program 38 (id=2026): syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x207e) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_delete(r1) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000025c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002600)={0x0, 0x0, 0xfd8b, 0x5, r0}) syz_usb_connect(0x0, 0x36, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000002980)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000002a00)="33000000080006010100fff40200", 0xe) r4 = syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x804818, &(0x7f0000002ac0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r2, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="866ff9fe733e642811fc5c14f3db6649243af1096294cb829b55796c04537f706e607eb898358700a8e41d56c47d54964d75181aa57762c62788923f4929520eba67", @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c1722f4866c3b851cb7d97bffea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426ba9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a600858512b16d9cce2410663a060a7694b4a343448c749092b67567edbe", @ANYRESDEC=r2, @ANYBLOB="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", @ANYRESOCT=r2], 0x2, 0x593, &(0x7f0000002dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000003380)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f00000033c0)=ANY=[@ANYBLOB="0c0000000100000020006856e0a64e6b864000"], 0x201) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000002640)={{}, {0x77359400}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002700)='wg1\x00', 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r4, 0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002680)={0x1, &(0x7f00000026c0)=[{0x2, 0x0, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x3, 0x21, 0x0, &(0x7f0000002940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) 3.871296585s ago: executing program 9 (id=2411): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r0], 0x20}}, 0x0) 3.490311834s ago: executing program 9 (id=2412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x408c0) 3.469578345s ago: executing program 9 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 3.376326507s ago: executing program 9 (id=2416): mount$fuse(0x0, 0x0, 0x0, 0x412, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000010d1183c5000000000000109022400010000003c09040000020302010009210500fc0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000083c0)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.884329854s ago: executing program 8 (id=2443): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000180)={0x69c, 0x0, 0x0, 0x0}) 1.784360136s ago: executing program 8 (id=2444): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 1.781391896s ago: executing program 8 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) socket$inet(0x2, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="0135014010ff"}) 1.747980097s ago: executing program 3 (id=2446): socket(0x1e, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) timer_create(0x0, 0x0, &(0x7f0000001180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000011c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005640)='/sys/kernel/rcu_expedited', 0x2002, 0x87) sendmsg$nl_xfrm(r2, &(0x7f0000005300)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000005380)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {0x3}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd2c}}]}, 0x154}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000001200)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000001240)='./mnt\x00', &(0x7f0000001280)='tracefs\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) 1.369270816s ago: executing program 8 (id=2450): clock_gettime(0x3, &(0x7f0000000040)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) 1.23631233s ago: executing program 8 (id=2453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048010000180090001006c6173740000c9002c0001800a0001006d617463680000001c000280060003001d8b000008000240000000000800010074746c000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x44840}, 0x40400c4) 1.182149701s ago: executing program 3 (id=2456): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 1.112182223s ago: executing program 8 (id=2457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap$IORING_OFF_SQES(0x0, 0x11000, 0x4, 0x4199831, 0xffffffffffffffff, 0x10000000) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/514], 0x610) 1.074308474s ago: executing program 5 (id=2459): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 912.392028ms ago: executing program 3 (id=2461): shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 912.304168ms ago: executing program 5 (id=2462): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf2508000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c001a8008000a"], 0x2c}], 0x1}, 0x0) 912.167168ms ago: executing program 3 (id=2463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 837.292259ms ago: executing program 3 (id=2465): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000008c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000480)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x4481, 0x0, 0x2}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000540)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000580)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000005c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 776.172121ms ago: executing program 5 (id=2467): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/file1\x00', &(0x7f0000000480)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x2, 0xfff8, 0x33e0}, 0x2, 0x4}}, 0x0, 0x0) 659.293784ms ago: executing program 5 (id=2468): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="3200000007008a000000000000", 0xd) 589.780985ms ago: executing program 5 (id=2469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40001) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 504.361787ms ago: executing program 5 (id=2470): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000000880)={0x180801400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000900)={0x100000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 341.080471ms ago: executing program 2 (id=2472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000e40)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000e80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000ec0)={@val={0x1c, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x300, 0x0, 0x1c}, {"9dd9caa39052213c7f"}}}}}, 0x3f) 180.358366ms ago: executing program 3 (id=2473): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) 180.139386ms ago: executing program 2 (id=2474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3a07) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000400)={0x27800000000, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000440)={0x277ffffffff, 0x0, 0x2, r2}) 160.301076ms ago: executing program 9 (id=2475): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r0, 0x9, 0x1, 0x0, r0, 0x2) r1 = syz_create_resource$futex(&(0x7f0000000140)) futex(r0, 0x5, 0x0, 0x0, r1, 0x1) 113.744917ms ago: executing program 2 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x20}}, 0x0) 44.318219ms ago: executing program 2 (id=2477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000a40)={0xa, 0x5e22, 0x0, @empty, 0xfffffffd}, 0x1c) 44.216969ms ago: executing program 9 (id=2478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x40040) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000480)={0x2, 0x100, 0x1, 0x2ebe, 0x3, 0x7, 0x15df, 0x0, 0xd, 0x4, 0xb656, 0xfffff58f, 0xfffffff7, 0x8}) 39.514719ms ago: executing program 2 (id=2479): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="c21cfb", 0x3}, {&(0x7f00000003c0)="3862883838", 0x5}], 0x3) 0s ago: executing program 2 (id=2480): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='test,0x8000000000000000,0x1000', 0x1e) kernel console output (not intermixed with test programs): mmy_hcd [ 475.278359][ T6030] usb 9-1: Using ep0 maxpacket: 16 [ 475.408363][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 475.518267][ T5223] usb 6-1: Using ep0 maxpacket: 32 [ 476.049872][ T6030] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 476.058075][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.070771][ T6030] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.108399][ T6030] usb 9-1: config 1 has no interface number 0 [ 476.118498][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.138763][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.155453][ T6030] usb 9-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.168801][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.198301][ T5223] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 476.207487][ T4316] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 476.223266][ T6030] usb 9-1: config 1 interface 105 has no altsetting 0 [ 476.231433][ T5223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.246920][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.266168][ T4316] usb 4-1: config 0 descriptor?? [ 476.285784][ T5223] usb 6-1: config 0 descriptor?? [ 476.356187][ T5223] hub 6-1:0.0: USB hub found [ 476.362696][ T4316] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 476.444237][ T6030] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 476.463974][ T6030] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 476.494260][ T6030] usb 9-1: Product: syz [ 476.512883][ T6030] usb 9-1: Manufacturer: syz [ 476.555339][ T6030] usb 9-1: SerialNumber: syz [ 476.579354][ T5223] hub 6-1:0.0: 1 port detected [ 476.638314][ T6031] gud 10-1:1.0: Failed to get connectors (error=-5) [ 476.648133][ T6031] gud: probe of 10-1:1.0 failed with error -5 [ 476.823125][T11239] loop8: detected capacity change from 0 to 164 [ 476.902132][ T4316] usb 10-1: USB disconnect, device number 6 [ 476.998505][ T6030] aqc111: probe of 9-1:1.105 failed with error -22 [ 477.045709][ T6030] usb 9-1: USB disconnect, device number 21 [ 477.103942][T11283] netlink: 'syz.0.1792': attribute type 10 has an invalid length. [ 477.142533][T11283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 477.238158][ T5223] hub 6-1:0.0: activate --> -90 [ 478.071071][ T4352] usb 6-1: USB disconnect, device number 14 [ 478.088018][ T5223] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 478.095706][ T5223] usb 6-1-port1: connect-debounce failed [ 478.295034][ T6030] usb 4-1: USB disconnect, device number 8 [ 479.428177][T11309] device syzkaller1 entered promiscuous mode [ 479.882574][ T6030] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 480.148543][ T6031] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 480.646465][ T4260] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 480.654725][ T6030] usb 4-1: Using ep0 maxpacket: 8 [ 480.790862][ T6030] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 480.809001][ T6030] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 480.847698][ T6031] usb 9-1: Using ep0 maxpacket: 16 [ 480.887907][ T6030] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 480.917586][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 480.970492][ T6031] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 480.985412][ T6031] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.017219][ T6031] usb 9-1: config 1 has no interface number 0 [ 481.037872][ T4260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 481.042327][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 481.055707][ T6031] usb 9-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.061005][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 481.090503][ T4260] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.107360][ T6030] usb 4-1: config 168 interface 0 has no altsetting 0 [ 481.128838][ T6031] usb 9-1: config 1 interface 105 has no altsetting 0 [ 481.135768][ T4260] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 481.147710][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.257188][ T4260] usb 6-1: config 0 descriptor?? [ 481.328410][ T6031] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 481.392092][ T6031] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 481.471164][ T6031] usb 9-1: Product: syz [ 481.574317][ T6031] usb 9-1: Manufacturer: syz [ 481.666651][ T6031] usb 9-1: SerialNumber: syz [ 481.786428][ T4260] hid-generic 0003:18D1:503C.0013: unexpected long global item [ 481.804924][ T4260] hid-generic: probe of 0003:18D1:503C.0013 failed with error -22 [ 481.817597][ T6030] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.824995][ T6030] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 481.937201][ T6030] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.959358][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 481.974861][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 481.998090][ T6030] usb 4-1: config 168 interface 0 has no altsetting 0 [ 482.052350][T11339] loop8: detected capacity change from 0 to 164 [ 482.068240][T11384] ima: policy update failed [ 482.082891][ T25] audit: type=1802 audit(1792316584.100:625): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1814" res=0 errno=0 [ 482.100248][ T6030] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 482.126134][ T6030] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 482.127604][ T6031] aqc111: probe of 9-1:1.105 failed with error -22 [ 482.157889][ T6030] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 482.197422][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 482.206873][ T6031] usb 9-1: USB disconnect, device number 22 [ 482.249359][ T6030] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 482.294388][ T6030] usb 4-1: config 168 interface 0 has no altsetting 0 [ 482.425842][ T4316] usb 6-1: USB disconnect, device number 15 [ 482.574241][ T6030] usb 4-1: string descriptor 0 read error: -71 [ 482.581144][ T6030] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 482.601995][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.714249][ T6030] usb 4-1: can't set config #168, error -71 [ 482.829592][ T6030] usb 4-1: USB disconnect, device number 9 [ 484.334986][T11441] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 484.478586][T11441] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 484.557213][T11463] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 484.717219][ T5223] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 485.522548][ T5223] usb 10-1: Using ep0 maxpacket: 16 [ 486.027201][ T5223] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 486.038055][ T5223] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.087263][ T5223] usb 10-1: config 1 has no interface number 0 [ 486.133124][ T5223] usb 10-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.192169][T11501] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 486.208294][ T5223] usb 10-1: config 1 interface 105 has no altsetting 0 [ 486.423058][ T5223] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 486.441914][ T5223] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 486.478701][ T5223] usb 10-1: Product: syz [ 486.504077][ T5223] usb 10-1: Manufacturer: syz [ 486.525497][ T5223] usb 10-1: SerialNumber: syz [ 486.948442][T11465] loop9: detected capacity change from 0 to 164 [ 487.666985][ T5223] aqc111: probe of 10-1:1.105 failed with error -22 [ 487.715431][ T5223] usb 10-1: USB disconnect, device number 7 [ 489.446661][ T4264] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 489.817162][ T4264] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.176011][ T4264] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.206561][ T4264] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.221771][ T4264] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.366645][ T4264] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.404940][ T4264] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.436525][ T4264] usb 6-1: Product: syz [ 490.440700][ T4264] usb 6-1: Manufacturer: syz [ 490.517375][ T4264] cdc_wdm 6-1:1.0: skipping garbage [ 490.522567][ T4264] cdc_wdm 6-1:1.0: skipping garbage [ 490.558395][ T4264] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 491.125242][ T4264] cdc_wdm 6-1:1.0: Unknown control protocol [ 491.141647][ T4264] usb 6-1: USB disconnect, device number 16 [ 491.932207][ T4316] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 492.346456][ T4316] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.355323][ T4316] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.396192][ T4316] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.423883][ T4316] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.277987][ T4316] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 493.316114][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.324117][ T4316] usb 6-1: Product: syz [ 493.426309][ T4316] usb 6-1: Manufacturer: syz [ 493.466196][ T4316] usb 6-1: can't set config #1, error -71 [ 493.483096][ T4316] usb 6-1: USB disconnect, device number 17 [ 495.275835][ T6031] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 496.305733][ T6031] usb 6-1: Using ep0 maxpacket: 16 [ 496.317646][T11684] FAULT_INJECTION: forcing a failure. [ 496.317646][T11684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 496.355786][T11684] CPU: 1 PID: 11684 Comm: syz.9.1897 Not tainted syzkaller #0 [ 496.363257][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.373310][T11684] Call Trace: [ 496.376586][T11684] [ 496.379513][T11684] dump_stack_lvl+0x188/0x250 [ 496.384196][T11684] ? show_regs_print_info+0x20/0x20 [ 496.389397][T11684] ? load_image+0x410/0x410 [ 496.393907][T11684] ? cgroup_rstat_updated+0xce/0x350 [ 496.399281][T11684] ? place_entity+0x4f0/0x4f0 [ 496.404026][T11684] should_fail+0x383/0x4b0 [ 496.408436][T11684] get_futex_key+0x1a1/0x12d0 [ 496.413112][T11684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 496.419071][T11684] ? futex_wait_restart+0x250/0x250 [ 496.424246][T11684] ? lock_chain_count+0x20/0x20 [ 496.429081][T11684] futex_wait_setup+0x4b/0x520 [ 496.433825][T11684] ? lockdep_hardirqs_on+0x94/0x140 [ 496.439000][T11684] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 496.444872][T11684] futex_wait+0x22f/0x680 [ 496.449182][T11684] ? __lock_acquire+0x13b3/0x7d40 [ 496.454181][T11684] ? do_futex+0x12b0/0x12b0 [ 496.458684][T11684] ? verify_lock_unused+0x140/0x140 [ 496.463881][T11684] ? verify_lock_unused+0x140/0x140 [ 496.469058][T11684] do_futex+0xdc2/0x12b0 [ 496.473287][T11684] ? futex_exit_release+0x1c0/0x1c0 [ 496.478467][T11684] ? __context_tracking_exit+0x4c/0x80 [ 496.483900][T11684] __se_sys_futex+0x389/0x420 [ 496.488554][T11684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 496.494510][T11684] ? __x64_sys_futex+0xf0/0xf0 [ 496.499255][T11684] ? __x64_sys_futex+0x1d/0xf0 [ 496.503995][T11684] do_syscall_64+0x4c/0xa0 [ 496.508386][T11684] ? clear_bhb_loop+0x30/0x80 [ 496.513043][T11684] ? clear_bhb_loop+0x30/0x80 [ 496.517703][T11684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.523571][T11684] RIP: 0033:0x7f9dc65b0559 [ 496.527961][T11684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.547543][T11684] RSP: 002b:00007f9dc48080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 496.555932][T11684] RAX: ffffffffffffffda RBX: 00007f9dc6837fa8 RCX: 00007f9dc65b0559 [ 496.563879][T11684] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9dc6837fa8 [ 496.571823][T11684] RBP: 00007f9dc6837fa0 R08: 0000000000000000 R09: 0000000000000000 [ 496.579770][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.587713][T11684] R13: 00007f9dc6838038 R14: 00007ffee774ff90 R15: 00007ffee7750078 [ 496.595667][T11684] [ 496.728696][ T6031] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 496.746212][ T6031] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.315629][ T6031] usb 6-1: config 1 has no interface number 0 [ 497.322196][ T6031] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.341259][ T6031] usb 6-1: config 1 interface 105 has no altsetting 0 [ 497.776237][ T6031] usb 6-1: string descriptor 0 read error: -71 [ 497.784035][ T6031] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 497.834042][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 497.915681][ T6031] usb 6-1: can't set config #1, error -71 [ 498.020047][T11714] serial 00:03: in use; can't configure [ 498.045673][ T6031] usb 6-1: USB disconnect, device number 18 [ 498.815422][ T4316] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 498.931367][ T150] block nbd3: Attempted send on invalid socket [ 498.937584][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.956850][ T150] block nbd3: Attempted send on invalid socket [ 498.963065][ T150] blk_update_request: I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.974202][T11721] Mount JFS Failure: -5 [ 498.978795][T11721] jfs_mount failed w/return code = -5 [ 499.085406][ T4316] usb 9-1: Using ep0 maxpacket: 16 [ 499.095629][ T6031] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 499.757601][ T4316] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 500.165623][ T6031] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.184889][ T6031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 500.198315][ T6031] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 500.215281][ T6031] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.230309][ T6031] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 500.295129][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.335549][ T4316] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.368743][ T4316] usb 9-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 500.394174][ T4316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.473972][ T4316] usb 9-1: config 0 descriptor?? [ 500.627202][ T4316] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 501.227930][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.238750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.337928][T11751] ipvlan0: mtu less than device minimum [ 501.377759][ T4316] usb 9-1: USB disconnect, device number 23 [ 501.552170][ T6031] [drm] Initialized gud 1.0.0 20200422 for 6-1:1.0 on minor 2 [ 501.715159][ T4262] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 501.755052][ T4316] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 501.795167][ T5223] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 501.955051][ T4262] usb 10-1: Using ep0 maxpacket: 32 [ 502.055028][ T5223] usb 4-1: Using ep0 maxpacket: 16 [ 502.075071][ T4262] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 502.085059][ T4262] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.095321][ T4262] usb 10-1: config 0 has no interface number 0 [ 502.101483][ T4262] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.135215][ T4316] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.145478][ T4316] usb 9-1: config 0 has no interfaces? [ 502.151163][ T4316] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 502.160503][ T4316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.170104][ T4316] usb 9-1: config 0 descriptor?? [ 502.175754][ T5223] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 502.183916][ T5223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.194402][ T5223] usb 4-1: config 1 has no interface number 0 [ 502.200531][ T5223] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 502.213690][ T5223] usb 4-1: config 1 interface 105 has no altsetting 0 [ 502.240323][ T6031] gud 6-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 502.262669][ T6031] usb 6-1: USB disconnect, device number 19 [ 502.269031][ T4262] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 502.284471][ T4262] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.292754][ T4262] usb 10-1: Product: syz [ 502.303456][ T4262] usb 10-1: Manufacturer: syz [ 502.308464][ T4262] usb 10-1: SerialNumber: syz [ 502.322607][ T4262] usb 10-1: config 0 descriptor?? [ 502.425193][ T5223] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 502.445177][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 502.446887][ T4262] radio-si470x 10-1:0.35: could not find interrupt in endpoint [ 502.458330][ T5223] usb 4-1: Product: syz [ 502.941331][ T4262] radio-si470x: probe of 10-1:0.35 failed with error -5 [ 502.957278][ T5223] usb 4-1: Manufacturer: syz [ 502.963731][ T5223] usb 4-1: SerialNumber: syz [ 502.978215][ T6030] usb 9-1: USB disconnect, device number 24 [ 503.004962][ T4262] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 503.012363][ T4262] usbhid 10-1:0.35: couldn't find an input interrupt endpoint [ 503.035270][ T4262] usb 10-1: USB disconnect, device number 8 [ 503.232503][T11762] loop3: detected capacity change from 0 to 164 [ 503.309376][ T5223] aqc111: probe of 4-1:1.105 failed with error -22 [ 503.323084][ T5223] usb 4-1: USB disconnect, device number 10 [ 503.630056][T11789] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 503.638456][T11789] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 504.345441][ T4262] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 504.664788][ T4262] usb 6-1: Using ep0 maxpacket: 16 [ 504.784861][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.809357][ T4262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.843172][ T4262] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 504.869610][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.894921][ T4262] usb 6-1: config 0 descriptor?? [ 505.377011][ T4262] hid-generic 0003:18D1:503C.0014: unexpected long global item [ 505.414906][ T4262] hid-generic: probe of 0003:18D1:503C.0014 failed with error -22 [ 507.004265][ T5223] usb 6-1: USB disconnect, device number 20 [ 507.258839][T11848] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1956'. [ 508.803247][ T5223] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 509.004185][ T4333] nci: nci_rsp_packet: unknown rsp opcode 0x604 [ 509.570263][ T5994] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 509.634262][ T5223] usb 6-1: Using ep0 maxpacket: 16 [ 509.774276][ T5223] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 509.788640][ T5223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.799752][ T5223] usb 6-1: config 1 has no interface number 0 [ 509.808857][ T5223] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.822970][ T5223] usb 6-1: config 1 interface 105 has no altsetting 0 [ 509.894318][ T4352] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 509.964281][ T5994] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.975437][ T5994] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.985490][ T5994] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.998781][ T5994] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.008614][ T5994] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.017039][ T5223] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 510.031041][ T5223] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 510.054744][ T5994] usb 10-1: config 0 descriptor?? [ 510.059899][ T5223] usb 6-1: Product: syz [ 510.067426][ T5223] usb 6-1: Manufacturer: syz [ 510.072024][ T5223] usb 6-1: SerialNumber: syz [ 510.144045][ T4352] usb 4-1: Using ep0 maxpacket: 16 [ 510.274214][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.285154][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.295190][ T4352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.308073][ T4352] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 510.320148][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.329010][T11863] loop5: detected capacity change from 0 to 164 [ 510.334151][ T4352] usb 4-1: config 0 descriptor?? [ 510.454319][ T5223] aqc111: probe of 6-1:1.105 failed with error -22 [ 510.463418][ T5223] usb 6-1: USB disconnect, device number 21 [ 510.526437][ T5994] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 510.538092][ T5994] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 510.826384][ T4352] hid-generic 0003:18D1:503C.0016: unexpected long global item [ 510.834189][ T4352] hid-generic: probe of 0003:18D1:503C.0016 failed with error -22 [ 511.284697][ T4260] usb 4-1: USB disconnect, device number 11 [ 511.846973][T11872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.083713][T11937] netlink: 'syz.8.1987': attribute type 15 has an invalid length. [ 513.091620][T11937] netlink: 'syz.8.1987': attribute type 7 has an invalid length. [ 513.213748][ T4262] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 513.688693][ T5994] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 513.753607][ T4260] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 513.898633][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 514.013567][ T5994] usb 6-1: Using ep0 maxpacket: 16 [ 514.039617][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.049761][ T4260] usb 10-1: device firmware changed [ 514.070512][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.070528][ T5223] usb 10-1: USB disconnect, device number 9 [ 514.129404][ T4262] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 514.154557][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.164441][ T5994] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 514.176117][ T4262] usb 4-1: config 0 descriptor?? [ 514.181202][ T5994] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.195275][ T5994] usb 6-1: config 1 has no interface number 0 [ 514.201514][ T5994] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.216376][ T4262] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 514.218708][ T5994] usb 6-1: config 1 interface 105 has no altsetting 0 [ 514.385791][ T5223] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 515.253516][ T5994] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 515.313326][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 515.322950][ T5994] usb 6-1: Product: syz [ 515.329972][ T5994] usb 6-1: Manufacturer: syz [ 515.334675][ T5994] usb 6-1: SerialNumber: syz [ 515.449029][ T5223] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.590529][T11928] loop5: detected capacity change from 0 to 164 [ 515.639877][ T5223] usb 10-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 515.663737][ T5994] aqc111: probe of 6-1:1.105 failed with error -22 [ 515.694100][ T5223] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.711917][ T5994] usb 6-1: USB disconnect, device number 22 [ 515.737084][ T5223] usb 10-1: Product: syz [ 515.773973][ T5223] usb 10-1: Manufacturer: syz [ 515.778661][ T5223] usb 10-1: SerialNumber: syz [ 515.863527][ T5223] usb 10-1: can't set config #1, error -71 [ 515.879685][ T5223] usb 10-1: USB disconnect, device number 10 [ 515.918664][ T4262] usb 4-1: USB disconnect, device number 12 [ 516.012952][T12000] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 516.041300][T12000] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 516.155975][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2013'. [ 516.393272][ T4260] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 516.703345][ T4260] usb 9-1: Using ep0 maxpacket: 16 [ 516.823500][ T4260] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.844140][ T4260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.863591][ T4260] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 516.882071][ T4260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.919999][ T4260] usb 9-1: config 0 descriptor?? [ 517.095271][T12029] syz.5.2019 (12029): drop_caches: 2 [ 517.115876][T12039] comedi comedi1: Cannot bond this driver to itself! [ 517.233326][ T5223] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 517.406900][ T4260] uclogic 0003:5543:0064.0017: unknown main item tag 0x0 [ 517.418876][ T4260] uclogic 0003:5543:0064.0017: unknown main item tag 0x0 [ 517.430103][ T4260] uclogic 0003:5543:0064.0017: unknown main item tag 0x0 [ 517.442695][ T4260] uclogic 0003:5543:0064.0017: unknown main item tag 0x0 [ 517.457693][ T4260] uclogic 0003:5543:0064.0017: unknown main item tag 0x0 [ 517.462564][T12045] rxe_eth0 speed is unknown, defaulting to 1000 [ 517.467410][ T4260] uclogic 0003:5543:0064.0017: No inputs registered, leaving [ 517.473158][ T6030] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 517.492355][ T4260] uclogic 0003:5543:0064.0017: hiddev0,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.8-1/input0 [ 517.533264][ T4261] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 517.543263][ T5223] usb 4-1: Using ep0 maxpacket: 16 [ 517.661209][T12045] chnl_net:caif_netlink_parms(): no params data found [ 517.684683][ T1108] usb 9-1: USB disconnect, device number 25 [ 517.687315][ T5223] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 517.700797][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.711172][ T5223] usb 4-1: config 0 descriptor?? [ 517.742543][T12045] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.749873][T12045] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.757456][ T6030] usb 10-1: Using ep0 maxpacket: 16 [ 517.764184][T12045] device bridge_slave_0 entered promiscuous mode [ 517.771892][T12045] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.779321][T12045] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.780427][ T5223] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 517.788555][T12045] device bridge_slave_1 entered promiscuous mode [ 517.795410][ T5223] usb 4-1: Detected FT-X [ 517.819821][T12045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.831118][T12045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.854187][T12045] team0: Port device team_slave_0 added [ 517.861482][T12045] team0: Port device team_slave_1 added [ 517.876710][T12045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.883741][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.909650][T12045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.921691][T12045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.928837][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.955379][ T6030] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.961470][T12045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.965525][ T6030] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.990234][ T4261] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.000025][ T4261] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 518.009859][ T5223] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 518.012725][T12045] device hsr_slave_0 entered promiscuous mode [ 518.017757][ T6030] usb 10-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 518.033463][ T6030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.033525][T12045] device hsr_slave_1 entered promiscuous mode [ 518.054529][T12045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.055080][ T6030] usb 10-1: config 0 descriptor?? [ 518.062181][T12045] Cannot create hsr debugfs directory [ 518.115205][ T6030] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 518.213152][ T4261] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 518.222286][ T4261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.231041][ T4261] usb 6-1: Product: syz [ 518.235505][ T4261] usb 6-1: Manufacturer: syz [ 518.240107][ T4261] usb 6-1: SerialNumber: syz [ 518.293270][ T5223] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 518.302944][ T5223] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 518.516438][ T4261] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 518.558053][T12045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.567819][T12045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.579486][T12045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.592838][T12045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.673302][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 518.690759][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.707408][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.727127][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.750229][T12045] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.768615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.777449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.786779][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.793889][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.802151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 518.814220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.822895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.831450][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.838535][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.875274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.890489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 518.901349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.918165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.934952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.947569][ T4261] usb 6-1: USB disconnect, device number 23 [ 518.951270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 518.962636][ T4261] usblp0: removed [ 518.971381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 518.981241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 518.998640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.013682][T12045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.025689][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.039647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.051115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.228433][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.238197][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.258934][T12045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.320347][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.338175][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.370724][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.385396][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.407709][T12045] device veth0_vlan entered promiscuous mode [ 519.417364][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.431552][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.447336][T12045] device veth1_vlan entered promiscuous mode [ 519.463244][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 519.469935][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.479102][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.488377][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.507241][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.532542][T12045] device veth0_macvtap entered promiscuous mode [ 519.551318][T12045] device veth1_macvtap entered promiscuous mode [ 519.581816][ T4261] usb 10-1: USB disconnect, device number 11 [ 519.588593][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.599587][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.615895][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.638891][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.661084][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.681702][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.691645][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.709290][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.713006][T12067] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 519.719887][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.745102][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.753017][T12067] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 519.760737][T12045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.776716][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.786128][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.792925][T12067] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 519.794517][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.808776][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.828427][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.839399][T12036] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 519.846723][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.857033][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.863544][T12036] ftdi_sio ttyUSB0: error from flowcontrol urb [ 519.867928][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.884039][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.895070][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.902726][ T4260] usb 4-1: USB disconnect, device number 13 [ 519.907082][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.920789][ T4260] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 519.924048][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.931661][ T4260] ftdi_sio 4-1:0.0: device disconnected [ 519.942518][T12045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.976367][T12045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.000173][T12045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.013521][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.023210][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.039214][T12045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.057855][T12045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.073869][T12045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.107203][T12045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.142108][T12125] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2031'. [ 520.195418][T12121] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2031'. [ 520.374700][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.403029][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.427347][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.449305][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.463971][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.487092][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.487243][T12144] netlink: 5620 bytes leftover after parsing attributes in process `syz.9.2035'. [ 520.834683][ T5223] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 521.032798][ T4262] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 521.092735][ T5223] usb 10-1: Using ep0 maxpacket: 16 [ 521.245262][ T5223] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.259743][ T5223] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.272739][ T4262] usb 3-1: Using ep0 maxpacket: 8 [ 521.294922][ T5223] usb 10-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 521.310118][ T5223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.337594][ T5223] usb 10-1: config 0 descriptor?? [ 521.392916][ T4262] usb 3-1: config 0 has no interfaces? [ 521.407766][ T5223] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 521.483216][ T4316] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 521.543350][ T5223] Bluetooth: hci0: command 0x041b tx timeout [ 521.552821][ T4262] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 521.574253][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.589118][ T4262] usb 3-1: Product: syz [ 521.599178][ T4262] usb 3-1: Manufacturer: syz [ 521.614141][ T4262] usb 3-1: SerialNumber: syz [ 521.631085][ T4262] usb 3-1: config 0 descriptor?? [ 521.684962][T12189] jffs2: notice: (12189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 521.768664][ T4316] usb 9-1: Using ep0 maxpacket: 8 [ 521.945898][ T5223] usb 3-1: USB disconnect, device number 11 [ 522.602389][ T4316] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 522.702668][ T4316] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.711287][ T4316] usb 9-1: Product: syz [ 522.716093][ T4316] usb 9-1: Manufacturer: syz [ 522.720692][ T4316] usb 9-1: SerialNumber: syz [ 522.736804][ T4316] usb 9-1: config 0 descriptor?? [ 523.000087][ T4316] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 523.362270][ T4262] usb 10-1: USB disconnect, device number 12 [ 523.632613][ T5223] Bluetooth: hci0: command 0x040f tx timeout [ 524.292795][ T4316] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 524.361263][ T4316] usb 9-1: USB disconnect, device number 26 [ 525.336409][T12307] CIFS: Attempting to mount \\127.0.0.1\share [ 525.427279][ T5994] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 525.920035][ T5223] Bluetooth: hci0: command 0x0419 tx timeout [ 525.920175][T12310] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 526.133897][ T5994] usb 4-1: Using ep0 maxpacket: 16 [ 526.169196][T12307] CIFS: VFS: Could not allocate crypto cmac(aes) [ 526.213110][T12307] CIFS: VFS: cifs_mount failed w/return code = -112 [ 526.322332][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.352069][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.392095][ T5994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.410497][T12332] tipc: Enabling of bearer rejected, already enabled [ 526.438908][ T5994] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 526.478933][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.503602][ T5994] usb 4-1: config 0 descriptor?? [ 526.514209][T12339] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2084'. [ 526.612135][ T4262] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 526.852056][ T4262] usb 9-1: Using ep0 maxpacket: 8 [ 526.972245][ T4262] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 526.987319][ T4262] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.015449][T12363] FAULT_INJECTION: forcing a failure. [ 527.015449][T12363] name failslab, interval 1, probability 0, space 0, times 0 [ 527.044290][ T4262] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.072023][T12363] CPU: 0 PID: 12363 Comm: syz.2.2090 Not tainted syzkaller #0 [ 527.078386][ T4262] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.079489][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.099415][T12363] Call Trace: [ 527.102695][T12363] [ 527.105624][T12363] dump_stack_lvl+0x188/0x250 [ 527.110310][T12363] ? show_regs_print_info+0x20/0x20 [ 527.110839][ T4262] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.115509][T12363] ? load_image+0x410/0x410 [ 527.115537][T12363] ? __might_sleep+0xf0/0xf0 [ 527.115557][T12363] ? __lock_acquire+0x7d40/0x7d40 [ 527.115583][T12363] should_fail+0x383/0x4b0 [ 527.115609][T12363] should_failslab+0x5/0x20 [ 527.115627][T12363] slab_pre_alloc_hook+0x51/0xc0 [ 527.156375][T12363] ? __kernfs_new_node+0xe3/0x6b0 [ 527.161484][T12363] kmem_cache_alloc+0x3d/0x280 [ 527.165491][ T4262] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.166249][T12363] __kernfs_new_node+0xe3/0x6b0 [ 527.166278][T12363] ? __lock_acquire+0x7d40/0x7d40 [ 527.185105][T12363] ? kernfs_new_node+0x250/0x250 [ 527.190059][T12363] ? kernfs_activate+0x1eb/0x210 [ 527.195002][T12363] kernfs_new_node+0x148/0x250 [ 527.198280][ T4262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.199782][T12363] __kernfs_create_file+0x47/0x2e0 [ 527.199812][T12363] sysfs_add_file_mode_ns+0x2d2/0x390 [ 527.218223][T12363] internal_create_group+0x492/0xd00 [ 527.223532][T12363] ? sysfs_create_group+0x20/0x20 [ 527.228558][T12363] ? kernfs_activate+0x1eb/0x210 [ 527.233503][T12363] ? kernfs_add_one+0x564/0x6c0 [ 527.238361][T12363] sysfs_create_groups+0x55/0x120 [ 527.243392][T12363] device_add_attrs+0x12f/0x690 [ 527.248314][T12363] device_add+0x677/0x1050 [ 527.252738][T12363] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 527.258276][T12363] wakeup_source_register+0x15f/0x230 [ 527.263655][T12363] ep_insert+0xf55/0x1930 [ 527.268001][T12363] ? ep_loop_check+0x180/0x180 [ 527.272782][T12363] ? ep_loop_check_proc+0x27d/0x2d0 [ 527.277978][T12363] ? bpf_lsm_capable+0x5/0x10 [ 527.282666][T12363] do_epoll_ctl+0x8bc/0xf20 [ 527.287174][T12363] __x64_sys_epoll_ctl+0x162/0x1b0 [ 527.292289][T12363] ? ep_modify+0xa80/0xa80 [ 527.296708][T12363] ? lockdep_hardirqs_on+0x94/0x140 [ 527.301914][T12363] do_syscall_64+0x4c/0xa0 [ 527.306333][T12363] ? clear_bhb_loop+0x30/0x80 [ 527.311011][T12363] ? clear_bhb_loop+0x30/0x80 [ 527.315691][T12363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.321597][T12363] RIP: 0033:0x7f13b9f23559 [ 527.326013][T12363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.345615][T12363] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 527.354031][T12363] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 527.362002][T12363] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 527.369970][T12363] RBP: 00007f13b9fbaab8 R08: 0000000000000000 R09: 0000000000000000 [ 527.377944][T12363] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 527.385911][T12363] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 527.393899][T12363] [ 527.432011][ T5994] usbhid 4-1:0.0: can't add hid device: -71 [ 527.437995][ T5994] usbhid: probe of 4-1:0.0 failed with error -71 [ 527.456888][ T5994] usb 4-1: USB disconnect, device number 14 [ 527.584467][ T6030] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 527.652084][ T4262] usb 9-1: usb_control_msg returned -32 [ 527.657974][ T4262] usbtmc 9-1:16.0: can't read capabilities [ 528.113073][ T6030] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.347527][ T6030] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 528.361079][ T6030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 528.402039][ T6030] usb 6-1: Product: syz [ 528.406213][ T6030] usb 6-1: Manufacturer: syz [ 528.485742][ T6030] usb 6-1: selecting invalid altsetting 1 [ 528.510420][ T6030] dvb_ttusb_budget: ttusb_init_controller: error [ 528.531540][ T6030] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 528.591897][ T4316] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 528.688657][T12359] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 528.718960][ T6030] DVB: Unable to find symbol cx22700_attach() [ 528.802413][ T1108] usb 9-1: USB disconnect, device number 27 [ 528.824598][ T6030] DVB: Unable to find symbol tda10046_attach() [ 528.837972][ T6030] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 528.852808][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2099'. [ 528.866670][ T6030] usb 6-1: USB disconnect, device number 24 [ 529.022510][ T4316] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 529.037371][ T4316] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 529.060253][ T4316] usb 4-1: config 4 has no interface number 0 [ 529.093103][ T4316] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.282105][T12442] FAULT_INJECTION: forcing a failure. [ 529.282105][T12442] name failslab, interval 1, probability 0, space 0, times 0 [ 529.339494][T12442] CPU: 0 PID: 12442 Comm: syz.9.2104 Not tainted syzkaller #0 [ 529.346976][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.357024][T12442] Call Trace: [ 529.360283][T12442] [ 529.363195][T12442] dump_stack_lvl+0x188/0x250 [ 529.367874][T12442] ? show_regs_print_info+0x20/0x20 [ 529.373055][T12442] ? load_image+0x410/0x410 [ 529.377560][T12442] ? __might_sleep+0xf0/0xf0 [ 529.382150][T12442] ? __lock_acquire+0x7d40/0x7d40 [ 529.387187][T12442] should_fail+0x383/0x4b0 [ 529.391620][T12442] should_failslab+0x5/0x20 [ 529.396126][T12442] slab_pre_alloc_hook+0x51/0xc0 [ 529.401061][T12442] ? snd_timer_instance_new+0x66/0x210 [ 529.406536][T12442] __kmalloc_track_caller+0x69/0x330 [ 529.411825][T12442] ? snd_timer_instance_new+0x66/0x210 [ 529.417295][T12442] kstrdup+0x32/0x70 [ 529.421269][T12442] snd_timer_instance_new+0x66/0x210 [ 529.426555][T12442] snd_seq_timer_open+0x237/0x600 [ 529.431604][T12442] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 529.436962][T12442] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 529.442870][T12442] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 529.448772][T12442] ? _raw_spin_unlock+0x40/0x40 [ 529.453632][T12442] ? snd_seq_timer_defaults+0x31/0x530 [ 529.459100][T12442] snd_seq_queue_alloc+0x3b3/0x740 [ 529.464274][T12442] snd_seq_ioctl_create_queue+0x7b/0x320 [ 529.469911][T12442] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 529.476161][T12442] snd_seq_oss_open+0x622/0xf00 [ 529.481035][T12442] ? snd_seq_oss_delete_client+0x50/0x50 [ 529.486707][T12442] ? __mutex_lock_common+0x435/0x2400 [ 529.492100][T12442] ? mutex_lock_io_nested+0x60/0x60 [ 529.497306][T12442] ? snd_seq_oss_process_event+0x2910/0x2910 [ 529.503289][T12442] ? async_call_lookup_ports+0x10/0x10 [ 529.508748][T12442] ? do_raw_spin_unlock+0x11d/0x230 [ 529.513961][T12442] odev_open+0x63/0x90 [ 529.518037][T12442] chrdev_open+0x585/0x5f0 [ 529.522466][T12442] ? cd_forget+0x160/0x160 [ 529.526891][T12442] ? fsnotify_perm+0x3a7/0x560 [ 529.531661][T12442] ? cd_forget+0x160/0x160 [ 529.536085][T12442] do_dentry_open+0x7f7/0xf90 [ 529.540765][T12442] ? vfs_open+0x2b/0x80 [ 529.544932][T12442] path_openat+0x2718/0x2fb0 [ 529.549552][T12442] ? __kasan_slab_alloc+0xa9/0xc0 [ 529.554586][T12442] ? do_filp_open+0x400/0x400 [ 529.559286][T12442] do_filp_open+0x1df/0x400 [ 529.563799][T12442] ? vfs_tmpfile+0x300/0x300 [ 529.568415][T12442] ? _raw_spin_unlock+0x24/0x40 [ 529.573271][T12442] ? alloc_fd+0x59e/0x650 [ 529.577612][T12442] do_sys_openat2+0x14b/0x500 [ 529.582288][T12442] ? __lock_acquire+0x7d40/0x7d40 [ 529.587318][T12442] ? do_sys_open+0xe0/0xe0 [ 529.591736][T12442] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 529.595524][ T4262] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 529.597721][T12442] ? lock_chain_count+0x20/0x20 [ 529.610087][T12442] __x64_sys_openat+0x135/0x160 [ 529.614945][T12442] do_syscall_64+0x4c/0xa0 [ 529.619365][T12442] ? clear_bhb_loop+0x30/0x80 [ 529.624042][T12442] ? clear_bhb_loop+0x30/0x80 [ 529.628727][T12442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.634626][T12442] RIP: 0033:0x7f9dc65b0559 [ 529.639043][T12442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.658649][T12442] RSP: 002b:00007f9dc4808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.667069][T12442] RAX: ffffffffffffffda RBX: 00007f9dc6837fa0 RCX: 00007f9dc65b0559 [ 529.675039][T12442] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 529.683008][T12442] RBP: 00007f9dc6647ab8 R08: 0000000000000000 R09: 0000000000000000 [ 529.690977][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.698955][T12442] R13: 00007f9dc6838038 R14: 00007f9dc6837fa0 R15: 00007ffee7750078 [ 529.706951][T12442] [ 529.732803][ T4316] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 529.755557][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.771991][ T4316] usb 4-1: Product: syz [ 529.776300][ T4316] usb 4-1: Manufacturer: syz [ 529.781090][ T4316] usb 4-1: SerialNumber: syz [ 529.851841][ T4262] usb 6-1: Using ep0 maxpacket: 16 [ 529.981734][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.018833][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.094675][ T4262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.128036][ T4262] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 530.158157][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.180984][ T4262] usb 6-1: config 0 descriptor?? [ 530.264727][T12477] overlayfs: overlapping lowerdir path [ 530.291778][ T4316] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 530.303677][ T4316] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 530.316866][T12481] overlayfs: overlapping lowerdir path [ 530.354865][ T4316] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 530.376271][ T4316] usb 4-1: media controller created [ 530.393833][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.512989][ T4316] DVB: Unable to find symbol dib7000p_attach() [ 530.519201][ T4316] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 530.631618][ T4316] rc_core: IR keymap rc-dib0700-rc5 not found [ 530.640046][ T4316] Registered IR keymap rc-empty [ 530.660602][ T4316] dvb-usb: could not initialize remote control. [ 530.681321][ T4316] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 530.789474][ T4316] usb 4-1: USB disconnect, device number 15 [ 530.840094][ T4316] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 531.231568][ T4262] usbhid 6-1:0.0: can't add hid device: -71 [ 531.237606][ T4262] usbhid: probe of 6-1:0.0 failed with error -71 [ 531.255493][ T4262] usb 6-1: USB disconnect, device number 25 [ 531.878326][T12544] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 531.881491][ T6031] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 532.361554][ T6031] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.372857][ T6031] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.383082][ T6031] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.531441][ T4316] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 532.605903][T12591] capability: warning: `syz.2.2140' uses 32-bit capabilities (legacy support in use) [ 532.704998][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.731618][T12531] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 532.801445][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 532.942211][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.975200][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.978765][ T4262] usb 4-1: USB disconnect, device number 16 [ 532.987867][ T4316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.004774][ T4316] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 533.019906][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.035555][ T4316] usb 6-1: config 0 descriptor?? [ 533.058839][ T25] audit: type=1800 audit(1792316635.086:626): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2144" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 533.213251][T12624] FAULT_INJECTION: forcing a failure. [ 533.213251][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 533.231456][T12624] CPU: 1 PID: 12624 Comm: syz.2.2148 Not tainted syzkaller #0 [ 533.238931][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.248987][T12624] Call Trace: [ 533.252266][T12624] [ 533.255198][T12624] dump_stack_lvl+0x188/0x250 [ 533.259916][T12624] ? show_regs_print_info+0x20/0x20 [ 533.265125][T12624] ? load_image+0x410/0x410 [ 533.269639][T12624] ? __might_sleep+0xf0/0xf0 [ 533.274236][T12624] ? __lock_acquire+0x7d40/0x7d40 [ 533.279272][T12624] should_fail+0x383/0x4b0 [ 533.283699][T12624] should_failslab+0x5/0x20 [ 533.288206][T12624] slab_pre_alloc_hook+0x51/0xc0 [ 533.293150][T12624] kmem_cache_alloc_trace+0x47/0x290 [ 533.298440][T12624] ? __se_sys_mount+0x157/0x3d0 [ 533.303302][T12624] __se_sys_mount+0x157/0x3d0 [ 533.307990][T12624] ? __x64_sys_mount+0xc0/0xc0 [ 533.312766][T12624] ? lockdep_hardirqs_on+0x94/0x140 [ 533.317974][T12624] ? __x64_sys_mount+0x1c/0xc0 [ 533.322745][T12624] do_syscall_64+0x4c/0xa0 [ 533.327162][T12624] ? clear_bhb_loop+0x30/0x80 [ 533.331848][T12624] ? clear_bhb_loop+0x30/0x80 [ 533.336534][T12624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.342440][T12624] RIP: 0033:0x7f13b9f23559 [ 533.346856][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.366458][T12624] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.374879][T12624] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 533.382855][T12624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.390825][T12624] RBP: 00007f13b9fbaab8 R08: 00002000000000c0 R09: 0000000000000000 [ 533.398801][T12624] R10: 0000000001020020 R11: 0000000000000246 R12: 0000000000000000 [ 533.406773][T12624] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 533.414762][T12624] [ 533.513346][T12645] FAULT_INJECTION: forcing a failure. [ 533.513346][T12645] name failslab, interval 1, probability 0, space 0, times 0 [ 533.534317][T12645] CPU: 0 PID: 12645 Comm: syz.2.2151 Not tainted syzkaller #0 [ 533.541788][T12645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.551840][T12645] Call Trace: [ 533.555122][T12645] [ 533.558055][T12645] dump_stack_lvl+0x188/0x250 [ 533.562746][T12645] ? show_regs_print_info+0x20/0x20 [ 533.567952][T12645] ? load_image+0x410/0x410 [ 533.572460][T12645] ? __might_sleep+0xf0/0xf0 [ 533.577056][T12645] ? __lock_acquire+0x7d40/0x7d40 [ 533.582110][T12645] should_fail+0x383/0x4b0 [ 533.586537][T12645] should_failslab+0x5/0x20 [ 533.591043][T12645] slab_pre_alloc_hook+0x51/0xc0 [ 533.595993][T12645] ? __kernfs_new_node+0xe3/0x6b0 [ 533.601023][T12645] kmem_cache_alloc+0x3d/0x280 [ 533.605803][T12645] __kernfs_new_node+0xe3/0x6b0 [ 533.610663][T12645] ? __lock_acquire+0x7d40/0x7d40 [ 533.615694][T12645] ? kernfs_new_node+0x250/0x250 [ 533.620648][T12645] ? kernfs_activate+0x1eb/0x210 [ 533.625599][T12645] kernfs_new_node+0x148/0x250 [ 533.630372][T12645] __kernfs_create_file+0x47/0x2e0 [ 533.635494][T12645] sysfs_add_file_mode_ns+0x2d2/0x390 [ 533.640880][T12645] internal_create_group+0x492/0xd00 [ 533.646182][T12645] ? sysfs_create_group+0x20/0x20 [ 533.651217][T12645] ? kernfs_add_one+0x564/0x6c0 [ 533.656089][T12645] sysfs_create_groups+0x55/0x120 [ 533.661120][T12645] device_add_attrs+0x82/0x690 [ 533.665892][T12645] device_add+0x677/0x1050 [ 533.670318][T12645] netdev_register_kobject+0x184/0x320 [ 533.675791][T12645] register_netdevice+0x10e8/0x1720 [ 533.681090][T12645] ? netif_stacked_transfer_operstate+0x200/0x200 [ 533.687530][T12645] ipip6_tunnel_create+0x1af/0x660 [ 533.692735][T12645] ipip6_tunnel_locate+0x4c0/0x650 [ 533.697869][T12645] ? check_6rd+0x490/0x490 [ 533.702293][T12645] ? bpf_lsm_capable+0x5/0x10 [ 533.706981][T12645] ipip6_tunnel_ctl+0x748/0x9c0 [ 533.711843][T12645] ip_tunnel_siocdevprivate+0x134/0x1e0 [ 533.717452][T12645] ? ip_tunnel_update+0xc70/0xc70 [ 533.722500][T12645] ipip6_tunnel_siocdevprivate+0x1dd/0x1600 [ 533.728407][T12645] ? sit_tunnel_xmit+0x23d0/0x23d0 [ 533.733528][T12645] ? __mutex_trylock_common+0x15c/0x260 [ 533.739094][T12645] ? rcu_lock_release+0x20/0x20 [ 533.743951][T12645] ? __lock_acquire+0x7d40/0x7d40 [ 533.748987][T12645] ? __mutex_lock_common+0x435/0x2400 [ 533.754369][T12645] ? full_name_hash+0x8e/0xe0 [ 533.759062][T12645] dev_ifsioc+0xa30/0xd50 [ 533.763399][T12645] ? dev_ioctl+0xe30/0xe30 [ 533.767820][T12645] ? full_name_hash+0x8e/0xe0 [ 533.772513][T12645] dev_ioctl+0x5df/0xe30 [ 533.776760][T12645] ? get_user_ifreq+0xc7/0x170 [ 533.781530][T12645] sock_ioctl+0x679/0x700 [ 533.785872][T12645] ? sock_poll+0x420/0x420 [ 533.790304][T12645] ? bpf_lsm_file_ioctl+0x5/0x10 [ 533.795303][T12645] ? security_file_ioctl+0x7c/0xa0 [ 533.800421][T12645] ? sock_poll+0x420/0x420 [ 533.804845][T12645] __se_sys_ioctl+0xfa/0x170 [ 533.809444][T12645] do_syscall_64+0x4c/0xa0 [ 533.813865][T12645] ? clear_bhb_loop+0x30/0x80 [ 533.818547][T12645] ? clear_bhb_loop+0x30/0x80 [ 533.823232][T12645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.829129][T12645] RIP: 0033:0x7f13b9f23559 [ 533.833550][T12645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.853157][T12645] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.861573][T12645] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 533.869546][T12645] RDX: 0000200000000980 RSI: 00000000000089f1 RDI: 0000000000000006 [ 533.877518][T12645] RBP: 00007f13b9fbaab8 R08: 0000000000000000 R09: 0000000000000000 [ 533.885489][T12645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.893460][T12645] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 533.901445][T12645] [ 533.951176][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 534.077665][T12671] FAULT_INJECTION: forcing a failure. [ 534.077665][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 534.115310][T12671] CPU: 0 PID: 12671 Comm: syz.2.2157 Not tainted syzkaller #0 [ 534.122779][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.132828][T12671] Call Trace: [ 534.136105][T12671] [ 534.139033][T12671] dump_stack_lvl+0x188/0x250 [ 534.143717][T12671] ? show_regs_print_info+0x20/0x20 [ 534.148918][T12671] ? load_image+0x410/0x410 [ 534.153423][T12671] ? __might_sleep+0xf0/0xf0 [ 534.158008][T12671] ? __lock_acquire+0x7d40/0x7d40 [ 534.163040][T12671] should_fail+0x383/0x4b0 [ 534.167458][T12671] should_failslab+0x5/0x20 [ 534.171955][T12671] slab_pre_alloc_hook+0x51/0xc0 [ 534.176892][T12671] kmem_cache_alloc_trace+0x47/0x290 [ 534.182172][T12671] ? fuse_dev_alloc+0x4e/0x2b0 [ 534.187008][T12671] fuse_dev_alloc+0x4e/0x2b0 [ 534.191603][T12671] ? fuse_dev_alloc_install+0xb/0x40 [ 534.196893][T12671] fuse_dev_alloc_install+0x10/0x40 [ 534.202093][T12671] cuse_channel_open+0xee/0x610 [ 534.206947][T12671] ? fuse_dax_writepages+0xe0/0xe0 [ 534.212058][T12671] misc_open+0x31f/0x390 [ 534.216367][T12671] chrdev_open+0x585/0x5f0 [ 534.220786][T12671] ? cd_forget+0x160/0x160 [ 534.225202][T12671] ? fsnotify_perm+0x3a7/0x560 [ 534.229971][T12671] ? cd_forget+0x160/0x160 [ 534.234397][T12671] do_dentry_open+0x7f7/0xf90 [ 534.239085][T12671] ? vfs_open+0x2b/0x80 [ 534.243252][T12671] path_openat+0x2718/0x2fb0 [ 534.247863][T12671] ? __kasan_slab_alloc+0xa9/0xc0 [ 534.252888][T12671] ? do_filp_open+0x400/0x400 [ 534.257578][T12671] do_filp_open+0x1df/0x400 [ 534.262084][T12671] ? vfs_tmpfile+0x300/0x300 [ 534.266688][T12671] ? _raw_spin_unlock+0x24/0x40 [ 534.271537][T12671] ? alloc_fd+0x59e/0x650 [ 534.275871][T12671] do_sys_openat2+0x14b/0x500 [ 534.280543][T12671] ? __lock_acquire+0x7d40/0x7d40 [ 534.285566][T12671] ? do_sys_open+0xe0/0xe0 [ 534.289978][T12671] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 534.295959][T12671] ? lock_chain_count+0x20/0x20 [ 534.300814][T12671] __x64_sys_openat+0x135/0x160 [ 534.305670][T12671] do_syscall_64+0x4c/0xa0 [ 534.310083][T12671] ? clear_bhb_loop+0x30/0x80 [ 534.314755][T12671] ? clear_bhb_loop+0x30/0x80 [ 534.319432][T12671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.325321][T12671] RIP: 0033:0x7f13b9f23559 [ 534.329732][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.349335][T12671] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.357744][T12671] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 534.365714][T12671] RDX: 0000000000000002 RSI: 000020000000d100 RDI: ffffffffffffff9c [ 534.373683][T12671] RBP: 00007f13b9fbaab8 R08: 0000000000000000 R09: 0000000000000000 [ 534.381650][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.389614][T12671] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 534.397597][T12671] [ 534.475689][T12678] tmpfs: Unknown parameter 'quota' [ 534.738048][T12700] FAULT_INJECTION: forcing a failure. [ 534.738048][T12700] name fail_futex, interval 1, probability 0, space 0, times 0 [ 534.777449][T12700] CPU: 1 PID: 12700 Comm: syz.9.2167 Not tainted syzkaller #0 [ 534.784927][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.794988][T12700] Call Trace: [ 534.798267][T12700] [ 534.801197][T12700] dump_stack_lvl+0x188/0x250 [ 534.805882][T12700] ? unwind_get_return_address+0x49/0x80 [ 534.811550][T12700] ? stack_trace_save+0xf0/0xf0 [ 534.816404][T12700] ? show_regs_print_info+0x20/0x20 [ 534.821611][T12700] ? load_image+0x410/0x410 [ 534.826118][T12700] ? kmem_cache_free+0x8f/0x210 [ 534.830968][T12700] ? stack_trace_save+0xa6/0xf0 [ 534.835816][T12700] ? stack_trace_snprint+0xe0/0xe0 [ 534.840926][T12700] should_fail+0x383/0x4b0 [ 534.845358][T12700] get_futex_key+0x1a1/0x12d0 [ 534.850044][T12700] ? __lock_acquire+0x13b3/0x7d40 [ 534.855070][T12700] ? futex_wait_restart+0x250/0x250 [ 534.860260][T12700] futex_wake+0x101/0x540 [ 534.864578][T12700] ? futex_wait+0x680/0x680 [ 534.869061][T12700] ? verify_lock_unused+0x140/0x140 [ 534.874238][T12700] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 534.880201][T12700] ? verify_lock_unused+0x140/0x140 [ 534.885385][T12700] do_futex+0xd83/0x12b0 [ 534.889608][T12700] ? kasan_quarantine_put+0xd4/0x210 [ 534.894957][T12700] ? lockdep_hardirqs_on+0x94/0x140 [ 534.900148][T12700] ? futex_exit_release+0x1c0/0x1c0 [ 534.905328][T12700] ? __context_tracking_exit+0x4c/0x80 [ 534.910768][T12700] __se_sys_futex+0x389/0x420 [ 534.915428][T12700] ? __x64_sys_futex+0xf0/0xf0 [ 534.920180][T12700] ? __x64_sys_futex+0x1d/0xf0 [ 534.924924][T12700] do_syscall_64+0x4c/0xa0 [ 534.929327][T12700] ? clear_bhb_loop+0x30/0x80 [ 534.933986][T12700] ? clear_bhb_loop+0x30/0x80 [ 534.938644][T12700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.944517][T12700] RIP: 0033:0x7f9dc65b0559 [ 534.948909][T12700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.968497][T12700] RSP: 002b:00007f9dc48080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.976891][T12700] RAX: ffffffffffffffda RBX: 00007f9dc6837fa8 RCX: 00007f9dc65b0559 [ 534.984849][T12700] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dc6837fac [ 534.992799][T12700] RBP: 00007f9dc6837fa0 R08: 002a4c645c6e3328 R09: 0000000000000000 [ 535.000746][T12700] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 535.008695][T12700] R13: 00007f9dc6838038 R14: 00007ffee774ff90 R15: 00007ffee7750078 [ 535.016653][T12700] [ 535.063508][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop32, 10) failed: Not a directory [ 535.072689][ T4316] usbhid 6-1:0.0: can't add hid device: -71 [ 535.078672][ T4316] usbhid: probe of 6-1:0.0 failed with error -71 [ 535.118329][T12709] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 535.119814][ T4316] usb 6-1: USB disconnect, device number 26 [ 535.404125][T12729] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2175'. [ 535.506255][T12735] ima: policy update failed [ 535.511303][ T25] audit: type=1802 audit(1792316637.546:627): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2177" res=0 errno=0 [ 535.978409][T12761] FAULT_INJECTION: forcing a failure. [ 535.978409][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 536.043265][T12761] CPU: 0 PID: 12761 Comm: syz.8.2185 Not tainted syzkaller #0 [ 536.050747][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.060801][T12761] Call Trace: [ 536.064083][T12761] [ 536.067015][T12761] dump_stack_lvl+0x188/0x250 [ 536.071704][T12761] ? show_regs_print_info+0x20/0x20 [ 536.076911][T12761] ? load_image+0x410/0x410 [ 536.081422][T12761] ? __might_sleep+0xf0/0xf0 [ 536.086020][T12761] ? __lock_acquire+0x7d40/0x7d40 [ 536.090891][ T4262] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 536.091053][T12761] should_fail+0x383/0x4b0 [ 536.103067][T12761] should_failslab+0x5/0x20 [ 536.107575][T12761] slab_pre_alloc_hook+0x51/0xc0 [ 536.112525][T12761] kmem_cache_alloc_node+0x47/0x2c0 [ 536.117725][T12761] ? alloc_vmap_area+0x199/0x1b30 [ 536.122760][T12761] alloc_vmap_area+0x199/0x1b30 [ 536.127641][T12761] ? vm_map_ram+0xba0/0xba0 [ 536.132159][T12761] __get_vm_area_node+0x14f/0x2d0 [ 536.137205][T12761] __vmalloc_node_range+0xef/0x8b0 [ 536.142322][T12761] ? write_ldt+0x358/0x5f0 [ 536.146828][T12761] ? write_ldt+0x358/0x5f0 [ 536.151251][T12761] __vmalloc+0x76/0x80 [ 536.155323][T12761] ? write_ldt+0x358/0x5f0 [ 536.159744][T12761] write_ldt+0x358/0x5f0 [ 536.164004][T12761] ? __ia32_sys_modify_ldt+0x80/0x80 [ 536.169293][T12761] ? lock_chain_count+0x20/0x20 [ 536.174157][T12761] __se_sys_modify_ldt+0x16f/0x1b0 [ 536.179287][T12761] do_syscall_64+0x4c/0xa0 [ 536.183706][T12761] ? clear_bhb_loop+0x30/0x80 [ 536.188389][T12761] ? clear_bhb_loop+0x30/0x80 [ 536.193071][T12761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 536.198967][T12761] RIP: 0033:0x7fd74e84b559 [ 536.203380][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.222987][T12761] RSP: 002b:00007fd74caa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 536.231401][T12761] RAX: ffffffffffffffda RBX: 00007fd74ead2fa0 RCX: 00007fd74e84b559 [ 536.239371][T12761] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 536.247341][T12761] RBP: 00007fd74e8e2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 536.255318][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.263290][T12761] R13: 00007fd74ead3038 R14: 00007fd74ead2fa0 R15: 00007ffd66c4e778 [ 536.271284][T12761] [ 536.313128][T12761] syz.8.2185: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 536.336870][T12761] CPU: 0 PID: 12761 Comm: syz.8.2185 Not tainted syzkaller #0 [ 536.344330][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.350683][ T6031] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 536.354373][T12761] Call Trace: [ 536.354383][T12761] [ 536.354391][T12761] dump_stack_lvl+0x188/0x250 [ 536.354412][T12761] ? rcu_lock_release+0x5/0x20 [ 536.377513][T12761] ? show_regs_print_info+0x20/0x20 [ 536.382718][T12761] ? load_image+0x410/0x410 [ 536.387240][T12761] warn_alloc+0x245/0x320 [ 536.391015][ T4262] usb 10-1: Using ep0 maxpacket: 32 [ 536.391579][T12761] ? zone_watermark_ok_safe+0x250/0x250 [ 536.391612][T12761] ? __get_vm_area_node+0x164/0x2d0 [ 536.407492][T12761] __vmalloc_node_range+0x2b1/0x8b0 [ 536.412708][T12761] ? write_ldt+0x358/0x5f0 [ 536.417128][T12761] __vmalloc+0x76/0x80 [ 536.421201][T12761] ? write_ldt+0x358/0x5f0 [ 536.425619][T12761] write_ldt+0x358/0x5f0 [ 536.429869][T12761] ? __ia32_sys_modify_ldt+0x80/0x80 [ 536.435161][T12761] ? lock_chain_count+0x20/0x20 [ 536.440030][T12761] __se_sys_modify_ldt+0x16f/0x1b0 [ 536.445154][T12761] do_syscall_64+0x4c/0xa0 [ 536.449570][T12761] ? clear_bhb_loop+0x30/0x80 [ 536.454253][T12761] ? clear_bhb_loop+0x30/0x80 [ 536.458950][T12761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 536.464845][T12761] RIP: 0033:0x7fd74e84b559 [ 536.469263][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.488876][T12761] RSP: 002b:00007fd74caa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 536.497288][T12761] RAX: ffffffffffffffda RBX: 00007fd74ead2fa0 RCX: 00007fd74e84b559 [ 536.505261][T12761] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 536.511016][ T4262] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.513233][T12761] RBP: 00007fd74e8e2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 536.532101][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.533860][ T4262] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.540065][T12761] R13: 00007fd74ead3038 R14: 00007fd74ead2fa0 R15: 00007ffd66c4e778 [ 536.540097][T12761] [ 536.593436][ T4262] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 536.610853][ T4262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.617370][T12761] Mem-Info: [ 536.629699][T12761] active_anon:327 inactive_anon:8075 isolated_anon:0 [ 536.629699][T12761] active_file:24417 inactive_file:35976 isolated_file:0 [ 536.629699][T12761] unevictable:768 dirty:75 writeback:0 [ 536.629699][T12761] slab_reclaimable:21228 slab_unreclaimable:103551 [ 536.629699][T12761] mapped:30523 shmem:1693 pagetables:1081 bounce:0 [ 536.629699][T12761] kernel_misc_reclaimable:0 [ 536.629699][T12761] free:1340615 free_pcp:10641 free_cma:0 [ 536.681779][ T4262] usb 10-1: config 0 descriptor?? [ 536.701778][T12761] Node 0 active_anon:1208kB inactive_anon:31828kB active_file:97468kB inactive_file:143904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122100kB dirty:204kB writeback:0kB shmem:4632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11852kB pagetables:4316kB all_unreclaimable? no [ 536.736710][T12761] Node 1 active_anon:20kB inactive_anon:524kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 536.767471][T12761] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.780987][ T6031] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.806071][T12761] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 536.813963][ T6031] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 536.821056][T12761] Node 0 DMA32 free:1424708kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1208kB inactive_anon:31828kB active_file:97468kB inactive_file:143904kB unevictable:1536kB writepending:204kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:41612kB local_pcp:21308kB free_cma:0kB [ 536.824176][ T6031] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 536.863375][T12761] lowmem_reserve[]: 0 0 0 0 0 [ 536.864029][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.868466][T12761] Node 0 Normal free:8kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 536.906240][T12761] lowmem_reserve[]: 0 0 0 0 0 [ 536.911062][T12761] Node 1 Normal free:3922608kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:20kB inactive_anon:524kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2124kB local_pcp:0kB free_cma:0kB [ 536.938896][ T6031] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 536.939646][T12761] lowmem_reserve[]: 0 0 0 0 0 [ 536.952758][T12761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 536.966249][T12761] Node 0 DMA32: 3053*4kB (UME) 1430*8kB (UME) 1559*16kB (UME) 783*32kB (UME) 611*64kB (UME) 353*128kB (UME) 192*256kB (UME) 82*512kB (UME) 24*1024kB (ME) 14*2048kB (ME) 274*4096kB (M) = 1424628kB [ 536.985679][T12761] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 536.997657][T12761] Node 1 Normal: 232*4kB (UME) 44*8kB (UE) 17*16kB (UME) 165*32kB (UE) 76*64kB (UME) 26*128kB (UME) 12*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 951*4096kB (M) = 3922608kB [ 537.016045][T12761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 537.026372][T12761] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 537.035800][T12761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 537.045431][T12761] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 537.054995][T12761] 62055 total pagecache pages [ 537.059742][T12761] 0 pages in swap cache [ 537.065899][T12761] Swap cache stats: add 4437, delete 4437, find 470/616 [ 537.073084][T12761] Free swap = 124680kB [ 537.077482][T12761] Total swap = 124996kB [ 537.081997][T12761] 2097051 pages RAM [ 537.085864][T12761] 0 pages HighMem/MovableOnly [ 537.090524][T12761] 415313 pages reserved [ 537.095025][T12761] 0 pages cma reserved [ 537.150786][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 537.173227][ T4262] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 537.180171][ T4262] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 537.188193][ T4262] ft260 0003:0403:6030.0018: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 537.381076][ T4262] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 537.390766][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 537.470786][ T5994] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 537.510821][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.521773][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.531553][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.544399][ T1108] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 537.553482][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.566163][ T1108] usb 4-1: config 0 descriptor?? [ 537.820776][ T4262] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 537.840767][ T4262] ft260 0003:0403:6030.0018: failed to retrieve status: -71 [ 537.860878][ T4262] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 537.861104][ T5994] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 537.889256][ T5994] usb 9-1: config 0 interface 0 has no altsetting 0 [ 537.896073][ T5994] usb 9-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 537.900877][ T4262] usb 10-1: USB disconnect, device number 13 [ 537.912013][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.913695][T12809] udevd[12809]: open /dev/null failed: Not a directory [ 537.925691][ T5994] usb 9-1: config 0 descriptor?? [ 537.960993][T12803] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 538.190744][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 538.196710][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 538.210953][ T1108] usb 4-1: USB disconnect, device number 17 [ 538.410660][ T4316] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 538.433279][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x3 [ 538.440806][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.448191][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.456321][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.463748][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.471288][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.478662][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.486243][ T5994] hid-generic 0003:28DE:1205.0019: unknown main item tag 0x0 [ 538.503360][ T5994] hid-generic 0003:28DE:1205.0019: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.8-1/input0 [ 538.528983][T12816] udevd[12816]: open /dev/null failed: Not a directory [ 538.630683][ T4260] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 538.643631][ T5994] usb 9-1: USB disconnect, device number 28 [ 538.660778][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 538.790805][ T4316] usb 6-1: config 0 has no interfaces? [ 538.796970][ T4316] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.814058][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.835429][ T4316] usb 6-1: config 0 descriptor?? [ 538.970565][ T4260] usb 10-1: Using ep0 maxpacket: 16 [ 539.088624][ T5994] usb 6-1: USB disconnect, device number 27 [ 539.090704][ T4260] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.117828][ T4260] usb 10-1: config 0 interface 0 has no altsetting 0 [ 539.118216][ T5223] usb 3-1: USB disconnect, device number 12 [ 539.148699][ T5223] idmouse 3-1:1.0: disconnected [ 539.295959][ T4260] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 539.306443][ T4260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.314772][ T4260] usb 10-1: Product: syz [ 539.319374][ T4260] usb 10-1: Manufacturer: syz [ 539.324121][ T4260] usb 10-1: SerialNumber: syz [ 539.325826][T12844] jffs2: notice: (12844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 539.332512][ T4260] usb 10-1: config 0 descriptor?? [ 539.523197][ T5223] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 539.530827][ T4316] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 539.639847][ T4260] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input52 [ 539.652620][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 539.660082][ T1108] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 539.692031][ T4260] imon:send_packet: packet tx failed (-71) [ 539.710670][ T4260] imon 10-1:0.0: panel buttons/knobs setup failed [ 539.796146][ T4260] rc_core: IR keymap rc-imon-pad not found [ 539.802310][ T4260] Registered IR keymap rc-empty [ 539.807291][ T4260] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 539.817576][ T4260] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 539.840563][ T4260] imon:send_packet: packet tx failed (-71) [ 539.860578][ T4260] imon 10-1:0.0: remote input dev register failed [ 539.867052][ T4260] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 539.903651][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 539.915236][ T4260] imon 10-1:0.0: unable to initialize intf0, err 0 [ 539.930316][ T4260] imon:imon_probe: failed to initialize context! [ 539.937148][ T4260] imon 10-1:0.0: unable to register, err -19 [ 539.950504][ T5223] usb 3-1: Using ep0 maxpacket: 32 [ 539.960914][ T4260] usb 10-1: USB disconnect, device number 14 [ 540.020619][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.040599][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.057754][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.079100][ T1108] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 540.088520][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.102538][ T4316] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 540.109648][ T1108] usb 4-1: config 0 descriptor?? [ 540.111714][ T5223] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 540.117638][ T4316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.296886][ T5223] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 540.306362][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.314806][ T5223] usb 3-1: Product: syz [ 540.319108][ T5223] usb 3-1: Manufacturer: syz [ 540.323996][ T5223] usb 3-1: SerialNumber: syz [ 540.336326][ T5223] usb 3-1: config 0 descriptor?? [ 540.337767][ T4260] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 540.382283][ T5223] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 540.391284][ T5223] dvb-usb: bulk message failed: -22 (2/0) [ 540.411846][ T5223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.450555][ T5223] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 540.458569][ T5223] usb 3-1: media controller created [ 540.475675][ T5223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.515774][ T5223] usb 3-1: selecting invalid altsetting 7 [ 540.527468][ T5223] cxusb: set interface failed [ 540.533239][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 540.567763][ T5223] DVB: Unable to find symbol lgdt330x_attach() [ 540.580427][ T4260] usb 10-1: Using ep0 maxpacket: 16 [ 540.580786][ T5223] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 540.594566][T12833] cxusb: i2c wr: len=79 is too big! [ 540.594566][T12833] [ 540.640619][ T4316] usb 9-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 540.649126][ T4316] usb 9-1: Firmware version (0.0) predates our first public release. [ 540.664841][ T4316] usb 9-1: Please update to version 0.2 or newer [ 540.700533][ T4260] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.720365][ T4260] usb 10-1: config 0 interface 0 has no altsetting 0 [ 540.727215][ T4316] usb 9-1: atusb_probe: initialization failed, error = -32 [ 540.740727][ T4316] atusb: probe of 9-1:1.0 failed with error -32 [ 540.750603][ T5223] rc_core: IR keymap rc-dvico-portable not found [ 540.756938][ T5223] Registered IR keymap rc-empty [ 540.772783][ T5223] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 540.801386][ T5223] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input54 [ 540.838034][ T5223] dvb-usb: schedule remote query interval to 100 msecs. [ 540.853328][ T5223] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 540.877386][ T5223] usb 3-1: USB disconnect, device number 13 [ 540.890679][ T4260] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 540.909153][ T4260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.928117][ T4260] usb 10-1: Product: syz [ 540.932948][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 540.938866][ T5223] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 540.950322][ T4260] usb 10-1: Manufacturer: syz [ 540.955419][ T4260] usb 10-1: SerialNumber: syz [ 540.962083][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 540.970228][ T4260] usb 10-1: config 0 descriptor?? [ 540.981674][ T1108] usb 4-1: USB disconnect, device number 18 [ 541.049219][T12882] UBIFS error (pid: 12882): cannot open "ubi0_0", error -19 [ 541.255106][ T4260] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input55 [ 541.503291][T12894] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 541.519036][T12894] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 541.690301][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 541.697996][ T4260] imon:send_packet: packet tx failed (-71) [ 541.733458][ T4260] imon 10-1:0.0: panel buttons/knobs setup failed [ 541.830456][ T4260] rc_core: IR keymap rc-imon-pad not found [ 541.839720][ T4260] Registered IR keymap rc-empty [ 541.858233][ T4260] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 541.892865][ T4260] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 541.920527][ T4260] imon:send_packet: packet tx failed (-71) [ 541.960455][ T4260] imon 10-1:0.0: remote input dev register failed [ 541.971430][ T4260] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 542.016587][ T4260] imon 10-1:0.0: unable to initialize intf0, err 0 [ 542.042791][ T4260] imon:imon_probe: failed to initialize context! [ 542.059815][ T4260] imon 10-1:0.0: unable to register, err -19 [ 542.077644][ T4260] usb 10-1: USB disconnect, device number 15 [ 542.261187][ T5223] usb 9-1: USB disconnect, device number 29 [ 542.261861][T12936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2244'. [ 542.492684][T12939] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 543.248022][T12992] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 543.258251][T12994] loop8: detected capacity change from 0 to 7 [ 543.267642][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 543.277198][T12994] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 543.284801][ T5223] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 543.296581][T12994] loop8: partition table partially beyond EOD, truncated [ 543.304426][T12994] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 543.306804][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 543.323731][T12994] loop8: p2 start 121280928 is beyond EOD, truncated [ 543.326672][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop8p1, 10) failed: Not a directory [ 543.385542][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 543.423129][ T8833] udevd[8833]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 543.491063][ T5223] usb 3-1: device descriptor read/64, error -71 [ 543.780786][ T5223] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 543.986448][ T25] audit: type=1807 audit(1792316646.007:628): UNKNOWN=app res=0 [ 543.989539][T13037] ima: policy update failed [ 544.004734][ T25] audit: type=1802 audit(1792316646.007:629): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.2283" res=0 errno=0 [ 544.029530][ T25] audit: type=1802 audit(1792316646.027:630): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2283" res=0 errno=0 [ 544.036204][T13039] netlink: 'syz.8.2284': attribute type 2 has an invalid length. [ 544.046910][ T5223] usb 3-1: device descriptor read/64, error -71 [ 544.072970][T13039] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2284'. [ 544.130060][ T4316] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 544.191151][ T5223] usb usb3-port1: attempt power cycle [ 544.400168][ T4316] usb 10-1: Using ep0 maxpacket: 16 [ 544.535006][ T4316] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.546748][ T4316] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.564054][ T5994] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 544.572113][ T4316] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.593155][ T4316] usb 10-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 544.605729][ T4316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.618187][ T5223] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 544.639633][ T4316] usb 10-1: config 0 descriptor?? [ 544.735232][ T5223] usb 3-1: device descriptor read/8, error -71 [ 544.769745][T13057] netlink: 'syz.5.2291': attribute type 10 has an invalid length. [ 544.870005][ T5994] usb 9-1: Using ep0 maxpacket: 16 [ 545.009968][ T5994] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.029868][ T5223] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 545.037543][ T5994] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.057747][ T5994] usb 9-1: config 0 interface 0 has no altsetting 0 [ 545.072853][ T5994] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 545.087794][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.109399][ T5994] usb 9-1: config 0 descriptor?? [ 545.160020][ T5223] usb 3-1: device descriptor read/8, error -71 [ 545.280407][ T5223] usb usb3-port1: unable to enumerate USB device [ 545.497376][T13082] netlink: 'syz.5.2302': attribute type 10 has an invalid length. [ 545.520020][ T4316] usbhid 10-1:0.0: can't add hid device: -71 [ 545.526196][ T4316] usbhid: probe of 10-1:0.0 failed with error -71 [ 545.541176][T13082] team0: Port device dummy0 added [ 545.554856][ T4316] usb 10-1: USB disconnect, device number 16 [ 545.571551][T13084] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 545.579555][T13084] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 545.592449][ T5994] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 545.600148][ T5994] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 545.607190][ T5994] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 545.626527][ T5994] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 545.634129][ T5994] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 545.641733][ T5994] mcp2221 0003:04D8:00DD.001A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 545.821558][ T5994] usb 9-1: USB disconnect, device number 30 [ 546.672282][T13127] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2320'. [ 546.909601][ T6031] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 547.114495][T13147] FAULT_INJECTION: forcing a failure. [ 547.114495][T13147] name fail_futex, interval 1, probability 0, space 0, times 0 [ 547.140244][T13147] CPU: 0 PID: 13147 Comm: syz.3.2328 Not tainted syzkaller #0 [ 547.147718][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.149584][ T6031] usb 3-1: Using ep0 maxpacket: 16 [ 547.157768][T13147] Call Trace: [ 547.157778][T13147] [ 547.157785][T13147] dump_stack_lvl+0x188/0x250 [ 547.157811][T13147] ? show_regs_print_info+0x20/0x20 [ 547.178913][T13147] ? load_image+0x410/0x410 [ 547.183419][T13147] ? __lock_acquire+0x12df/0x7d40 [ 547.188453][T13147] ? mark_lock+0x94/0x320 [ 547.192785][T13147] should_fail+0x383/0x4b0 [ 547.197211][T13147] get_futex_key+0x1a1/0x12d0 [ 547.201901][T13147] ? futex_wait_restart+0x250/0x250 [ 547.207118][T13147] futex_wake+0x101/0x540 [ 547.211459][T13147] ? verify_lock_unused+0x140/0x140 [ 547.216663][T13147] ? verify_lock_unused+0x140/0x140 [ 547.221866][T13147] ? futex_wait+0x680/0x680 [ 547.226372][T13147] do_futex+0xd83/0x12b0 [ 547.230618][T13147] ? __might_sleep+0xf0/0xf0 [ 547.235210][T13147] ? __might_fault+0xb7/0x110 [ 547.239894][T13147] ? futex_exit_release+0x1c0/0x1c0 [ 547.245096][T13147] ? __lock_acquire+0x7d40/0x7d40 [ 547.250135][T13147] mm_release+0x278/0x3c0 [ 547.254542][T13147] ? exit_mm_release+0x30/0x30 [ 547.259313][T13147] ? lockdep_hardirqs_on+0x94/0x140 [ 547.264529][T13147] exit_mm+0xaf/0x7b0 [ 547.268562][T13147] ? perf_pmu_migrate_context+0xb70/0xb70 [ 547.274301][T13147] ? do_exit+0x2110/0x2110 [ 547.278717][T13147] ? rcu_is_watching+0x11/0xa0 [ 547.283534][T13147] ? mm_trace_rss_stat+0x81/0x1c0 [ 547.288563][T13147] ? sync_mm_rss+0x211/0x350 [ 547.289765][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.293158][T13147] do_exit+0x5b8/0x2110 [ 547.293185][T13147] ? put_task_struct+0x80/0x80 [ 547.312891][T13147] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 547.318878][T13147] ? cgroup_freezing+0x264/0x310 [ 547.323826][T13147] do_group_exit+0x12c/0x2f0 [ 547.328415][T13147] ? lockdep_hardirqs_on+0x94/0x140 [ 547.333635][T13147] get_signal+0x7eb/0x12e0 [ 547.338071][T13147] arch_do_signal_or_restart+0xe6/0x12a0 [ 547.340066][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.343777][T13147] ? futex_exit_release+0x1c0/0x1c0 [ 547.343801][T13147] ? get_sigframe_size+0x10/0x10 [ 547.363573][T13147] ? __context_tracking_exit+0x4c/0x80 [ 547.369031][T13147] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 547.375007][T13147] ? exit_to_user_mode_loop+0x3b/0x130 [ 547.380452][T13147] exit_to_user_mode_loop+0x9e/0x130 [ 547.385723][T13147] exit_to_user_mode_prepare+0xee/0x180 [ 547.391248][T13147] syscall_exit_to_user_mode+0x16/0x40 [ 547.396685][T13147] do_syscall_64+0x58/0xa0 [ 547.401083][T13147] ? clear_bhb_loop+0x30/0x80 [ 547.405742][T13147] ? clear_bhb_loop+0x30/0x80 [ 547.410403][T13147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.416280][T13147] RIP: 0033:0x7f158995f559 [ 547.420677][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.440263][T13147] RSP: 002b:00007f1587bb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 547.448655][T13147] RAX: fffffffffffffe00 RBX: 00007f1589be6fa8 RCX: 00007f158995f559 [ 547.456605][T13147] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1589be6fa8 [ 547.464558][T13147] RBP: 00007f1589be6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 547.472511][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.480464][T13147] R13: 00007f1589be7038 R14: 00007ffc26924940 R15: 00007ffc26924a28 [ 547.488424][T13147] [ 547.503426][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.525048][ T6031] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 547.551029][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2335'. [ 547.566330][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.587714][ T6031] usb 3-1: config 0 descriptor?? [ 548.220081][ T4261] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 548.493678][ T4261] usb 4-1: Using ep0 maxpacket: 16 [ 548.637108][ T4261] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.675612][ T4261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 548.789434][ T6031] usbhid 3-1:0.0: can't add hid device: -71 [ 548.795397][ T6031] usbhid: probe of 3-1:0.0 failed with error -71 [ 548.811861][ T6031] usb 3-1: USB disconnect, device number 18 [ 548.869355][ T1108] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 548.869546][ T4261] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 548.906295][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.926520][ T4261] usb 4-1: Product: syz [ 548.932951][ T4261] usb 4-1: Manufacturer: syz [ 548.947146][ T4261] usb 4-1: SerialNumber: syz [ 548.955431][T13231] overlayfs: failed to clone upperpath [ 548.976301][ T4261] usb 4-1: config 0 descriptor?? [ 549.231503][ T1108] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.256918][ T4261] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57 [ 549.360218][ T1108] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 549.370721][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 549.379074][ T1108] usb 9-1: Product: syz [ 549.384324][ T1108] usb 9-1: Manufacturer: syz [ 549.414081][ T25] audit: type=1800 audit(1792316658.446:631): pid=13261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2361" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 549.442851][ T1108] usb 9-1: selecting invalid altsetting 1 [ 549.453933][ T1108] dvb_ttusb_budget: ttusb_init_controller: error [ 549.462418][ T1108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 549.559526][ T1108] DVB: Unable to find symbol cx22700_attach() [ 549.578509][T13270] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2363'. [ 549.596526][ T4261] rc_core: IR keymap rc-imon-pad not found [ 549.598834][T13270] netlink: 'syz.9.2363': attribute type 2 has an invalid length. [ 549.602516][ T4261] Registered IR keymap rc-empty [ 549.613232][ T1108] DVB: Unable to find symbol tda10046_attach() [ 549.627222][ T4261] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 549.628306][ T1108] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 549.647655][ T4261] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 549.649145][T13220] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 549.670145][T13271] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2363'. [ 549.681376][ T1108] usb 9-1: USB disconnect, device number 31 [ 549.750582][ T4261] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 549.787022][ T4261] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 549.821378][ T4261] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:19> initialized [ 549.968520][ T4316] usb 4-1: USB disconnect, device number 19 [ 550.071562][T13281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 551.019359][ T4260] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 551.048687][T13306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.259381][ T4260] usb 10-1: Using ep0 maxpacket: 16 [ 551.389404][ T4260] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.403006][ T4260] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.428717][ T4260] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.450470][ T4260] usb 10-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 551.467042][ T4260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.476941][ T4260] usb 10-1: config 0 descriptor?? [ 551.529441][ T4316] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 551.656599][T13346] jffs2: notice: (13346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 551.856020][T13356] FAULT_INJECTION: forcing a failure. [ 551.856020][T13356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.870714][T13356] CPU: 1 PID: 13356 Comm: syz.2.2388 Not tainted syzkaller #0 [ 551.878173][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.883050][ T4316] usb 9-1: Using ep0 maxpacket: 32 [ 551.888206][T13356] Call Trace: [ 551.896942][T13356] [ 551.899872][T13356] dump_stack_lvl+0x188/0x250 [ 551.904530][T13356] ? show_regs_print_info+0x20/0x20 [ 551.909704][T13356] ? load_image+0x410/0x410 [ 551.914200][T13356] should_fail+0x383/0x4b0 [ 551.918617][T13356] prepare_alloc_pages+0x1e3/0x5b0 [ 551.923714][T13356] __alloc_pages+0x11b/0x480 [ 551.928283][T13356] ? zone_statistics+0x170/0x170 [ 551.933208][T13356] ? rcu_lock_acquire+0x30/0x30 [ 551.938132][T13356] ? alloc_pages+0x452/0x560 [ 551.942729][T13356] __get_free_pages+0x8/0x30 [ 551.947299][T13356] __tlb_remove_page_size+0x1f2/0x3f0 [ 551.952655][T13356] unmap_page_range+0xfcf/0x2410 [ 551.957584][T13356] unmap_vmas+0x131/0x250 [ 551.961890][T13356] ? unmap_page_range+0x2410/0x2410 [ 551.967063][T13356] ? __mutex_lock_common+0x435/0x2400 [ 551.972412][T13356] ? exit_mm_release+0x16/0x30 [ 551.977156][T13356] exit_mmap+0x3b9/0x640 [ 551.981386][T13356] ? vm_brk+0x20/0x20 [ 551.985383][T13356] ? uprobe_clear_state+0x2f6/0x460 [ 551.990578][T13356] __mmput+0x115/0x390 [ 551.994885][T13356] exit_mm+0x632/0x7b0 [ 551.998931][T13356] ? perf_pmu_migrate_context+0xb70/0xb70 [ 552.004628][T13356] ? do_exit+0x2110/0x2110 [ 552.009023][T13356] ? __ia32_sys_timer_delete+0x40/0x40 [ 552.014504][T13356] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 552.019945][T13356] ? tty_audit_exit+0x149/0x1f0 [ 552.024824][T13356] do_exit+0x5b8/0x2110 [ 552.028968][T13356] ? put_task_struct+0x80/0x80 [ 552.033720][T13356] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 552.039710][T13356] ? cgroup_freezing+0x264/0x310 [ 552.044649][T13356] do_group_exit+0x12c/0x2f0 [ 552.049234][T13356] ? lockdep_hardirqs_on+0x94/0x140 [ 552.054416][T13356] get_signal+0x7eb/0x12e0 [ 552.058819][T13356] arch_do_signal_or_restart+0xe6/0x12a0 [ 552.064429][T13356] ? sock_do_ioctl+0x1c1/0x320 [ 552.069187][T13356] ? futex_exit_release+0x1c0/0x1c0 [ 552.074378][T13356] ? get_sigframe_size+0x10/0x10 [ 552.079297][T13356] ? __context_tracking_exit+0x4c/0x80 [ 552.084763][T13356] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 552.090750][T13356] ? exit_to_user_mode_loop+0x3b/0x130 [ 552.096442][T13356] exit_to_user_mode_loop+0x9e/0x130 [ 552.101707][T13356] exit_to_user_mode_prepare+0xee/0x180 [ 552.107227][T13356] syscall_exit_to_user_mode+0x16/0x40 [ 552.112662][T13356] do_syscall_64+0x58/0xa0 [ 552.117056][T13356] ? clear_bhb_loop+0x30/0x80 [ 552.121715][T13356] ? clear_bhb_loop+0x30/0x80 [ 552.126375][T13356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.132251][T13356] RIP: 0033:0x7f13b9f23559 [ 552.136661][T13356] Code: Unable to access opcode bytes at RIP 0x7f13b9f2352f. [ 552.144015][T13356] RSP: 002b:00007f13b817b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 552.152421][T13356] RAX: 0000000000000001 RBX: 00007f13ba1aafa8 RCX: 00007f13b9f23559 [ 552.160370][T13356] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13ba1aafac [ 552.168317][T13356] RBP: 00007f13ba1aafa0 R08: 0031700407bbe49c R09: 0000000000000000 [ 552.176263][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.179573][ T4316] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 552.184210][T13356] R13: 00007f13ba1ab038 R14: 00007ffe893c8000 R15: 00007ffe893c80e8 [ 552.192378][ T5223] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 552.200476][T13356] [ 552.634146][T13363] Cannot find set identified by id 0 to match [ 552.740410][ T4316] usb 9-1: config 0 has no interface number 0 [ 552.746524][ T4316] usb 9-1: config 0 interface 12 has no altsetting 0 [ 552.872620][T13374] sctp: [Deprecated]: syz.5.2394 (pid 13374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.872620][T13374] Use struct sctp_sack_info instead [ 552.919508][ T4260] usbhid 10-1:0.0: can't add hid device: -71 [ 552.925571][ T4260] usbhid: probe of 10-1:0.0 failed with error -71 [ 552.963510][ T4260] usb 10-1: USB disconnect, device number 17 [ 552.979631][ T4316] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 552.990977][ T4316] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.999087][ T4316] usb 9-1: Product: syz [ 553.003967][ T4316] usb 9-1: Manufacturer: syz [ 553.008628][ T4316] usb 9-1: SerialNumber: syz [ 553.023813][ T4316] usb 9-1: config 0 descriptor?? [ 553.039188][ T5223] usb 4-1: Using ep0 maxpacket: 32 [ 553.279847][ T5223] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 553.288941][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 553.297597][ T5223] usb 4-1: SerialNumber: syz [ 553.312377][ T5223] usb 4-1: config 0 descriptor?? [ 553.368823][ T5223] as10x_usb: device has been detected [ 553.376727][ T5223] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 553.430333][ T5223] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 553.540606][ T5223] as10x_usb: error during firmware upload part1 [ 553.547441][ T5223] Registered device nBox DVB-T Dongle [ 553.617214][ T4260] usb 4-1: USB disconnect, device number 20 [ 553.653289][ T4260] Unregistered device nBox DVB-T Dongle [ 553.659265][ T4260] as10x_usb: device has been disconnected [ 554.309833][T13411] netlink: 'syz.2.2407': attribute type 27 has an invalid length. [ 554.340760][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 554.347868][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 554.414124][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 554.436857][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 554.451937][T13421] FAULT_INJECTION: forcing a failure. [ 554.451937][T13421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.462749][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 554.465207][T13421] CPU: 1 PID: 13421 Comm: syz.9.2412 Not tainted syzkaller #0 [ 554.479798][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.489846][T13421] Call Trace: [ 554.493116][T13421] [ 554.496038][T13421] dump_stack_lvl+0x188/0x250 [ 554.500708][T13421] ? show_regs_print_info+0x20/0x20 [ 554.505893][T13421] ? load_image+0x410/0x410 [ 554.510389][T13421] should_fail+0x383/0x4b0 [ 554.514796][T13421] prepare_alloc_pages+0x1e3/0x5b0 [ 554.519896][T13421] __alloc_pages+0x11b/0x480 [ 554.524473][T13421] ? zone_statistics+0x170/0x170 [ 554.529396][T13421] ? rcu_lock_acquire+0x30/0x30 [ 554.534231][T13421] ? alloc_pages+0x452/0x560 [ 554.538805][T13421] __get_free_pages+0x8/0x30 [ 554.543380][T13421] __tlb_remove_page_size+0x1f2/0x3f0 [ 554.548737][T13421] unmap_page_range+0xfcf/0x2410 [ 554.553677][T13421] unmap_vmas+0x131/0x250 [ 554.557988][T13421] ? unmap_page_range+0x2410/0x2410 [ 554.563165][T13421] ? __mutex_lock_common+0x435/0x2400 [ 554.568522][T13421] ? exit_mm_release+0x16/0x30 [ 554.573280][T13421] exit_mmap+0x3b9/0x640 [ 554.577506][T13421] ? vm_brk+0x20/0x20 [ 554.581482][T13421] ? uprobe_clear_state+0x2f6/0x460 [ 554.586665][T13421] __mmput+0x115/0x390 [ 554.590715][T13421] exit_mm+0x632/0x7b0 [ 554.594766][T13421] ? perf_pmu_migrate_context+0xb70/0xb70 [ 554.600470][T13421] ? do_exit+0x2110/0x2110 [ 554.604866][T13421] ? __ia32_sys_timer_delete+0x40/0x40 [ 554.610305][T13421] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 554.615749][T13421] ? tty_audit_exit+0x149/0x1f0 [ 554.620586][T13421] do_exit+0x5b8/0x2110 [ 554.624729][T13421] ? put_task_struct+0x80/0x80 [ 554.629473][T13421] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 554.635438][T13421] ? cgroup_freezing+0x264/0x310 [ 554.640367][T13421] do_group_exit+0x12c/0x2f0 [ 554.644939][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 554.650125][T13421] get_signal+0x7eb/0x12e0 [ 554.654534][T13421] arch_do_signal_or_restart+0xe6/0x12a0 [ 554.660150][T13421] ? percpu_counter_add_batch+0x135/0x150 [ 554.665858][T13421] ? futex_exit_release+0x1c0/0x1c0 [ 554.671039][T13421] ? get_sigframe_size+0x10/0x10 [ 554.675959][T13421] ? __context_tracking_exit+0x4c/0x80 [ 554.681417][T13421] ? exit_to_user_mode_loop+0x3b/0x130 [ 554.686860][T13421] exit_to_user_mode_loop+0x9e/0x130 [ 554.692125][T13421] exit_to_user_mode_prepare+0xee/0x180 [ 554.697651][T13421] syscall_exit_to_user_mode+0x16/0x40 [ 554.703087][T13421] do_syscall_64+0x58/0xa0 [ 554.707486][T13421] ? clear_bhb_loop+0x30/0x80 [ 554.712144][T13421] ? clear_bhb_loop+0x30/0x80 [ 554.716804][T13421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.722680][T13421] RIP: 0033:0x7f9dc65b0559 [ 554.727074][T13421] Code: Unable to access opcode bytes at RIP 0x7f9dc65b052f. [ 554.734419][T13421] RSP: 002b:00007f9dc48080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.742813][T13421] RAX: 0000000000000001 RBX: 00007f9dc6837fa8 RCX: 00007f9dc65b0559 [ 554.750765][T13421] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dc6837fac [ 554.758716][T13421] RBP: 00007f9dc6837fa0 R08: 0018ffebe2e19a3a R09: 0000000000000000 [ 554.766666][T13421] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 554.774616][T13421] R13: 00007f9dc6838038 R14: 00007ffee774ff90 R15: 00007ffee7750078 [ 554.782578][T13421] [ 554.799669][T13411] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 554.808750][T13411] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 555.139382][ T5994] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 555.189440][ T4316] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 555.197011][ T4316] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 555.205763][ T4316] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 555.213609][ T4316] f81534: probe of 9-1:0.12 failed with error -71 [ 555.233781][ T4316] usb 9-1: USB disconnect, device number 32 [ 555.409370][ T5994] usb 10-1: Using ep0 maxpacket: 16 [ 555.549661][ T5994] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.578040][ T5994] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.599351][ T5994] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.634928][ T5994] usb 10-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 555.667858][ T5994] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.716904][ T5994] usb 10-1: config 0 descriptor?? [ 555.957436][T13477] FAULT_INJECTION: forcing a failure. [ 555.957436][T13477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.972161][T13479] atomic_op ffff8880222d2998 conn xmit_atomic 0000000000000000 [ 555.989417][T13477] CPU: 1 PID: 13477 Comm: syz.3.2437 Not tainted syzkaller #0 [ 555.996888][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.006940][T13477] Call Trace: [ 556.010224][T13477] [ 556.013152][T13477] dump_stack_lvl+0x188/0x250 [ 556.017840][T13477] ? show_regs_print_info+0x20/0x20 [ 556.023043][T13477] ? load_image+0x410/0x410 [ 556.027545][T13477] should_fail+0x383/0x4b0 [ 556.031950][T13477] get_futex_key+0x1a1/0x12d0 [ 556.036621][T13477] ? __lock_acquire+0x13b3/0x7d40 [ 556.041633][T13477] ? futex_wait_restart+0x250/0x250 [ 556.046822][T13477] futex_wake+0x101/0x540 [ 556.051140][T13477] ? futex_wait+0x680/0x680 [ 556.055627][T13477] ? verify_lock_unused+0x140/0x140 [ 556.060817][T13477] ? verify_lock_unused+0x140/0x140 [ 556.066014][T13477] do_futex+0xd83/0x12b0 [ 556.070258][T13477] ? futex_exit_release+0x1c0/0x1c0 [ 556.075442][T13477] ? __context_tracking_exit+0x4c/0x80 [ 556.080886][T13477] __se_sys_futex+0x389/0x420 [ 556.085547][T13477] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 556.091512][T13477] ? __x64_sys_futex+0xf0/0xf0 [ 556.096264][T13477] ? __x64_sys_futex+0x1d/0xf0 [ 556.101014][T13477] do_syscall_64+0x4c/0xa0 [ 556.105416][T13477] ? clear_bhb_loop+0x30/0x80 [ 556.110077][T13477] ? clear_bhb_loop+0x30/0x80 [ 556.114741][T13477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.120618][T13477] RIP: 0033:0x7f158995f559 [ 556.125017][T13477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.144603][T13477] RSP: 002b:00007f1587bb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.153000][T13477] RAX: ffffffffffffffda RBX: 00007f1589be6fa8 RCX: 00007f158995f559 [ 556.160955][T13477] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1589be6fac [ 556.168907][T13477] RBP: 00007f1589be6fa0 R08: 003765e8c1fd1956 R09: 0000000000000000 [ 556.176859][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.184818][T13477] R13: 00007f1589be7038 R14: 00007ffc26924940 R15: 00007ffc26924a28 [ 556.192813][T13477] [ 556.533980][T13495] FAULT_INJECTION: forcing a failure. [ 556.533980][T13495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.547396][T13495] CPU: 0 PID: 13495 Comm: syz.8.2445 Not tainted syzkaller #0 [ 556.554857][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.564909][T13495] Call Trace: [ 556.568185][T13495] [ 556.571113][T13495] dump_stack_lvl+0x188/0x250 [ 556.575796][T13495] ? verify_lock_unused+0x140/0x140 [ 556.580997][T13495] ? show_regs_print_info+0x20/0x20 [ 556.586199][T13495] ? load_image+0x410/0x410 [ 556.590717][T13495] should_fail+0x383/0x4b0 [ 556.595143][T13495] prepare_alloc_pages+0x1e3/0x5b0 [ 556.600271][T13495] __alloc_pages+0x11b/0x480 [ 556.604869][T13495] ? zone_statistics+0x170/0x170 [ 556.609811][T13495] ? rcu_lock_acquire+0x30/0x30 [ 556.614667][T13495] ? alloc_pages+0x452/0x560 [ 556.619267][T13495] __get_free_pages+0x8/0x30 [ 556.623858][T13495] __tlb_remove_page_size+0x1f2/0x3f0 [ 556.629240][T13495] unmap_page_range+0xfcf/0x2410 [ 556.634207][T13495] unmap_vmas+0x131/0x250 [ 556.638541][T13495] ? unmap_page_range+0x2410/0x2410 [ 556.643739][T13495] ? __mutex_lock_common+0x435/0x2400 [ 556.649114][T13495] ? exit_mm_release+0x16/0x30 [ 556.653895][T13495] exit_mmap+0x3b9/0x640 [ 556.655375][T13500] netlink: 'syz.5.2449': attribute type 10 has an invalid length. [ 556.658144][T13495] ? vm_brk+0x20/0x20 [ 556.658183][T13495] ? uprobe_clear_state+0x2f6/0x460 [ 556.675087][T13495] __mmput+0x115/0x390 [ 556.679165][T13495] exit_mm+0x632/0x7b0 [ 556.683231][T13495] ? perf_pmu_migrate_context+0xb70/0xb70 [ 556.688958][T13495] ? do_exit+0x2110/0x2110 [ 556.693363][T13495] ? __ia32_sys_timer_delete+0x40/0x40 [ 556.698810][T13495] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 556.704259][T13495] ? tty_audit_exit+0x149/0x1f0 [ 556.709095][T13495] do_exit+0x5b8/0x2110 [ 556.713236][T13495] ? put_task_struct+0x80/0x80 [ 556.717981][T13495] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 556.723950][T13495] ? cgroup_freezing+0x264/0x310 [ 556.728876][T13495] do_group_exit+0x12c/0x2f0 [ 556.733444][T13495] ? lockdep_hardirqs_on+0x94/0x140 [ 556.738627][T13495] get_signal+0x7eb/0x12e0 [ 556.743038][T13495] arch_do_signal_or_restart+0xe6/0x12a0 [ 556.748657][T13495] ? sock_do_ioctl+0x25b/0x320 [ 556.753412][T13495] ? futex_exit_release+0x1c0/0x1c0 [ 556.758593][T13495] ? get_sigframe_size+0x10/0x10 [ 556.763511][T13495] ? __context_tracking_exit+0x4c/0x80 [ 556.768962][T13495] ? exit_to_user_mode_loop+0x3b/0x130 [ 556.774403][T13495] exit_to_user_mode_loop+0x9e/0x130 [ 556.779668][T13495] exit_to_user_mode_prepare+0xee/0x180 [ 556.785196][T13495] syscall_exit_to_user_mode+0x16/0x40 [ 556.790632][T13495] do_syscall_64+0x58/0xa0 [ 556.795030][T13495] ? clear_bhb_loop+0x30/0x80 [ 556.799688][T13495] ? clear_bhb_loop+0x30/0x80 [ 556.804346][T13495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.810220][T13495] RIP: 0033:0x7fd74e84b559 [ 556.814615][T13495] Code: Unable to access opcode bytes at RIP 0x7fd74e84b52f. [ 556.821959][T13495] RSP: 002b:00007fd74caa30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.830352][T13495] RAX: 0000000000000001 RBX: 00007fd74ead2fa8 RCX: 00007fd74e84b559 [ 556.838302][T13495] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd74ead2fac [ 556.846252][T13495] RBP: 00007fd74ead2fa0 R08: 001dc4a1c4f22008 R09: 0000000000000000 [ 556.854206][T13495] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 556.862155][T13495] R13: 00007fd74ead3038 R14: 00007ffd66c4e690 R15: 00007ffd66c4e778 [ 556.870119][T13495] [ 556.873218][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.925767][T13500] device macvlan0 entered promiscuous mode [ 556.988371][T13500] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 557.006243][T13505] tipc: Started in network mode [ 557.013474][T13505] tipc: Node identity 2000004, cluster identity 4711 [ 557.041589][T13505] tipc: Node number set to 33554436 [ 557.054777][T13513] xt_hl: Unknown TTL match mode: 29 [ 557.380604][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 557.413886][T13537] overlayfs: overlapping lowerdir path [ 557.479822][ T5994] usbhid 10-1:0.0: can't add hid device: -71 [ 557.492751][ T5994] usbhid: probe of 10-1:0.0 failed with error -71 [ 557.513572][ T5994] usb 10-1: USB disconnect, device number 18 [ 557.544115][T13542] device syzkaller1 entered promiscuous mode [ 557.582931][T13544] overlayfs: failed to clone upperpath [ 557.985154][T13560] device syzkaller1 left promiscuous mode [ 558.296465][T13579] ioremap: invalid physical address 8000000000000000 [ 558.306980][T13579] ------------[ cut here ]------------ [ 558.316847][T13579] WARNING: CPU: 1 PID: 13579 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 558.335895][T13579] Modules linked in: [ 558.342688][T13579] CPU: 1 PID: 13579 Comm: syz.2.2480 Not tainted syzkaller #0 [ 558.356024][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.368980][T13579] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 558.381716][T13579] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 b8 81 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 558.410383][T13579] RSP: 0018:ffffc900033cf900 EFLAGS: 00010246 [ 558.416610][T13579] RAX: 0000000000000032 RBX: 1ffff92000679f00 RCX: f009372439822500 [ 558.425484][T13579] RDX: ffffc90018bd8000 RSI: 0000000000007f10 RDI: 0000000000007f11 [ 558.436372][T13579] RBP: ffffc900033cfa10 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 558.447092][T13579] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: 000000000000002e [ 558.458158][T13579] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 558.466605][T13579] FS: 00007f13b817b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 558.475747][T13579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.482354][T13579] CR2: 00007f13b9f70c40 CR3: 000000007d6c8000 CR4: 00000000003506e0 [ 558.490587][T13579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.499137][T13579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.507502][T13579] Call Trace: [ 558.510814][T13579] [ 558.513749][T13579] ? phram_setup+0x87c/0xdf0 [ 558.518381][T13579] ? ioremap+0x30/0x30 [ 558.522784][T13579] phram_setup+0x87c/0xdf0 [ 558.527216][T13579] ? __mutex_lock_common+0x435/0x2400 [ 558.532660][T13579] ? phram_param_call+0x70/0x70 [ 558.537647][T13579] ? mutex_lock_io_nested+0x60/0x60 [ 558.539755][ T5994] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 558.543168][T13579] ? read_lock_is_recursive+0x10/0x10 [ 558.567497][T13579] param_attr_store+0x20a/0x300 [ 558.572432][T13579] ? param_attr_show+0x170/0x170 [ 558.577390][T13579] ? sysfs_kf_read+0x350/0x350 [ 558.586603][T13579] module_attr_store+0x5b/0x80 [ 558.591690][T13579] kernfs_fop_write_iter+0x3a8/0x500 [ 558.597926][T13579] vfs_write+0x748/0xd70 [ 558.602481][T13579] ? file_end_write+0x250/0x250 [ 558.607349][T13579] ? mutex_lock_nested+0x17/0x20 [ 558.612581][T13579] ? __fdget_pos+0x2bf/0x370 [ 558.617175][T13579] ? ksys_write+0x70/0x260 [ 558.621723][T13579] ksys_write+0x153/0x260 [ 558.626060][T13579] ? __ia32_sys_read+0x80/0x80 [ 558.630888][T13579] ? lockdep_hardirqs_on+0x94/0x140 [ 558.636098][T13579] do_syscall_64+0x4c/0xa0 [ 558.640595][T13579] ? clear_bhb_loop+0x30/0x80 [ 558.645281][T13579] ? clear_bhb_loop+0x30/0x80 [ 558.650022][T13579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 558.655922][T13579] RIP: 0033:0x7f13b9f23559 [ 558.662097][T13579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.682109][T13579] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.690577][T13579] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 558.699141][T13579] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 558.707170][T13579] RBP: 00007f13b9fbaab8 R08: 0000000000000000 R09: 0000000000000000 [ 558.715167][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.723169][T13579] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 558.731194][T13579] [ 558.734226][T13579] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.741501][T13579] CPU: 1 PID: 13579 Comm: syz.2.2480 Not tainted syzkaller #0 [ 558.748968][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.759012][T13579] Call Trace: [ 558.762283][T13579] [ 558.765191][T13579] dump_stack_lvl+0x188/0x250 [ 558.769849][T13579] ? show_regs_print_info+0x20/0x20 [ 558.775025][T13579] ? load_image+0x410/0x410 [ 558.779518][T13579] panic+0x2f8/0x850 [ 558.783400][T13579] ? bpf_jit_dump+0xd0/0xd0 [ 558.787891][T13579] ? __ioremap_caller+0x4f8/0x620 [ 558.792903][T13579] __warn+0x248/0x2b0 [ 558.796888][T13579] ? __ioremap_caller+0x4f8/0x620 [ 558.801911][T13579] report_bug+0x1b9/0x2e0 [ 558.806229][T13579] handle_bug+0x3a/0x70 [ 558.810362][T13579] exc_invalid_op+0x16/0x40 [ 558.814845][T13579] asm_exc_invalid_op+0x16/0x20 [ 558.819675][T13579] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 558.825300][T13579] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 b8 81 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 558.844888][T13579] RSP: 0018:ffffc900033cf900 EFLAGS: 00010246 [ 558.850958][T13579] RAX: 0000000000000032 RBX: 1ffff92000679f00 RCX: f009372439822500 [ 558.858924][T13579] RDX: ffffc90018bd8000 RSI: 0000000000007f10 RDI: 0000000000007f11 [ 558.866889][T13579] RBP: ffffc900033cfa10 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 558.874845][T13579] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: 000000000000002e [ 558.882808][T13579] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 558.890781][T13579] ? phram_setup+0x87c/0xdf0 [ 558.895376][T13579] ? ioremap+0x30/0x30 [ 558.899469][T13579] phram_setup+0x87c/0xdf0 [ 558.903889][T13579] ? __mutex_lock_common+0x435/0x2400 [ 558.909252][T13579] ? phram_param_call+0x70/0x70 [ 558.914095][T13579] ? mutex_lock_io_nested+0x60/0x60 [ 558.919277][T13579] ? read_lock_is_recursive+0x10/0x10 [ 558.924641][T13579] param_attr_store+0x20a/0x300 [ 558.929485][T13579] ? param_attr_show+0x170/0x170 [ 558.934404][T13579] ? sysfs_kf_read+0x350/0x350 [ 558.939151][T13579] module_attr_store+0x5b/0x80 [ 558.943906][T13579] kernfs_fop_write_iter+0x3a8/0x500 [ 558.949192][T13579] vfs_write+0x748/0xd70 [ 558.953418][T13579] ? file_end_write+0x250/0x250 [ 558.958257][T13579] ? mutex_lock_nested+0x17/0x20 [ 558.963170][T13579] ? __fdget_pos+0x2bf/0x370 [ 558.967756][T13579] ? ksys_write+0x70/0x260 [ 558.972158][T13579] ksys_write+0x153/0x260 [ 558.976487][T13579] ? __ia32_sys_read+0x80/0x80 [ 558.981231][T13579] ? lockdep_hardirqs_on+0x94/0x140 [ 558.986419][T13579] do_syscall_64+0x4c/0xa0 [ 558.990817][T13579] ? clear_bhb_loop+0x30/0x80 [ 558.995500][T13579] ? clear_bhb_loop+0x30/0x80 [ 559.000179][T13579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 559.006066][T13579] RIP: 0033:0x7f13b9f23559 [ 559.010461][T13579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.030042][T13579] RSP: 002b:00007f13b817b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.038449][T13579] RAX: ffffffffffffffda RBX: 00007f13ba1aafa0 RCX: 00007f13b9f23559 [ 559.046406][T13579] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 559.054369][T13579] RBP: 00007f13b9fbaab8 R08: 0000000000000000 R09: 0000000000000000 [ 559.062320][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.070271][T13579] R13: 00007f13ba1ab038 R14: 00007f13ba1aafa0 R15: 00007ffe893c80e8 [ 559.078238][T13579] [ 559.081496][T13579] Kernel Offset: disabled [ 559.086105][T13579] Rebooting in 86400 seconds..