last executing test programs: 30.183872509s ago: executing program 3 (id=245): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=',', 0xffdf}], 0x1) 30.139309989s ago: executing program 3 (id=247): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08082d04"], 0x2f) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = fsopen(&(0x7f0000000440)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000480)='source', &(0x7f00000004c0)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='source', &(0x7f0000000580)='%(,c\xbe\r\xcc:', 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x8, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x3000000, @empty}}]}, 0x110) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x64, 0x100) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0xd9}}]}}, 0xf) 28.188073592s ago: executing program 3 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./mnt\x00', 0x1ff) mount(&(0x7f00000015c0)=@filename='127.0.0.1:/test\x00', &(0x7f0000001600)='./mnt\x00', &(0x7f0000001640)='nfs\x00', 0x300, &(0x7f0000001680)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 27.496192357s ago: executing program 3 (id=260): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x2, 0xfffffffe, 0xea, 0x880}) 27.399181282s ago: executing program 3 (id=262): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) (rerun: 64) write(r2, &(0x7f00000007c0)="11", 0x1) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000300)="19", 0x1, 0x80, &(0x7f0000000340)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000840)={0x0, 0xffff, 0x40, &(0x7f0000000800)=@ublk_ctrl_dev_info_new=@any_dev}) ioctl$UBLK_U_CMD_START_USER_RECOVERY(r2, 0xc0207510, &(0x7f00000008c0)={r3}) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448d8}}, {{&(0x7f0000000640)=@file={0x1, './proc\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40040800}}], 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0x8) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) syz_clone(0x80000, &(0x7f00000000c0)="e15c533232edcb8810306545758c", 0xe, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="61f1c8e13cec36922a9863c72e962878f1404fb9a1de923981620aa970c232a745aeb0955cc9a28e5a4af2d4dbdaef723ef3b895077eb07e01ada88c9e36e8c5c16307c72bf1b6e5cb696ab3d83fd1ce6f7f73d15632c3cc6d576d6934ca8c2f9f2571449e6a96a1f76554980562143ad2ba5eafa01954ee83c6b4ab7082c10be7368b3990835d797aaa0916dce122f679f8c2d9c4e3b2c8929725c7a61ffcd2d0422c10e247676d24f14601ff690f53ada9d015074a5fa295ae8620396851cdf99892914941d109fb93e81b4ce9c4654ce37fb0b4f9") mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f0000000480)={r5, 0x1}, &(0x7f00000004c0)=0x8) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 26.988052855s ago: executing program 3 (id=265): syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x6, 0x2}}}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x24) r1 = open$dir(&(0x7f0000000980)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x41009432, &(0x7f00000009c0)={@desc={0x1, 0x1000000, @auto="92f019a92d806a21"}}) 11.905970031s ago: executing program 32 (id=265): syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x6, 0x2}}}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x24) r1 = open$dir(&(0x7f0000000980)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x41009432, &(0x7f00000009c0)={@desc={0x1, 0x1000000, @auto="92f019a92d806a21"}}) 6.293906456s ago: executing program 2 (id=329): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 6.12407887s ago: executing program 2 (id=331): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x24}, 0x0) 6.089176824s ago: executing program 2 (id=332): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xffffff97, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.022359846s ago: executing program 2 (id=333): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000480)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "06000200", '\x00', ["8b00", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='tmpfs\x00', 0x8, &(0x7f0000000180)='usrquota') chdir(&(0x7f00000001c0)='./file1\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "2fd68285"}, @local=@item_4={0x3, 0x2, 0x9, "be5a8299"}]}}, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000009c0), 0x8) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x8003, 0xffffffff, 0x0, 0x5, 0x7fffffff, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000580)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x4003ffff, 0x338, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000880)=0x7f, &(0x7f00000008c0)=0xa) 5.565633639s ago: executing program 0 (id=334): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x5, 0x9, 0x9f, 0x101}, {0x0, 0xa, 0xb, 0xfffffffb}, {0x9, 0xc7, 0x5, 0xcf45}, {0x8, 0x8, 0x3, 0x9}, {0xfffb, 0x3, 0xe4, 0x337365c7}, {0x5e0, 0x8, 0xf}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) clock_settime(0x1700, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='target '], 0x13) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) listen(r2, 0x8001) 5.302522256s ago: executing program 0 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.replace\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='syz0:12:', 0x8) 5.141615074s ago: executing program 0 (id=336): write(0xffffffffffffffff, &(0x7f0000000100)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001", 0x55) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000200)=[{0x94, 0xff, 0x2, 0xfffff074}, {0x6, 0xfe}]}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8502, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$sndseq(r1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x5, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) sendto$inet6(r0, &(0x7f0000000240)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_usb_connect(0x2, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010246828e03b81a0201267c0102030109021e0301fea540010904538001febe8b0809050e0800040c080103095b"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 2.83240644s ago: executing program 2 (id=342): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1/file2\x00', 0x133) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000100009009090400fe01030001000921c100fe0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0xa}, 0x30, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000400)=0x80000003, 0x4) listen(r3, 0x86) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x22) r5 = landlock_create_ruleset(&(0x7f0000000280)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r5, 0x9) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000300)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 1.837345008s ago: executing program 0 (id=346): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.659334829s ago: executing program 0 (id=348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0xfffe7530, 0x7, 0x10001, 0x76, 0x3, "3596030afe0006a7446d67a000", 0x10007, 0x200}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000540)) close_range(r0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040), 0x18) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xf6, 0xa) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) rename(&(0x7f0000000880)='./file2\x00', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000280)={0x7, {0x1, 0x0}, 0x0, 0x6}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)='`', 0x500, 0x0, &(0x7f0000000680)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000019c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000001980)={&(0x7f00000008c0)={0x1068, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0xea8, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xeb89, @loopback, 0x1}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x350, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @local, 0xe1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x7}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xff, @empty, 0x8}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x55a9}]}, {0x6c0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @private2, 0xb}}, @WGPEER_A_ALLOWEDIPS={0x64c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x5}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x40000, @remote, 0xa0000000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, @WGPEER_A_FLAGS={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e0b82aeb75720bd6592fcc039d077181df5b3019d0f983a5cf2a1b01aa751d2"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b71cf335ddacf85959dd04ba829d0bb8460e4c66b335e2d73e544c1e2d2e361f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe4}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x77c}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfcf}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb66}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @remote, 0xf40}}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4a9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x18c, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff9}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3666e05a1dfc9270713c1066a4ab3e3d2aff78c91ce564a038a7cf98257cbe9"}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x1068}, 0x1, 0x0, 0x0, 0x40804}, 0x8010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000380)=0x10) ioctl$RUN_ARRAY(r2, 0x400c0930, 0x0) 1.246420949s ago: executing program 0 (id=349): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000480)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "06000200", '\x00', ["8b00", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='tmpfs\x00', 0x8, &(0x7f0000000180)='usrquota') chdir(&(0x7f00000001c0)='./file1\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "2fd68285"}, @local=@item_4={0x3, 0x2, 0x9, "be5a8299"}]}}, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000009c0), 0x8) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x8003, 0xffffffff, 0x0, 0x5, 0x7fffffff, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000580)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x4003ffff, 0x338, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.04045552s ago: executing program 4 (id=304): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={0x0}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x1, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@striped={0x0, 0x8, 0x0, 0x98, 'striped\x00', {0x4, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '1024'}}, {0x20, {@ram={'/dev/ram', 0x1}, 0x20, '8191'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '128'}}, {0x20, {@ram={'/dev/ram', 0x0}, 0x20, '4096'}}]}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, r3, 0x602, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4963}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x20000410) 908.212884ms ago: executing program 4 (id=350): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xa) 854.234059ms ago: executing program 2 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000780)=0x207, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'ip_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000800)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000840)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f00000008c0)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000900)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'netdevsim0\x00', 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000009c0)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000a00)=0x4000, 0x4) (async) bind$xdp(r4, &(0x7f0000000a40)={0x2c, 0x18, r6}, 0x10) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000a80)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ac0)={'erspan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000b00)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000b40)={0x11, 0x88a8, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x8, 0x2, 0x20, @mcast1, @local, 0x40, 0x701, 0x1, 0x6}}) (async) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c40)={'veth0\x00', 0x0}) (async) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000c80)={0x0, 0x1}, 0x10) (async, rerun: 32) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000cc0)=@req={0x1000, 0x3, 0x1000, 0x3}, 0x10) (rerun: 32) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x3, 0x11, r12, 0x0) sendmsg(r12, &(0x7f0000000d00)={&(0x7f0000000d40)=@ll={0x11, 0x300, r11}, 0x14, &(0x7f0000000dc0)=[{&(0x7f0000000e00)='\x00', 0x1}], 0x1}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001080)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000e40)={0x1d4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) (async, rerun: 32) getpid() (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x26, 0x68, 0x4d, 0x8, 0x2040, 0xc602, 0x2aaf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2e, 0xc8, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0xaf, 0xe8, 0x53, 0x2}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc24}}, {0x3f, &(0x7f00000000c0)=@string={0x3f, 0x3, "0998696f0928be6cc4d2ea57d5708c4f0c8db445d1165241c44aaaa8ba4e1a4e3ccebeb5ba3219ae1f551a2d8b60958953bd47b87d26b7d0d084848b5e"}}, {0xc4, &(0x7f0000000100)=@string={0xc4, 0x3, "769dfd4dfd4ec953adfdfd1fb986eb124427cfc1c481d8c3187b17e3a990178f5bc5f55ef049497c1c7b193a640f4cc4b0a810fce2e9cce053f19db67b82f1b002cced8de63c20e713493039ce8ae6590ecee5ed3d58ba8d4af9657f0bf19abc7e818ae13cd00a98edc67649689b84b706e08d3e7b2e7f704fa78f3d0222acbdfc914446759baac690ec6a32818110a43f8d8e2a3dd5f7269cc9a677168fa12f39a7e1b5c0b5036462dee7e175d404796f7b549099c16cd43364a38c1a84cd383211"}}, {0x7f, &(0x7f0000000200)=@string={0x7f, 0x3, "6a0e12b6fe970341cac5772ed56f4eba212ccd9980ad2bd742e178b70df6da334f4b5a597e79e4ed498df6bc5a7f8f621f35d9a570577b429b3677783303432c4b1468ff4c055104683fc4771eac351e688a103aaac080bb1ec5b91904806f37246c6568e29f52b8bef3e946ce66776cbc7c6b0d9dae8f6e9217ea0132"}}]}) 713.215565ms ago: executing program 1 (id=352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private1, 0xa, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x84, 0x5, "c7"}], 0x18}}], 0x2, 0xc88c4) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x11c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002700)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8408101, 0x0, 0x8, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002780)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)={0x20, 0x0, 0x0, {0x0, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004880)='./file0\x00', 0x109081, 0x34) fcntl$lock(r3, 0x26, &(0x7f00000048c0)={0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x79, 0x3, "af6d7590a16ed281a566ac17f6b2bf948a81c79a289887038329ac46c7f39af3972f91d9fb94ff742da7e03145eab38751b5d57700475898f19fc316983c43df887d0f85753a2224bed28897c188deba76af54fe2eae2259b3dae7cb2d771038a993c4675894a73fbb999abfb88fdb724aed5d53b8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cb1ef81b2e15ae19619ba475c3d85eff90da36d5194325d03c4837e3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8cf331ca91b80729992a76077f0e1faa23e6d40fb006968bd99c8921f1528327"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "82d20054348953ab8fbc32e277c38be2a71a35f5ffca57"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3e50ce185012f57bf29b85fd270e81e5d631839b19104b9b3eb800c470"}}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x8011) 568.249916ms ago: executing program 1 (id=353): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003e00)='/dev/comedi4\x00', 0xc00, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000003e40)={0x0, 0x0, 0x2, 0x0, 0x4, 0x3000000, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) 567.995775ms ago: executing program 1 (id=354): r0 = syz_open_dev$vbi(&(0x7f0000000880), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000008c0)={0x3, 0xf0f03d}) r1 = syz_open_dev$vbi(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000a40)=0x3) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x1000) 541.696256ms ago: executing program 1 (id=355): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 498.444404ms ago: executing program 1 (id=356): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000002500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f2) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000200), 0x800000, &(0x7f0000004e40)={'trans=virtio,', {[{@directio}, {@access_uid={'access', 0x3d, r2}}], [{@smackfsroot={'smackfsroot', 0x3d, '\'!#-{+'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'net/netstat\x00'}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}]}}) 65.991804ms ago: executing program 1 (id=357): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0x30, 0xa4, {0xa4, 0xf, "8c4be5f58b4b56607d2f66e3f3f1f862c1352a211fb3cb60bb8c82201af9c06219b996ca98523705dea1f7a899e513ff302a1ad3c7f907320d5b71bd84243995a3b45ad0a007c52128dc7cc65e2a7a9d82bbbf312d3562d71dbb0e50dcd8d42d8adde2f593170a2db168831d53b32351454b522bb3f357d87912a006e32cbc572408f84c42ce3b58d348b7f3c8a9e44efb6ff6c8c0d132e384cbd8cc5a1f9881a03d"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0xe, 0xee, "b9b620659c683e3b828fed42d8c6c315984f32f8a70c2ba4842688e1657b3e15488019a792c763b63ed7d99b11781fa3f40f175ccf3976f47b2d3dbabbc5363115d9fb1e033ea8f6004e3b8ef7bba6c79b65dad2c8f137822d3a2af8f91df2b5fff46b657b06d1f490f5511e7850c7aa6950ea67aac97dc3ed1822203297aed94679508c8a99715670b43d525cefdf2f656016769595b49e9787ea0cef2a228e5dd96df5ad6366800e17ab71ae6ea3db345b45a9fc73bea99fd372ddd6ce107981d6a18adb3728be5e7a473a833603918b5234c14ed7db58549a27e337c17a4a804ed5e42903c15b5384f140c76d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000400)={0xc0, 0x5, 0x5, "8b25bee474"}, &(0x7f0000000440)}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, 0x140a, 0x301, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) 0s ago: executing program 4 (id=358): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001f40), 0x90000, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000001e00)="a800000040000100030000000000000003010000102700003200010000112207005566e3e4ad3edfe890118b5dc24954dfcbde11b778c0a80101c0a8010204d2162e000c20007465737400004c00020008e0fa00010000001000043b66778899aabb00112233445515c15d060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000022d6dff4256bbc85cbe228130500", 0xa8, 0x22044880, 0x0, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/4096, 0x1041}], 0x3}, 0x22) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x18}, 0x40054) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x7, 0x4) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000740)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001ec0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_link_settings={0x2c, 0x1e, 0x81, 0x8, 0x46, 0xe, 0x75, 0x3, 0xa, 0x3, [0x1, 0xd07, 0x2, 0x4, 0x5, 0x1, 0x0, 0x1]}}) request_key(&(0x7f0000000cc0)='asymmetric\x00', &(0x7f0000000d00)={'syz', 0x0}, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x24, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2e}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000300)=[{0xc0, 0x2ee6685ecfa0ba07, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.384145][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.384158][ T5732] usb 4-1: Product: syz [ 99.384165][ T5732] usb 4-1: Manufacturer: syz [ 99.384172][ T5732] usb 4-1: SerialNumber: syz [ 99.452758][ T5732] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 99.485727][ T5635] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.489326][ T5732] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 99.489326][ T5732] Please send a copy of this message to and [ 99.617192][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 99.636112][ T5635] usb 2-1: Using ep0 maxpacket: 32 [ 99.642989][ T5635] usb 2-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 99.643014][ T5635] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 99.645339][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.645353][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.664369][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.664384][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.702429][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.702444][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.722708][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.722723][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.741985][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.742000][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.744253][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.744267][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.745857][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.745870][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.788124][ T5635] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.788139][ T5635] usb 2-1: config 0 has no interface number 0 [ 99.822499][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.822515][ T5635] usb 2-1: Product: syz [ 99.822522][ T5635] usb 2-1: Manufacturer: syz [ 99.822529][ T5635] usb 2-1: SerialNumber: syz [ 99.824070][ T5635] usb 2-1: config 0 descriptor?? [ 99.834069][ T5732] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 99.855519][ T5635] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 99.888988][ T5732] usb 4-1: USB disconnect, device number 7 [ 100.033284][ T5635] etas_es58x 2-1:0.2: could not parse product info: '' [ 100.407831][ T6293] md: invalid raid superblock magic on ram6 [ 100.407844][ T6293] md: ram6 does not have a valid v0.0 superblock, not importing! [ 100.407883][ T6293] md: md_import_device returned -22 [ 100.601956][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0003. [ 100.602022][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 100.602031][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 100.602312][ T5299] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 100.650519][ T6262] Invalid logical block size (7) [ 100.768152][ T5635] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.804002][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 100.804059][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 100.804101][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 100.804144][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 100.804185][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 100.804241][ C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 100.805372][ T5732] usb 2-1: USB disconnect, device number 7 [ 100.806826][ T5732] etas_es58x 2-1:0.2: Disconnecting syz syz [ 100.846461][ T5299] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 100.947097][ T5635] usb 4-1: device descriptor read/64, error -71 [ 101.187234][ T5635] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.318116][ T5635] usb 4-1: device descriptor read/64, error -71 [ 101.428789][ T5635] usb usb4-port1: attempt power cycle [ 101.768087][ T5635] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 101.796927][ T5635] usb 4-1: device descriptor read/8, error -71 [ 101.906016][ T2251] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 102.037936][ T5635] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 102.056996][ T2251] usb 3-1: Using ep0 maxpacket: 32 [ 102.057505][ T5635] usb 4-1: device descriptor read/8, error -71 [ 102.057570][ T2251] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 102.058387][ T2251] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 102.058413][ T2251] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 102.058425][ T2251] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.058438][ T2251] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 102.060000][ T2251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.060013][ T2251] usb 3-1: Product: syz [ 102.060019][ T2251] usb 3-1: Manufacturer: syz [ 102.060026][ T2251] usb 3-1: SerialNumber: syz [ 102.064342][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 102.141657][ T2251] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input10 [ 102.172584][ T5635] usb usb4-port1: unable to enumerate USB device [ 102.306912][ T2251] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 102.306925][ T2251] (id 0x00) [ 102.392695][ T6351] kvm [6350]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x800 [ 102.392895][ T6351] kvm [6350]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc2) = 0x800 [ 102.395887][ T2251] rc_core: IR keymap rc-imon-pad not found [ 102.395896][ T2251] Registered IR keymap rc-empty [ 102.395969][ T2251] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 102.395979][ T2251] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 102.451489][ T6351] kvm [6350]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0xbe702911 [ 102.467900][ T6351] kvm [6350]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800 [ 102.468100][ T6351] kvm [6350]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x800 [ 102.506853][ T2251] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 102.510149][ T2251] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input11 [ 102.553717][ T2251] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:11> initialized [ 102.715934][ T5733] usb 3-1: USB disconnect, device number 11 [ 103.201473][ T6356] FAULT_INJECTION: forcing a failure. [ 103.201473][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 103.201492][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 103.201504][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.201511][ T6356] Call Trace: [ 103.201515][ T6356] [ 103.201520][ T6356] dump_stack_lvl+0xe8/0x150 [ 103.201539][ T6356] should_fail_ex+0x3eb/0x540 [ 103.201556][ T6356] should_failslab+0xa8/0x100 [ 103.201571][ T6356] __kmalloc_cache_noprof+0x9e/0x600 [ 103.201583][ T6356] ? fwnode_create_software_node+0xeb/0x1f0 [ 103.201595][ T6356] ? fwnode_create_software_node+0xeb/0x1f0 [ 103.201610][ T6356] fwnode_create_software_node+0xeb/0x1f0 [ 103.201624][ T6356] device_create_managed_software_node+0xce/0x1f0 [ 103.201638][ T6356] iommufd_test+0x38a0/0x6360 [ 103.201657][ T6356] ? __lock_acquire+0x747/0x2de0 [ 103.201668][ T6356] ? __pfx_iommufd_test+0x10/0x10 [ 103.201686][ T6356] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.201700][ T6356] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.201713][ T6356] ? lock_acquire+0x115/0x350 [ 103.201730][ T6356] ? __might_fault+0xaf/0x130 [ 103.201753][ T6356] iommufd_fops_ioctl+0x465/0x600 [ 103.201772][ T6356] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 103.201789][ T6356] ? __fget_files+0x2a/0x420 [ 103.201807][ T6356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.201820][ T6356] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 103.201834][ T6356] __se_sys_ioctl+0xfc/0x170 [ 103.201849][ T6356] do_syscall_64+0x166/0x520 [ 103.201861][ T6356] ? trace_irq_disable+0x3b/0x140 [ 103.201872][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.201882][ T6356] ? clear_bhb_loop+0x70/0xc0 [ 103.201894][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.201904][ T6356] RIP: 0033:0x7f8d91f9f559 [ 103.201915][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.201923][ T6356] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.201935][ T6356] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 103.201941][ T6356] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 103.201947][ T6356] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.201953][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.201959][ T6356] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 103.201975][ T6356] [ 103.202000][ T6356] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 103.706956][ T6361] md: invalid raid superblock magic on ram6 [ 103.706969][ T6361] md: ram6 does not have a valid v0.0 superblock, not importing! [ 103.707008][ T6361] md: md_import_device returned -22 [ 104.075951][ T2251] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 104.097909][ T5635] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 104.226442][ T2251] usb 3-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=1.00 [ 104.227383][ T2251] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.227399][ T2251] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.229958][ T2251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.229973][ T2251] usb 3-1: Product: syz [ 104.229980][ T2251] usb 3-1: Manufacturer: syz [ 104.229995][ T2251] usb 3-1: SerialNumber: syz [ 104.294403][ T5635] usb 4-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 104.294712][ T2251] yealink 3-1:1.0: invalid payload size 0, expected 16 [ 104.295332][ T5635] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.295348][ T5635] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.295364][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.327168][ T5635] usb 4-1: config 0 descriptor?? [ 104.358108][ T2251] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12 [ 104.361053][ T5635] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 104.503256][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.503449][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.503633][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.503821][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.504002][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.504178][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.504347][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.504515][ C0] yealink 3-1:1.0: urb_ctl_callback - urb status -71 [ 104.504525][ C0] yealink 3-1:1.0: urb_ctl_callback - usb_submit_urb failed -90 [ 104.581096][ T2251] usb 3-1: USB disconnect, device number 12 [ 104.932494][ T5732] usb 4-1: USB disconnect, device number 12 [ 105.183716][ T6398] nvme_fabrics: nof]bEDE=Ԙب]O0!WSל޷}F'5m[ޕwh}1n@ 7E aoVMYm0;yl:&1<7-h:SXl7ZS`.7Ph\fPG4`5_*v搡]\yu$[&s_M needs to be < 223 bytes [ 105.406495][ T5732] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.526397][ T6404] md: invalid raid superblock magic on ram6 [ 105.526411][ T6404] md: ram6 does not have a valid v0.0 superblock, not importing! [ 105.526453][ T6404] md: md_import_device returned -22 [ 105.536277][ T5732] usb 2-1: device descriptor read/64, error -71 [ 105.682181][ T6409] syz.3.154 uses obsolete (PF_INET,SOCK_PACKET) [ 105.777611][ T5732] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 105.905743][ T5732] usb 2-1: device descriptor read/64, error -71 [ 105.925680][ T5635] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 106.016655][ T5732] usb usb2-port1: attempt power cycle [ 106.076215][ T5635] usb 4-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 106.077264][ T5635] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.077290][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.289479][ T5635] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 106.311161][ T5635] wwan wwan0: port wwan0qmi0 attached [ 106.375808][ T5732] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.396337][ T5732] usb 2-1: device descriptor read/8, error -71 [ 106.499917][ T5635] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 42:94:04:00:7f:68 [ 106.645878][ T5732] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.667502][ T5732] usb 2-1: device descriptor read/8, error -71 [ 106.710762][ T5733] usb 4-1: USB disconnect, device number 13 [ 106.715553][ T5733] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 106.778226][ T5732] usb usb2-port1: unable to enumerate USB device [ 106.779349][ T5733] wwan wwan0: port wwan0qmi0 disconnected [ 106.826581][ T6420] devpts: Bad value for 'uid' [ 106.826594][ T6420] devpts: Bad value for 'uid' [ 107.667192][ T6458] md: invalid raid superblock magic on ram4 [ 107.667206][ T6458] md: ram4 does not have a valid v0.0 superblock, not importing! [ 107.667243][ T6458] md: md_import_device returned -22 [ 107.755807][ T5733] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 107.906440][ T5733] usb 4-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 107.907412][ T5733] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.907428][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.907445][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.911380][ T5733] usb 4-1: config 0 descriptor?? [ 107.913538][ T5733] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 108.055846][ T5732] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.207933][ T5732] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 108.208767][ T5732] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.208797][ T5732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.208808][ T5732] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.208818][ T5732] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.208839][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.471993][ T5732] usb 4-1: USB disconnect, device number 14 [ 108.622785][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.623065][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.643687][ T5733] usb 3-1: USB disconnect, device number 13 [ 109.212630][ T6480] sg_write: data in/out 2791776/136 bytes for SCSI command 0x0-- guessing data in; [ 109.212630][ T6480] program syz.2.167 not setting count and/or reply_len properly [ 109.248638][ T6480] : renamed from vlan0 (while UP) [ 109.270343][ T6479] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 109.287045][ T5732] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 109.445727][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 109.446309][ T5732] usb 4-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 109.448904][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.448918][ T5732] usb 4-1: Product: syz [ 109.448925][ T5732] usb 4-1: Manufacturer: syz [ 109.448932][ T5732] usb 4-1: SerialNumber: syz [ 109.452588][ T5732] usb 4-1: config 0 descriptor?? [ 109.455191][ T5732] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 109.635805][ T5733] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 109.765840][ T5733] usb 3-1: device descriptor read/64, error -71 [ 109.805669][ T5635] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.956394][ T5635] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 109.957436][ T5635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.957462][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.005720][ T5733] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 110.137193][ T5733] usb 3-1: device descriptor read/64, error -71 [ 110.171933][ T5635] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 110.188961][ T5635] wwan wwan0: port wwan0qmi0 attached [ 110.247563][ T5733] usb usb3-port1: attempt power cycle [ 110.379738][ T5635] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 4a:f1:df:08:b4:5d [ 110.533466][ T5732] gspca_ov534_9: reg_w failed -71 [ 110.585974][ T5733] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 110.590055][ T5635] usb 2-1: USB disconnect, device number 12 [ 110.612885][ T5635] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 110.613049][ T5733] usb 3-1: device descriptor read/8, error -71 [ 110.673056][ T5635] wwan wwan0: port wwan0qmi0 disconnected [ 110.702162][ T6500] devpts: Bad value for 'uid' [ 110.702175][ T6500] devpts: Bad value for 'uid' [ 110.818464][ T5732] gspca_ov534_9: Unknown sensor 0000 [ 110.818541][ T5732] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 110.845958][ T5733] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 110.846772][ T5732] usb 4-1: USB disconnect, device number 15 [ 110.867278][ T5733] usb 3-1: device descriptor read/8, error -71 [ 110.976960][ T5733] usb usb3-port1: unable to enumerate USB device [ 111.337190][ T5733] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 111.476871][ T6525] ip6_vti0: entered allmulticast mode [ 111.492450][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 111.492943][ T5733] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 111.511924][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.511942][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.511953][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.511973][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.575491][ T5733] usb 4-1: config 0 descriptor?? [ 111.627457][ T6529] md: invalid raid superblock magic on ram0 [ 111.627471][ T6529] md: ram0 does not have a valid v0.0 superblock, not importing! [ 111.627512][ T6529] md: md_import_device returned -22 [ 111.915757][ T5635] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 111.996022][ T5733] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 112.004122][ T5733] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 112.038812][ T6535] udevd[6535]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 112.067499][ T5635] usb 2-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 112.068746][ T5635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.068760][ T5635] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.070942][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.070956][ T5635] usb 2-1: Product: syz [ 112.070963][ T5635] usb 2-1: Manufacturer: syz [ 112.070969][ T5635] usb 2-1: SerialNumber: syz [ 112.108768][ T5635] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 112.143202][ T5635] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 112.143202][ T5635] Please send a copy of this message to and [ 112.197900][ T5733] usb 4-1: USB disconnect, device number 16 [ 112.445461][ T6539] FAULT_INJECTION: forcing a failure. [ 112.445461][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 112.445480][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 112.445492][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.445498][ T6539] Call Trace: [ 112.445503][ T6539] [ 112.445508][ T6539] dump_stack_lvl+0xe8/0x150 [ 112.445526][ T6539] should_fail_ex+0x3eb/0x540 [ 112.445546][ T6539] should_failslab+0xa8/0x100 [ 112.445561][ T6539] __kmalloc_noprof+0xf9/0x710 [ 112.445571][ T6539] ? kfree+0x4d/0x650 [ 112.445580][ T6539] ? property_entries_dup+0x92/0xbc0 [ 112.445591][ T6539] ? property_entries_dup+0x92/0xbc0 [ 112.445604][ T6539] property_entries_dup+0x92/0xbc0 [ 112.445615][ T6539] ? dev_set_name+0xe2/0x140 [ 112.445630][ T6539] fwnode_create_software_node+0x92/0x1f0 [ 112.445645][ T6539] device_create_managed_software_node+0xce/0x1f0 [ 112.445659][ T6539] iommufd_test+0x38a0/0x6360 [ 112.445678][ T6539] ? __lock_acquire+0x747/0x2de0 [ 112.445688][ T6539] ? __pfx_iommufd_test+0x10/0x10 [ 112.445701][ T6539] ? lockdep_hardirqs_on+0x7b/0x110 [ 112.445713][ T6539] ? irqentry_exit+0x2a0/0x9b0 [ 112.445724][ T6539] ? trace_irq_disable+0x3b/0x140 [ 112.445743][ T6539] ? lock_acquire+0x115/0x350 [ 112.445760][ T6539] ? __might_fault+0xaf/0x130 [ 112.445778][ T6539] iommufd_fops_ioctl+0x465/0x600 [ 112.445795][ T6539] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.445811][ T6539] ? __fget_files+0x2a/0x420 [ 112.445828][ T6539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.445840][ T6539] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.445853][ T6539] __se_sys_ioctl+0xfc/0x170 [ 112.445867][ T6539] do_syscall_64+0x166/0x520 [ 112.445879][ T6539] ? trace_irq_disable+0x3b/0x140 [ 112.445889][ T6539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.445899][ T6539] ? clear_bhb_loop+0x70/0xc0 [ 112.445910][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.445919][ T6539] RIP: 0033:0x7ff66e99f559 [ 112.445929][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.445937][ T6539] RSP: 002b:00007ff66f947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.445948][ T6539] RAX: ffffffffffffffda RBX: 00007ff66ec25fa0 RCX: 00007ff66e99f559 [ 112.445955][ T6539] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 112.445961][ T6539] RBP: 00007ff66ea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.445966][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.445972][ T6539] R13: 00007ff66ec26038 R14: 00007ff66ec25fa0 R15: 00007ffe5ba17e28 [ 112.445988][ T6539] [ 112.548007][ T6539] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 112.871837][ T6543] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 112.901140][ T6545] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 112.964300][ T5635] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 112.976693][ T5635] usb 2-1: USB disconnect, device number 13 [ 113.865717][ T5635] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 114.016559][ T5635] usb 3-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 114.017769][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.017795][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.226479][ T6557] md: invalid raid superblock magic on ram6 [ 114.226509][ T6557] md: ram6 does not have a valid v0.0 superblock, not importing! [ 114.226549][ T6557] md: md_import_device returned -22 [ 114.260594][ T5635] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 114.277662][ T5635] wwan wwan0: port wwan0qmi0 attached [ 114.316356][ T6560] ubi0: attaching mtd0 [ 114.318050][ T6560] ubi0: scanning is finished [ 114.318087][ T6560] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 114.390282][ T6560] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 114.448033][ T5635] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 46:55:96:c9:ae:c4 [ 114.535684][ T6566] tipc: Started in network mode [ 114.535705][ T6566] tipc: Node identity 7f000001, cluster identity 4711 [ 114.536505][ T6566] tipc: New replicast peer: 127.0.0.1 [ 114.540498][ T6566] tipc: Enabled bearer , priority 10 [ 114.540873][ T6566] tipc: Disabling bearer [ 114.639143][ T6566] process 'syz.3.186' launched './file0' with NULL argv: empty string added [ 114.687451][ T5635] usb 3-1: USB disconnect, device number 18 [ 114.693847][ T5635] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 114.814043][ T5635] wwan wwan0: port wwan0qmi0 disconnected [ 114.831706][ T6569] devpts: Bad value for 'uid' [ 114.831719][ T6569] devpts: Bad value for 'uid' [ 114.897935][ T4954] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 114.898005][ T4954] Bluetooth: hci3: Injecting HCI hardware error event [ 114.898972][ T5642] Bluetooth: hci3: hardware error 0x00 [ 115.007411][ T6575] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 115.034007][ T6575] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 115.112195][ T6581] program syz.1.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.313575][ T4954] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 115.471823][ T6599] netlink: 256 bytes leftover after parsing attributes in process `syz.2.192'. [ 115.471839][ T6599] netlink: 64 bytes leftover after parsing attributes in process `syz.2.192'. [ 116.075697][ T5635] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 116.226114][ T5635] usb 4-1: Using ep0 maxpacket: 16 [ 116.226641][ T5635] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 116.227570][ T5635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.227600][ T5635] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.227613][ T5635] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.227623][ T5635] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.227636][ T5635] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.227654][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.231561][ T5635] usb 4-1: config 0 descriptor?? [ 116.375682][ T5732] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 116.375824][ T5733] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 116.526266][ T5733] usb 2-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 116.526835][ T5732] usb 3-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 116.527631][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.527669][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 116.527682][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 116.527694][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 116.527705][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.528255][ T5732] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.528268][ T5732] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.528285][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.532258][ T5732] usb 3-1: config 0 descriptor?? [ 116.533222][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 116.533252][ T5733] usb 2-1: Product: syz [ 116.533259][ T5733] usb 2-1: Manufacturer: syz [ 116.533266][ T5733] usb 2-1: SerialNumber: syz [ 116.686097][ T5733] usb 2-1: config 0 descriptor?? [ 116.694292][ T5732] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.762194][ T5635] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 116.801059][ T6626] udevd[6626]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 116.900826][ T5733] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 116.901017][ T5733] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 116.928723][ T5733] usb 2-1: USB disconnect, device number 14 [ 116.976188][ T5642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 117.047219][ T6632] FAULT_INJECTION: forcing a failure. [ 117.047219][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 117.047252][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT(full) [ 117.047263][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.047270][ T6632] Call Trace: [ 117.047274][ T6632] [ 117.047279][ T6632] dump_stack_lvl+0xe8/0x150 [ 117.047304][ T6632] should_fail_ex+0x3eb/0x540 [ 117.047322][ T6632] should_failslab+0xa8/0x100 [ 117.047337][ T6632] __kmalloc_noprof+0xf9/0x710 [ 117.047347][ T6632] ? kfree+0x4d/0x650 [ 117.047355][ T6632] ? property_entries_dup+0x92/0xbc0 [ 117.047365][ T6632] ? property_entries_dup+0x92/0xbc0 [ 117.047379][ T6632] property_entries_dup+0x92/0xbc0 [ 117.047390][ T6632] ? dev_set_name+0xe2/0x140 [ 117.047404][ T6632] fwnode_create_software_node+0x92/0x1f0 [ 117.047417][ T6632] device_create_managed_software_node+0xce/0x1f0 [ 117.047431][ T6632] iommufd_test+0x38a0/0x6360 [ 117.047449][ T6632] ? __lock_acquire+0x747/0x2de0 [ 117.047460][ T6632] ? __pfx_iommufd_test+0x10/0x10 [ 117.047478][ T6632] ? tomoyo_path_number_perm+0x219/0x5f0 [ 117.047490][ T6632] ? tomoyo_path_number_perm+0x219/0x5f0 [ 117.047502][ T6632] ? lock_acquire+0x115/0x350 [ 117.047519][ T6632] ? __might_fault+0xaf/0x130 [ 117.047538][ T6632] iommufd_fops_ioctl+0x465/0x600 [ 117.047556][ T6632] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 117.047571][ T6632] ? __fget_files+0x2a/0x420 [ 117.047588][ T6632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.047600][ T6632] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 117.047613][ T6632] __se_sys_ioctl+0xfc/0x170 [ 117.047627][ T6632] do_syscall_64+0x166/0x520 [ 117.047640][ T6632] ? trace_irq_disable+0x3b/0x140 [ 117.047651][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.047661][ T6632] ? clear_bhb_loop+0x70/0xc0 [ 117.047673][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.047683][ T6632] RIP: 0033:0x7f8d91f9f559 [ 117.047697][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.047705][ T6632] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.047719][ T6632] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 117.047726][ T6632] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 117.047732][ T6632] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 117.047738][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.047743][ T6632] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 117.047758][ T6632] [ 117.047766][ T6632] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 117.372087][ T5732] usb 3-1: USB disconnect, device number 19 [ 117.391092][ T6634] netlink: 'syz.3.195': attribute type 33 has an invalid length. [ 117.391108][ T6634] netlink: 152 bytes leftover after parsing attributes in process `syz.3.195'. [ 117.592502][ T6642] erspan0: entered promiscuous mode [ 117.727275][ T5732] usb 4-1: USB disconnect, device number 17 [ 117.748873][ T6646] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 118.467499][ T6668] syzkaller1: entered promiscuous mode [ 118.467514][ T6668] syzkaller1: entered allmulticast mode [ 119.469685][ T53] IPVS: starting estimator thread 0... [ 119.557288][ T6677] IPVS: using max 54 ests per chain, 129600 per kthread [ 119.586913][ T6681] syzkaller0: entered promiscuous mode [ 119.599030][ T6681] syzkaller0 (unregistering): left promiscuous mode [ 119.651612][ T6683] jffs2: notice: (6683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.813179][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.868783][ T6692] vxcan0: tx drop: invalid da for name 0x00000000000000c7 [ 121.116428][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888067f9f000: rx timeout, send abort [ 121.341324][ T6659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.447036][ T6696] FAULT_INJECTION: forcing a failure. [ 121.447036][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 121.447055][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 121.447067][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.447072][ T6696] Call Trace: [ 121.447077][ T6696] [ 121.447082][ T6696] dump_stack_lvl+0xe8/0x150 [ 121.447100][ T6696] should_fail_ex+0x3eb/0x540 [ 121.447117][ T6696] should_failslab+0xa8/0x100 [ 121.447131][ T6696] ? skb_ext_add+0x148/0x8e0 [ 121.447142][ T6696] kmem_cache_alloc_noprof+0x9c/0x600 [ 121.447154][ T6696] ? skb_ext_add+0x148/0x8e0 [ 121.447168][ T6696] skb_ext_add+0x148/0x8e0 [ 121.447180][ T6696] ? __local_bh_enable_ip+0xd6/0x140 [ 121.447194][ T6696] j1939_sk_sendmsg+0x6c5/0x1310 [ 121.447214][ T6696] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 121.447228][ T6696] ? apparmor_socket_sendmsg+0x98/0x360 [ 121.447242][ T6696] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 121.447252][ T6696] sock_sendmsg_nosec+0x14e/0x190 [ 121.447267][ T6696] ____sys_sendmsg+0x54e/0x850 [ 121.447281][ T6696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.447297][ T6696] ? import_iovec+0x73/0xa0 [ 121.447312][ T6696] ___sys_sendmsg+0x2a6/0x360 [ 121.447322][ T6696] ? __lock_acquire+0x747/0x2de0 [ 121.447336][ T6696] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.447349][ T6696] ? kstrtouint+0x6e/0xe0 [ 121.447375][ T6696] ? __fget_files+0x3a2/0x420 [ 121.447385][ T6696] ? __fget_files+0x2a/0x420 [ 121.447400][ T6696] __sys_sendmmsg+0x273/0x4e0 [ 121.447414][ T6696] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.447431][ T6696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.447451][ T6696] ? ksys_write+0x242/0x270 [ 121.447464][ T6696] ? __pfx_ksys_write+0x10/0x10 [ 121.447479][ T6696] __x64_sys_sendmmsg+0xa0/0xc0 [ 121.447491][ T6696] do_syscall_64+0x166/0x520 [ 121.447503][ T6696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.447513][ T6696] ? clear_bhb_loop+0x70/0xc0 [ 121.447524][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.447542][ T6696] RIP: 0033:0x7f056259f559 [ 121.447552][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.447560][ T6696] RSP: 002b:00007f0563502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.447571][ T6696] RAX: ffffffffffffffda RBX: 00007f0562825fa0 RCX: 00007f056259f559 [ 121.447578][ T6696] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006 [ 121.447583][ T6696] RBP: 00007f0563502090 R08: 0000000000000000 R09: 0000000000000000 [ 121.447589][ T6696] R10: 0000000000040050 R11: 0000000000000246 R12: 0000000000000001 [ 121.447595][ T6696] R13: 00007f0562826038 R14: 00007f0562825fa0 R15: 00007ffc3fb75b28 [ 121.447614][ T6696] [ 121.617239][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888067f9f000: abort rx timeout. Force session deactivation [ 122.037435][ T5635] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 122.060430][ T6702] FAULT_INJECTION: forcing a failure. [ 122.060430][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.060449][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 122.060460][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.060467][ T6702] Call Trace: [ 122.060471][ T6702] [ 122.060475][ T6702] dump_stack_lvl+0xe8/0x150 [ 122.060494][ T6702] should_fail_ex+0x3eb/0x540 [ 122.060510][ T6702] _copy_from_iter+0x1d3/0x1680 [ 122.060523][ T6702] ? sock_alloc_send_pskb+0xc87/0xd90 [ 122.060541][ T6702] ? __pfx__copy_from_iter+0x10/0x10 [ 122.060556][ T6702] ? __lock_acquire+0x747/0x2de0 [ 122.060567][ T6702] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 122.060581][ T6702] skb_copy_datagram_from_iter+0xe6/0x720 [ 122.060596][ T6702] ? skb_put+0x112/0x210 [ 122.060607][ T6702] tun_get_user+0x1510/0x4470 [ 122.060626][ T6702] ? aa_file_perm+0x18b/0x15f0 [ 122.060643][ T6702] ? aa_file_perm+0x4ed/0x15f0 [ 122.060655][ T6702] ? __pfx_tun_get_user+0x10/0x10 [ 122.060667][ T6702] ? __lock_acquire+0x747/0x2de0 [ 122.060678][ T6702] ? kstrtoull+0x137/0x1d0 [ 122.060693][ T6702] ? ref_tracker_alloc+0x172/0x530 [ 122.060707][ T6702] ? lock_acquire+0x115/0x350 [ 122.060717][ T6702] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 122.060733][ T6702] ? lock_acquire+0x115/0x350 [ 122.060742][ T6702] ? tun_get+0x1c/0x2f0 [ 122.060755][ T6702] ? tun_get+0x1c/0x2f0 [ 122.060764][ T6702] ? tun_get+0x1c/0x2f0 [ 122.060775][ T6702] tun_chr_write_iter+0x113/0x200 [ 122.060786][ T6702] vfs_write+0x612/0xba0 [ 122.060803][ T6702] ? __pfx_vfs_write+0x10/0x10 [ 122.060815][ T6702] ? __fget_files+0x3a2/0x420 [ 122.060826][ T6702] ? __fget_files+0x2a/0x420 [ 122.060837][ T6702] ? fdget+0x1ac/0x250 [ 122.060851][ T6702] ksys_write+0x150/0x270 [ 122.060863][ T6702] ? __pfx_ksys_write+0x10/0x10 [ 122.060880][ T6702] do_syscall_64+0x166/0x520 [ 122.060892][ T6702] ? trace_irq_disable+0x3b/0x140 [ 122.060903][ T6702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.060913][ T6702] ? clear_bhb_loop+0x70/0xc0 [ 122.060924][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.060933][ T6702] RIP: 0033:0x7f8d91f9f559 [ 122.060943][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.060951][ T6702] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.060962][ T6702] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 122.060968][ T6702] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 122.060974][ T6702] RBP: 00007f8d92f35090 R08: 0000000000000000 R09: 0000000000000000 [ 122.060980][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.060985][ T6702] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 122.061000][ T6702] [ 122.187245][ T5635] usb 3-1: device descriptor read/64, error -71 [ 122.459729][ T5635] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 122.585742][ T5635] usb 3-1: device descriptor read/64, error -71 [ 122.646437][ T6714] md: invalid raid superblock magic on ram0 [ 122.646451][ T6714] md: ram0 does not have a valid v0.0 superblock, not importing! [ 122.646509][ T6714] md: md_import_device returned -22 [ 122.696404][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888066f21000: rx timeout, send abort [ 122.699182][ T5635] usb usb3-port1: attempt power cycle [ 123.035750][ T5635] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 123.055986][ T2251] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 123.056540][ T5635] usb 3-1: device descriptor read/8, error -71 [ 123.196480][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888066f21000: abort rx timeout. Force session deactivation [ 123.216945][ T2251] usb 2-1: Using ep0 maxpacket: 16 [ 123.219580][ T2251] usb 2-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 123.220386][ T2251] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.220402][ T2251] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.220412][ T2251] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.220429][ T2251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.225211][ T2251] usb 2-1: config 0 descriptor?? [ 123.345944][ T5635] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 123.366798][ T5635] usb 3-1: device descriptor read/8, error -71 [ 123.476040][ T5635] usb usb3-port1: unable to enumerate USB device [ 123.654463][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.654742][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.766588][ T2251] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 123.766610][ T2251] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 123.766625][ T2251] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 123.766639][ T2251] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 123.766653][ T2251] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 123.767132][ T2251] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 123.826906][ T5635] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 123.970822][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.971587][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.004007][ T2251] usb 2-1: USB disconnect, device number 15 [ 124.805723][ T2251] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 124.957985][ T2251] usb 2-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 124.958983][ T2251] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.959000][ T2251] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.959011][ T2251] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.959028][ T2251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.960783][ T2251] usb 2-1: config 0 descriptor?? [ 125.225680][ T196] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 125.371427][ T2251] usbhid 2-1:0.0: can't add hid device: -71 [ 125.371494][ T2251] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.394352][ T196] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 125.409616][ T2251] usb 2-1: USB disconnect, device number 16 [ 125.412377][ T196] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.412406][ T196] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.412418][ T196] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.414380][ T196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.414394][ T196] usb 3-1: Product: syz [ 125.414400][ T196] usb 3-1: Manufacturer: syz [ 125.496851][ T6731] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.500749][ T196] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 125.531363][ T196] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 125.703854][ T196] usb 3-1: USB disconnect, device number 24 [ 125.730272][ T196] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 125.731815][ T196] garmin_gps 3-1:1.0: device disconnected [ 125.807929][ T6733] openvswitch: netlink: Flow key attr not present in new flow. [ 125.810987][ T6733] openvswitch: netlink: Message has 14683 unknown bytes. [ 125.924935][ T6737] FAULT_INJECTION: forcing a failure. [ 125.924935][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 125.924955][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 125.924966][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.924974][ T6737] Call Trace: [ 125.924979][ T6737] [ 125.924984][ T6737] dump_stack_lvl+0xe8/0x150 [ 125.925004][ T6737] should_fail_ex+0x3eb/0x540 [ 125.925021][ T6737] should_failslab+0xa8/0x100 [ 125.925036][ T6737] __kmalloc_noprof+0xf9/0x710 [ 125.925047][ T6737] ? kfree+0x4d/0x650 [ 125.925056][ T6737] ? property_entries_dup+0x92/0xbc0 [ 125.925066][ T6737] ? property_entries_dup+0x92/0xbc0 [ 125.925080][ T6737] property_entries_dup+0x92/0xbc0 [ 125.925091][ T6737] ? dev_set_name+0xe2/0x140 [ 125.925105][ T6737] fwnode_create_software_node+0x92/0x1f0 [ 125.925119][ T6737] device_create_managed_software_node+0xce/0x1f0 [ 125.925133][ T6737] iommufd_test+0x38a0/0x6360 [ 125.925152][ T6737] ? __lock_acquire+0x747/0x2de0 [ 125.925162][ T6737] ? __pfx_iommufd_test+0x10/0x10 [ 125.925187][ T6737] ? tomoyo_path_number_perm+0x219/0x5f0 [ 125.925201][ T6737] ? tomoyo_path_number_perm+0x219/0x5f0 [ 125.925214][ T6737] ? lock_acquire+0x115/0x350 [ 125.925232][ T6737] ? __might_fault+0xaf/0x130 [ 125.925249][ T6737] iommufd_fops_ioctl+0x465/0x600 [ 125.925268][ T6737] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.925285][ T6737] ? __fget_files+0x2a/0x420 [ 125.925302][ T6737] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.925314][ T6737] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.925328][ T6737] __se_sys_ioctl+0xfc/0x170 [ 125.925342][ T6737] do_syscall_64+0x166/0x520 [ 125.925354][ T6737] ? trace_irq_disable+0x3b/0x140 [ 125.925365][ T6737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.925375][ T6737] ? clear_bhb_loop+0x70/0xc0 [ 125.925386][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.925396][ T6737] RIP: 0033:0x7fab3259f559 [ 125.925406][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.925414][ T6737] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.925425][ T6737] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 125.925432][ T6737] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 125.925438][ T6737] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 125.925443][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.925449][ T6737] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 125.925464][ T6737] [ 125.925485][ T6737] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 126.326686][ T6740] md: invalid raid superblock magic on ram4 [ 126.326700][ T6740] md: ram4 does not have a valid v0.0 superblock, not importing! [ 126.326742][ T6740] md: md_import_device returned -22 [ 126.432361][ T33] audit: type=1326 audit(1793152575.382:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.240" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66e99f559 code=0x0 [ 126.512517][ T5635] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 126.514099][ T5635] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 126.514120][ T5635] usb 4-1: can't read configurations, error -71 [ 126.582032][ T6749] blkio.reset_stats is deprecated [ 126.785739][ T2251] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 126.915846][ T5635] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 126.937518][ T2251] usb 3-1: New USB device found: idVendor=0dba, idProduct=3000, bcdDevice=0.40 [ 126.940294][ T2251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.940309][ T2251] usb 3-1: Product: syz [ 126.940316][ T2251] usb 3-1: Manufacturer: syz [ 126.940323][ T2251] usb 3-1: SerialNumber: syz [ 127.065671][ T5635] usb 4-1: Using ep0 maxpacket: 16 [ 127.066341][ T5635] usb 4-1: New USB device found: idVendor=28bd, idProduct=0934, bcdDevice=0.00 [ 127.067300][ T5635] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 127.067363][ T5635] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.067375][ T5635] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.067386][ T5635] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 127.067398][ T5635] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.067415][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.071593][ T5635] usb 4-1: config 0 descriptor?? [ 127.503962][ T5635] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.0006/input/input15 [ 127.593710][ T5635] uclogic 0003:28BD:0934.0006: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 127.630932][ T6753] udevd[6753]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 127.688943][ T6751] Invalid argument reading file caps for ./file0 [ 127.692231][ T5635] usb 4-1: USB disconnect, device number 19 [ 127.780605][ T6755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.243'. [ 127.885386][ T6757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'. [ 127.885424][ T6757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'. [ 127.907504][ T6757] FAULT_INJECTION: forcing a failure. [ 127.907504][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 127.907547][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 127.907559][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.907565][ T6757] Call Trace: [ 127.907569][ T6757] [ 127.907574][ T6757] dump_stack_lvl+0xe8/0x150 [ 127.907592][ T6757] should_fail_ex+0x3eb/0x540 [ 127.907610][ T6757] should_failslab+0xa8/0x100 [ 127.907623][ T6757] ? alloc_empty_file+0x5b/0x1d0 [ 127.907633][ T6757] kmem_cache_alloc_noprof+0x9c/0x600 [ 127.907645][ T6757] ? alloc_empty_file+0x5b/0x1d0 [ 127.907657][ T6757] alloc_empty_file+0x5b/0x1d0 [ 127.907670][ T6757] alloc_file_pseudo+0x110/0x1e0 [ 127.907678][ T6757] ? __kmalloc_cache_noprof+0x31c/0x600 [ 127.907689][ T6757] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.907699][ T6757] ? __raw_spin_lock_init+0x45/0x100 [ 127.907716][ T6757] create_pipe_files+0x306/0x7a0 [ 127.907732][ T6757] __do_pipe_flags+0x46/0x1f0 [ 127.907746][ T6757] do_pipe2+0xaa/0x190 [ 127.907760][ T6757] ? __pfx_do_pipe2+0x10/0x10 [ 127.907774][ T6757] ? rcu_is_watching+0x16/0xb0 [ 127.907801][ T6757] __x64_sys_pipe2+0x5a/0x70 [ 127.907814][ T6757] do_syscall_64+0x166/0x520 [ 127.907827][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.907837][ T6757] ? clear_bhb_loop+0x70/0xc0 [ 127.907848][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.907858][ T6757] RIP: 0033:0x7fab3259f559 [ 127.907868][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.907875][ T6757] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 127.907887][ T6757] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 127.907893][ T6757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 127.907899][ T6757] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 127.907904][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.907910][ T6757] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 127.907925][ T6757] [ 128.163248][ T6759] FAULT_INJECTION: forcing a failure. [ 128.163248][ T6759] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 128.163269][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 128.163281][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.163287][ T6759] Call Trace: [ 128.163292][ T6759] [ 128.163296][ T6759] dump_stack_lvl+0xe8/0x150 [ 128.163316][ T6759] should_fail_ex+0x3eb/0x540 [ 128.163336][ T6759] prepare_alloc_pages+0x21e/0x5f0 [ 128.163352][ T6759] __alloc_frozen_pages_noprof+0x17c/0x410 [ 128.163365][ T6759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.163381][ T6759] ? policy_nodemask+0x31b/0x980 [ 128.163394][ T6759] ? __lock_acquire+0x747/0x2de0 [ 128.163407][ T6759] alloc_pages_mpol+0x21e/0x390 [ 128.163422][ T6759] folio_alloc_mpol_noprof+0x39/0x160 [ 128.163436][ T6759] vma_alloc_folio_noprof+0xe1/0x1e0 [ 128.163451][ T6759] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 128.163467][ T6759] ? vma_has_anon_rmap+0x95/0x270 [ 128.163480][ T6759] do_pte_missing+0x559/0x3570 [ 128.163495][ T6759] ? handle_mm_fault+0xee/0x2f80 [ 128.163510][ T6759] handle_mm_fault+0x1807/0x2f80 [ 128.163529][ T6759] ? handle_mm_fault+0xee/0x2f80 [ 128.163544][ T6759] ? follow_page_pte+0x660/0xf10 [ 128.163557][ T6759] ? __pfx_handle_mm_fault+0x10/0x10 [ 128.163570][ T6759] ? follow_page_pte+0x748/0xf10 [ 128.163586][ T6759] ? __pfx_follow_page_pte+0x10/0x10 [ 128.163603][ T6759] __get_user_pages+0x1670/0x2750 [ 128.163631][ T6759] populate_vma_page_range+0x311/0x3f0 [ 128.163644][ T6759] ? __pfx_populate_vma_page_range+0x10/0x10 [ 128.163664][ T6759] ? down_read+0x2b9/0x320 [ 128.163682][ T6759] __mm_populate+0x25f/0x390 [ 128.163694][ T6759] ? __pfx___mm_populate+0x10/0x10 [ 128.163712][ T6759] vm_mmap_pgoff+0x36e/0x520 [ 128.163726][ T6759] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.163738][ T6759] ? __fget_files+0x2a/0x420 [ 128.163751][ T6759] ? __fget_files+0x3a2/0x420 [ 128.163761][ T6759] ? __fget_files+0x2a/0x420 [ 128.163773][ T6759] ksys_mmap_pgoff+0x4dc/0x760 [ 128.163789][ T6759] do_syscall_64+0x166/0x520 [ 128.163801][ T6759] ? trace_irq_disable+0x3b/0x140 [ 128.163812][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.163822][ T6759] ? clear_bhb_loop+0x70/0xc0 [ 128.163833][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.163843][ T6759] RIP: 0033:0x7fab3259f559 [ 128.163853][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.163860][ T6759] RSP: 002b:00007fab307b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.163871][ T6759] RAX: ffffffffffffffda RBX: 00007fab32826180 RCX: 00007fab3259f559 [ 128.163878][ T6759] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 128.163884][ T6759] RBP: 00007fab32636b20 R08: 0000000000000003 R09: 0000000000000000 [ 128.163890][ T6759] R10: 0000000000028012 R11: 0000000000000246 R12: 0000000000000000 [ 128.163895][ T6759] R13: 00007fab32826218 R14: 00007fab32826180 R15: 00007fffac62bcb8 [ 128.163911][ T6759] [ 128.632253][ T4954] Bluetooth: hci2: unexpected cc 0x042d length: 41 > 7 [ 128.845681][ T5733] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 128.875795][ T5635] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 128.955820][ T6767] md: invalid raid superblock magic on ram0 [ 128.955835][ T6767] md: ram0 does not have a valid v0.0 superblock, not importing! [ 128.955877][ T6767] md: md_import_device returned -22 [ 128.996921][ T5733] usb 2-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 128.997764][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.997781][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.997791][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.997808][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.000960][ T5733] usb 2-1: config 0 descriptor?? [ 129.061808][ T5635] usb 4-1: New USB device found: idVendor=0c70, idProduct=f0b6, bcdDevice=0.00 [ 129.065064][ T5635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.065082][ T5635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.065102][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.118167][ T5635] usb 4-1: config 0 descriptor?? [ 129.167213][ T6770] FAULT_INJECTION: forcing a failure. [ 129.167213][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 129.167233][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 129.167245][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.167253][ T6770] Call Trace: [ 129.167258][ T6770] [ 129.167262][ T6770] dump_stack_lvl+0xe8/0x150 [ 129.167282][ T6770] should_fail_ex+0x3eb/0x540 [ 129.167299][ T6770] should_failslab+0xa8/0x100 [ 129.167314][ T6770] __kmalloc_noprof+0xf9/0x710 [ 129.167324][ T6770] ? kfree+0x4d/0x650 [ 129.167341][ T6770] ? property_entries_dup+0x92/0xbc0 [ 129.167353][ T6770] ? property_entries_dup+0x92/0xbc0 [ 129.167367][ T6770] property_entries_dup+0x92/0xbc0 [ 129.167379][ T6770] ? dev_set_name+0xe2/0x140 [ 129.167394][ T6770] fwnode_create_software_node+0x92/0x1f0 [ 129.167409][ T6770] device_create_managed_software_node+0xce/0x1f0 [ 129.167423][ T6770] iommufd_test+0x38a0/0x6360 [ 129.167441][ T6770] ? __lock_acquire+0x747/0x2de0 [ 129.167452][ T6770] ? __pfx_iommufd_test+0x10/0x10 [ 129.167470][ T6770] ? tomoyo_path_number_perm+0x219/0x5f0 [ 129.167482][ T6770] ? tomoyo_path_number_perm+0x219/0x5f0 [ 129.167495][ T6770] ? lock_acquire+0x115/0x350 [ 129.167512][ T6770] ? __might_fault+0xaf/0x130 [ 129.167528][ T6770] iommufd_fops_ioctl+0x465/0x600 [ 129.167545][ T6770] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.167561][ T6770] ? __fget_files+0x2a/0x420 [ 129.167578][ T6770] ? bpf_lsm_file_ioctl+0x9/0x20 [ 129.167590][ T6770] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.167603][ T6770] __se_sys_ioctl+0xfc/0x170 [ 129.167617][ T6770] do_syscall_64+0x166/0x520 [ 129.167630][ T6770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.167639][ T6770] ? clear_bhb_loop+0x70/0xc0 [ 129.167650][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.167659][ T6770] RIP: 0033:0x7f8d91f9f559 [ 129.167670][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.167678][ T6770] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.167689][ T6770] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 129.167696][ T6770] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 129.167702][ T6770] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 129.167708][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.167714][ T6770] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 129.167730][ T6770] [ 129.167760][ T6770] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 129.486966][ T6765] kAFS: unable to lookup cell '' [ 129.491927][ T6765] kAFS: unable to lookup cell '(,c' [ 129.556961][ T2251] usb 3-1: Invalid firmware size=96. [ 129.562646][ T2251] usb 3-1: Invalid firmware size=96. [ 129.582003][ T2251] usb 3-1: Invalid firmware size=96. [ 129.598314][ T2251] usb 3-1: USB disconnect, device number 25 [ 129.666227][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 129.666288][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.693100][ T5733] usb 2-1: USB disconnect, device number 17 [ 129.742180][ T5635] aquacomputer_d5next 0003:0C70:F0B6.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 129.783403][ T6782] udevd[6782]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 129.835114][ T6784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 129.884336][ T6786] Can't find a SQUASHFS superblock on nullb0 [ 129.930174][ T5733] usb 4-1: USB disconnect, device number 20 [ 129.951419][ T6788] Invalid ELF header magic: != ELF [ 130.209433][ T6790] device-mapper: table: 248:3: ram2 too small for target: start=1024, len=12416, dev_size=8192 [ 130.209451][ T6790] device-mapper: core: Cannot calculate initial queue limits [ 130.209457][ T6790] device-mapper: ioctl: unable to set up device queue for new table. [ 130.303645][ T6793] No source specified [ 130.852464][ T6819] FAULT_INJECTION: forcing a failure. [ 130.852464][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 130.852483][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 130.852494][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.852501][ T6819] Call Trace: [ 130.852505][ T6819] [ 130.852510][ T6819] dump_stack_lvl+0xe8/0x150 [ 130.852530][ T6819] should_fail_ex+0x3eb/0x540 [ 130.852548][ T6819] should_failslab+0xa8/0x100 [ 130.852563][ T6819] __kmalloc_cache_noprof+0x9e/0x600 [ 130.852576][ T6819] ? fwnode_create_software_node+0xeb/0x1f0 [ 130.852588][ T6819] ? fwnode_create_software_node+0xeb/0x1f0 [ 130.852603][ T6819] fwnode_create_software_node+0xeb/0x1f0 [ 130.852615][ T6819] device_create_managed_software_node+0xce/0x1f0 [ 130.852629][ T6819] iommufd_test+0x38a0/0x6360 [ 130.852648][ T6819] ? __lock_acquire+0x747/0x2de0 [ 130.852658][ T6819] ? __pfx_iommufd_test+0x10/0x10 [ 130.852676][ T6819] ? tomoyo_path_number_perm+0x219/0x5f0 [ 130.852689][ T6819] ? tomoyo_path_number_perm+0x219/0x5f0 [ 130.852701][ T6819] ? lock_acquire+0x115/0x350 [ 130.852718][ T6819] ? __might_fault+0xaf/0x130 [ 130.852735][ T6819] iommufd_fops_ioctl+0x465/0x600 [ 130.852752][ T6819] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 130.852768][ T6819] ? __fget_files+0x2a/0x420 [ 130.852785][ T6819] ? bpf_lsm_file_ioctl+0x9/0x20 [ 130.852807][ T6819] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 130.852822][ T6819] __se_sys_ioctl+0xfc/0x170 [ 130.852837][ T6819] do_syscall_64+0x166/0x520 [ 130.852849][ T6819] ? trace_irq_disable+0x3b/0x140 [ 130.852860][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.852870][ T6819] ? clear_bhb_loop+0x70/0xc0 [ 130.852881][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.852891][ T6819] RIP: 0033:0x7fab3259f559 [ 130.852902][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.852913][ T6819] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.852925][ T6819] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 130.852932][ T6819] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 130.852939][ T6819] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.852945][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.852951][ T6819] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 130.852967][ T6819] [ 130.852988][ T6819] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 131.293166][ T6825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.259'. [ 131.390817][ T6828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.261'. [ 131.592135][ T6833] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 131.621688][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.635353][ T6833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.688612][ T2251] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 131.736575][ T5733] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 131.838266][ T2251] usb 3-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 131.840642][ T2251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.840657][ T2251] usb 3-1: Product: syz [ 131.840664][ T2251] usb 3-1: Manufacturer: syz [ 131.840670][ T2251] usb 3-1: SerialNumber: syz [ 131.842310][ T2251] usb 3-1: config 0 descriptor?? [ 131.896835][ T5733] usb 2-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 131.899750][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.899770][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.899781][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.899800][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.903921][ T5733] usb 2-1: config 0 descriptor?? [ 132.045569][ T2251] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 132.046111][ T2251] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 132.046126][ T2251] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 132.080457][ T2251] usb 3-1: USB disconnect, device number 26 [ 132.324369][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 132.324433][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.349178][ T5733] usb 2-1: USB disconnect, device number 18 [ 132.694952][ T6851] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in; [ 132.694952][ T6851] program syz.2.267 not setting count and/or reply_len properly [ 132.792999][ T6853] FAULT_INJECTION: forcing a failure. [ 132.792999][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 132.793021][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.2.268 Not tainted syzkaller #0 PREEMPT(full) [ 132.793033][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.793039][ T6853] Call Trace: [ 132.793043][ T6853] [ 132.793047][ T6853] dump_stack_lvl+0xe8/0x150 [ 132.793067][ T6853] should_fail_ex+0x3eb/0x540 [ 132.793083][ T6853] should_failslab+0xa8/0x100 [ 132.793098][ T6853] __kmalloc_cache_noprof+0x9e/0x600 [ 132.793111][ T6853] ? tracefs_init_fs_context+0x51/0xf0 [ 132.793121][ T6853] ? tracefs_init_fs_context+0x51/0xf0 [ 132.793133][ T6853] tracefs_init_fs_context+0x51/0xf0 [ 132.793143][ T6853] alloc_fs_context+0x99e/0xd00 [ 132.793161][ T6853] __se_sys_fsopen+0x118/0x370 [ 132.793176][ T6853] do_syscall_64+0x166/0x520 [ 132.793188][ T6853] ? trace_irq_disable+0x3b/0x140 [ 132.793200][ T6853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.793210][ T6853] ? clear_bhb_loop+0x70/0xc0 [ 132.793222][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.793232][ T6853] RIP: 0033:0x7ff66e99f559 [ 132.793242][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.793250][ T6853] RSP: 002b:00007ff66f947028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 132.793262][ T6853] RAX: ffffffffffffffda RBX: 00007ff66ec25fa0 RCX: 00007ff66e99f559 [ 132.793269][ T6853] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000600 [ 132.793275][ T6853] RBP: 00007ff66ea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 132.793281][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.793287][ T6853] R13: 00007ff66ec26038 R14: 00007ff66ec25fa0 R15: 00007ffe5ba17e28 [ 132.793302][ T6853] [ 132.982183][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982219][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.163631][ T6856] FAULT_INJECTION: forcing a failure. [ 133.163631][ T6856] name failslab, interval 1, probability 0, space 0, times 0 [ 133.163660][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.0.270 Not tainted syzkaller #0 PREEMPT(full) [ 133.163673][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.163679][ T6856] Call Trace: [ 133.163684][ T6856] [ 133.163689][ T6856] dump_stack_lvl+0xe8/0x150 [ 133.163714][ T6856] should_fail_ex+0x3eb/0x540 [ 133.163731][ T6856] should_failslab+0xa8/0x100 [ 133.163745][ T6856] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 133.163757][ T6856] ? property_entries_dup+0x4d3/0xbc0 [ 133.163768][ T6856] ? property_entries_dup+0x4d3/0xbc0 [ 133.163778][ T6856] ? __kmalloc_noprof+0x1a6/0x710 [ 133.163790][ T6856] kstrdup+0x42/0x100 [ 133.163800][ T6856] property_entries_dup+0x4d3/0xbc0 [ 133.163818][ T6856] fwnode_create_software_node+0x92/0x1f0 [ 133.163831][ T6856] device_create_managed_software_node+0xce/0x1f0 [ 133.163845][ T6856] iommufd_test+0x38a0/0x6360 [ 133.163864][ T6856] ? __lock_acquire+0x747/0x2de0 [ 133.163875][ T6856] ? __pfx_iommufd_test+0x10/0x10 [ 133.163892][ T6856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.163905][ T6856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.163917][ T6856] ? lock_acquire+0x115/0x350 [ 133.163934][ T6856] ? __might_fault+0xaf/0x130 [ 133.163951][ T6856] iommufd_fops_ioctl+0x465/0x600 [ 133.163968][ T6856] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 133.163984][ T6856] ? __fget_files+0x2a/0x420 [ 133.164000][ T6856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.164012][ T6856] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 133.164026][ T6856] __se_sys_ioctl+0xfc/0x170 [ 133.164039][ T6856] do_syscall_64+0x166/0x520 [ 133.164051][ T6856] ? trace_irq_disable+0x3b/0x140 [ 133.164063][ T6856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.164073][ T6856] ? clear_bhb_loop+0x70/0xc0 [ 133.164085][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.164095][ T6856] RIP: 0033:0x7f8d91f9f559 [ 133.164105][ T6856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.164114][ T6856] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.164125][ T6856] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 133.164132][ T6856] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 133.164138][ T6856] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.164143][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.164149][ T6856] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 133.164165][ T6856] [ 133.164181][ T6856] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 133.515068][ T6861] FAULT_INJECTION: forcing a failure. [ 133.515068][ T6861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.515088][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) [ 133.515099][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.515106][ T6861] Call Trace: [ 133.515111][ T6861] [ 133.515115][ T6861] dump_stack_lvl+0xe8/0x150 [ 133.515146][ T6861] should_fail_ex+0x3eb/0x540 [ 133.515164][ T6861] prepare_alloc_pages+0x21e/0x5f0 [ 133.515180][ T6861] __alloc_frozen_pages_noprof+0x17c/0x410 [ 133.515191][ T6861] ? sock_ioctl+0x57a/0x7e0 [ 133.515205][ T6861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.515227][ T6861] alloc_pages_mpol+0x21e/0x390 [ 133.515243][ T6861] alloc_pages_noprof+0xb1/0x2b0 [ 133.515258][ T6861] pte_alloc_one+0x22/0x3d0 [ 133.515273][ T6861] __pte_alloc+0x25/0x1a0 [ 133.515286][ T6861] do_pte_missing+0x2ddb/0x3570 [ 133.515306][ T6861] handle_mm_fault+0x1807/0x2f80 [ 133.515328][ T6861] ? handle_mm_fault+0xee/0x2f80 [ 133.515344][ T6861] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.515357][ T6861] ? __pfx_handle_mm_fault+0x10/0x10 [ 133.515376][ T6861] ? __lock_acquire+0x747/0x2de0 [ 133.515389][ T6861] ? lock_mm_and_find_vma+0xa7/0x340 [ 133.515405][ T6861] do_user_addr_fault+0x7f6/0x1480 [ 133.515424][ T6861] exc_page_fault+0x6a/0xc0 [ 133.515438][ T6861] asm_exc_page_fault+0x26/0x30 [ 133.515448][ T6861] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 133.515460][ T6861] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 133.515468][ T6861] RSP: 0018:ffffc90004297ab8 EFLAGS: 00050202 [ 133.515478][ T6861] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 133.515485][ T6861] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90004297bd0 [ 133.515491][ T6861] RBP: ffffc90004297cb0 R08: ffffc90004297be7 R09: 1ffff92000852f7c [ 133.515498][ T6861] R10: dffffc0000000000 R11: fffff52000852f7d R12: ffff88802deec000 [ 133.515505][ T6861] R13: dffffc0000000000 R14: ffffc90004297bd0 R15: 0000200000000000 [ 133.515521][ T6861] _copy_from_user+0x7a/0xb0 [ 133.515536][ T6861] rfcomm_dev_ioctl+0x1b4/0x21b0 [ 133.515562][ T6861] ? kasan_quarantine_put+0xbb/0x1f0 [ 133.515574][ T6861] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 133.515591][ T6861] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.515607][ T6861] ? do_vfs_ioctl+0x116f/0x1530 [ 133.515623][ T6861] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 133.515639][ T6861] sock_do_ioctl+0x101/0x320 [ 133.515654][ T6861] ? __pfx_sock_do_ioctl+0x10/0x10 [ 133.515675][ T6861] sock_ioctl+0x57a/0x7e0 [ 133.515687][ T6861] ? __fget_files+0x2a/0x420 [ 133.515698][ T6861] ? __pfx_sock_ioctl+0x10/0x10 [ 133.515710][ T6861] ? __fget_files+0x2a/0x420 [ 133.515721][ T6861] ? __fget_files+0x2a/0x420 [ 133.515733][ T6861] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.515746][ T6861] ? __pfx_sock_ioctl+0x10/0x10 [ 133.515759][ T6861] __se_sys_ioctl+0xfc/0x170 [ 133.515772][ T6861] do_syscall_64+0x166/0x520 [ 133.515784][ T6861] ? trace_irq_disable+0x3b/0x140 [ 133.515796][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.515805][ T6861] ? clear_bhb_loop+0x70/0xc0 [ 133.515817][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.515826][ T6861] RIP: 0033:0x7ff66e99f559 [ 133.515836][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.515844][ T6861] RSP: 002b:00007ff66f947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.515854][ T6861] RAX: ffffffffffffffda RBX: 00007ff66ec25fa0 RCX: 00007ff66e99f559 [ 133.515860][ T6861] RDX: 0000200000000000 RSI: 00000000400452c9 RDI: 0000000000000004 [ 133.515867][ T6861] RBP: 00007ff66f947090 R08: 0000000000000000 R09: 0000000000000000 [ 133.515872][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.515878][ T6861] R13: 00007ff66ec26038 R14: 00007ff66ec25fa0 R15: 00007ffe5ba17e28 [ 133.515894][ T6861] [ 133.905365][ T5733] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.070655][ T6863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.272'. [ 134.105709][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 134.106435][ T5733] usb 2-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.127498][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.129405][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.129420][ T5733] usb 2-1: Product: syz [ 134.129427][ T5733] usb 2-1: Manufacturer: syz [ 134.129434][ T5733] usb 2-1: SerialNumber: syz [ 134.131152][ T5733] usb 2-1: config 0 descriptor?? [ 134.132714][ T5733] cdc_ether 2-1:0.0: missing cdc header descriptor [ 134.197018][ T5733] usb 2-1: unsupported MDLM descriptors [ 134.333740][ T196] usb 2-1: USB disconnect, device number 19 [ 134.336533][ T4954] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 134.336568][ T4954] Bluetooth: hci0: Injecting HCI hardware error event [ 134.337930][ T5642] Bluetooth: hci0: hardware error 0x00 [ 134.495969][ T5733] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 134.646995][ T5733] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 134.647985][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.648001][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.648012][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.648033][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.649502][ T5733] usb 3-1: config 0 descriptor?? [ 135.061206][ T5733] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 135.084641][ T5733] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 135.120721][ T6874] udevd[6874]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 135.206906][ T196] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 135.336075][ T196] usb 2-1: device descriptor read/64, error -71 [ 135.576497][ T196] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 135.706701][ T196] usb 2-1: device descriptor read/64, error -71 [ 135.820804][ T196] usb usb2-port1: attempt power cycle [ 136.157237][ T196] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 136.181606][ T196] usb 2-1: device descriptor read/8, error -71 [ 136.416248][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.419639][ T196] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 136.443426][ T196] usb 2-1: device descriptor read/8, error -71 [ 136.547068][ T196] usb usb2-port1: unable to enumerate USB device [ 137.410674][ T5733] usb 3-1: USB disconnect, device number 27 [ 137.576342][ T5733] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 137.727231][ T5733] usb 3-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 137.728117][ T5733] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.728135][ T5733] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.728146][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.728162][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.729677][ T5733] usb 3-1: config 0 descriptor?? [ 137.835395][ T6870] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 138.074303][ T6886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.176352][ T5733] usbhid 3-1:0.0: can't add hid device: -71 [ 138.176415][ T5733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.184122][ T5733] usb 3-1: USB disconnect, device number 28 [ 138.766983][ T6889] FAULT_INJECTION: forcing a failure. [ 138.766983][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 138.767002][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 138.767016][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.767023][ T6889] Call Trace: [ 138.767027][ T6889] [ 138.767032][ T6889] dump_stack_lvl+0xe8/0x150 [ 138.767052][ T6889] should_fail_ex+0x3eb/0x540 [ 138.767068][ T6889] should_failslab+0xa8/0x100 [ 138.767084][ T6889] __kmalloc_noprof+0xf9/0x710 [ 138.767095][ T6889] ? kfree+0x4d/0x650 [ 138.767103][ T6889] ? property_entries_dup+0x92/0xbc0 [ 138.767114][ T6889] ? property_entries_dup+0x92/0xbc0 [ 138.767127][ T6889] property_entries_dup+0x92/0xbc0 [ 138.767138][ T6889] ? dev_set_name+0xe2/0x140 [ 138.767154][ T6889] fwnode_create_software_node+0x92/0x1f0 [ 138.767168][ T6889] device_create_managed_software_node+0xce/0x1f0 [ 138.767183][ T6889] iommufd_test+0x38a0/0x6360 [ 138.767202][ T6889] ? __lock_acquire+0x747/0x2de0 [ 138.767212][ T6889] ? __pfx_iommufd_test+0x10/0x10 [ 138.767230][ T6889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 138.767252][ T6889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 138.767265][ T6889] ? lock_acquire+0x115/0x350 [ 138.767283][ T6889] ? __might_fault+0xaf/0x130 [ 138.767301][ T6889] iommufd_fops_ioctl+0x465/0x600 [ 138.767320][ T6889] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 138.767336][ T6889] ? __fget_files+0x2a/0x420 [ 138.767353][ T6889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.767365][ T6889] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 138.767379][ T6889] __se_sys_ioctl+0xfc/0x170 [ 138.767393][ T6889] do_syscall_64+0x166/0x520 [ 138.767406][ T6889] ? trace_irq_disable+0x3b/0x140 [ 138.767417][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.767427][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 138.767439][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.767449][ T6889] RIP: 0033:0x7f8d91f9f559 [ 138.767459][ T6889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.767467][ T6889] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.767479][ T6889] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 138.767486][ T6889] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 138.767493][ T6889] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.767498][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.767504][ T6889] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 138.767519][ T6889] [ 138.767526][ T6889] iommufd_mock iommufd_mock1: add pasid-num-bits property failed, rc: -12 [ 139.026451][ T196] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 139.098794][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 139.213839][ T6893] FAULT_INJECTION: forcing a failure. [ 139.213839][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 139.213877][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.2.283 Not tainted syzkaller #0 PREEMPT(full) [ 139.213888][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.213895][ T6893] Call Trace: [ 139.213899][ T6893] [ 139.213904][ T6893] dump_stack_lvl+0xe8/0x150 [ 139.213925][ T6893] should_fail_ex+0x3eb/0x540 [ 139.213942][ T6893] should_failslab+0xa8/0x100 [ 139.213958][ T6893] __kmalloc_cache_noprof+0x9e/0x600 [ 139.213972][ T6893] ? __se_sys_mount+0x166/0x420 [ 139.213983][ T6893] ? __se_sys_mount+0x166/0x420 [ 139.213993][ T6893] ? memdup_user+0x99/0xd0 [ 139.214005][ T6893] __se_sys_mount+0x166/0x420 [ 139.214019][ T6893] ? __pfx___se_sys_mount+0x10/0x10 [ 139.214033][ T6893] ? __x64_sys_mount+0x20/0xc0 [ 139.214045][ T6893] do_syscall_64+0x166/0x520 [ 139.214057][ T6893] ? trace_irq_disable+0x3b/0x140 [ 139.214069][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.214079][ T6893] ? clear_bhb_loop+0x70/0xc0 [ 139.214091][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.214101][ T6893] RIP: 0033:0x7ff66e99f559 [ 139.214112][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.214121][ T6893] RSP: 002b:00007ff66f947028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.214132][ T6893] RAX: ffffffffffffffda RBX: 00007ff66ec25fa0 RCX: 00007ff66e99f559 [ 139.214146][ T6893] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 139.214153][ T6893] RBP: 00007ff66ea36b20 R08: 0000200000000440 R09: 0000000000000000 [ 139.214159][ T6893] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000 [ 139.214165][ T6893] R13: 00007ff66ec26038 R14: 00007ff66ec25fa0 R15: 00007ffe5ba17e28 [ 139.214182][ T6893] [ 139.229051][ T196] usb 2-1: Using ep0 maxpacket: 8 [ 139.229818][ T196] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 139.242338][ T196] usb 2-1: config 0 has no interfaces? [ 139.451242][ T196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.451258][ T196] usb 2-1: Product: syz [ 139.451265][ T196] usb 2-1: Manufacturer: syz [ 139.451272][ T196] usb 2-1: SerialNumber: syz [ 139.454420][ T6893] 9pnet_virtio: no channels available for device syz [ 139.489357][ T196] usb 2-1: config 0 descriptor?? [ 139.746430][ T196] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 139.897116][ T196] usb 3-1: Using ep0 maxpacket: 32 [ 139.898670][ T196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.898700][ T196] usb 3-1: New USB device found: idVendor=0582, idProduct=0114, bcdDevice=0.40 [ 139.899500][ T196] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 71, changing to 7 [ 139.899523][ T196] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.901087][ T196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.901100][ T196] usb 3-1: Product: syz [ 139.901107][ T196] usb 3-1: Manufacturer: syz [ 139.901113][ T196] usb 3-1: SerialNumber: syz [ 139.982161][ T196] usb 3-1: found format II with max.bitrate = 172, frame size=4 [ 139.982367][ T196] usb 3-1: found format II with max.bitrate = 172, frame size=4 [ 140.188568][ T196] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.301148][ T196] usb 3-1: USB disconnect, device number 29 [ 140.463359][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.874957][ T6904] Bluetooth: MGMT ver 1.23 [ 140.957892][ T6906] sctp: [Deprecated]: syz.2.288 (pid 6906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.957892][ T6906] Use struct sctp_sack_info instead [ 141.131875][ T5733] usb 2-1: USB disconnect, device number 24 [ 141.293334][ T6915] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 142.047020][ T5733] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 142.198153][ T5733] usb 2-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 142.198960][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.198979][ T5733] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.198990][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.199006][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.201787][ T5733] usb 2-1: config 0 descriptor?? [ 142.654754][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 142.654817][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 142.676016][ T5733] usb 2-1: USB disconnect, device number 25 [ 142.732826][ T6920] FAULT_INJECTION: forcing a failure. [ 142.732826][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 142.732845][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(full) [ 142.732858][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.732864][ T6920] Call Trace: [ 142.732868][ T6920] [ 142.732874][ T6920] dump_stack_lvl+0xe8/0x150 [ 142.732893][ T6920] should_fail_ex+0x3eb/0x540 [ 142.732915][ T6920] should_failslab+0xa8/0x100 [ 142.732930][ T6920] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 142.732947][ T6920] ? property_entries_dup+0x4d3/0xbc0 [ 142.732959][ T6920] ? property_entries_dup+0x4d3/0xbc0 [ 142.732971][ T6920] ? __kmalloc_noprof+0x1a6/0x710 [ 142.732983][ T6920] kstrdup+0x42/0x100 [ 142.732994][ T6920] property_entries_dup+0x4d3/0xbc0 [ 142.733012][ T6920] fwnode_create_software_node+0x92/0x1f0 [ 142.733025][ T6920] device_create_managed_software_node+0xce/0x1f0 [ 142.733040][ T6920] iommufd_test+0x38a0/0x6360 [ 142.733058][ T6920] ? __lock_acquire+0x747/0x2de0 [ 142.733070][ T6920] ? __pfx_iommufd_test+0x10/0x10 [ 142.733088][ T6920] ? tomoyo_path_number_perm+0x219/0x5f0 [ 142.733101][ T6920] ? tomoyo_path_number_perm+0x219/0x5f0 [ 142.733114][ T6920] ? lock_acquire+0x115/0x350 [ 142.733131][ T6920] ? __might_fault+0xaf/0x130 [ 142.733148][ T6920] iommufd_fops_ioctl+0x465/0x600 [ 142.733165][ T6920] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.733182][ T6920] ? __fget_files+0x2a/0x420 [ 142.733202][ T6920] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.733214][ T6920] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.733227][ T6920] __se_sys_ioctl+0xfc/0x170 [ 142.733241][ T6920] do_syscall_64+0x166/0x520 [ 142.733253][ T6920] ? trace_irq_disable+0x3b/0x140 [ 142.733264][ T6920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.733274][ T6920] ? clear_bhb_loop+0x70/0xc0 [ 142.733286][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.733296][ T6920] RIP: 0033:0x7f8d91f9f559 [ 142.733306][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.733314][ T6920] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.733325][ T6920] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 142.733332][ T6920] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 142.733338][ T6920] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.733344][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.733350][ T6920] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 142.733366][ T6920] [ 142.733748][ T6920] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 143.324868][ T6928] FAULT_INJECTION: forcing a failure. [ 143.324868][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 143.324887][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 143.324900][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.324907][ T6928] Call Trace: [ 143.324912][ T6928] [ 143.324916][ T6928] dump_stack_lvl+0xe8/0x150 [ 143.324936][ T6928] should_fail_ex+0x3eb/0x540 [ 143.324953][ T6928] should_failslab+0xa8/0x100 [ 143.324968][ T6928] __kmalloc_cache_noprof+0x9e/0x600 [ 143.324981][ T6928] ? __se_sys_mount+0x166/0x420 [ 143.324992][ T6928] ? __se_sys_mount+0x166/0x420 [ 143.325002][ T6928] ? memdup_user+0x99/0xd0 [ 143.325014][ T6928] __se_sys_mount+0x166/0x420 [ 143.325027][ T6928] ? __pfx___se_sys_mount+0x10/0x10 [ 143.325041][ T6928] ? __x64_sys_mount+0x20/0xc0 [ 143.325052][ T6928] do_syscall_64+0x166/0x520 [ 143.325064][ T6928] ? trace_irq_disable+0x3b/0x140 [ 143.325076][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.325089][ T6928] ? clear_bhb_loop+0x70/0xc0 [ 143.325101][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.325110][ T6928] RIP: 0033:0x7f8d91f9f559 [ 143.325120][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.325129][ T6928] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.325140][ T6928] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 143.325147][ T6928] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 143.325153][ T6928] RBP: 00007f8d92036b20 R08: 0000200000000440 R09: 0000000000000000 [ 143.325159][ T6928] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000 [ 143.325165][ T6928] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 143.325181][ T6928] [ 143.545027][ T6928] 9pnet_virtio: no channels available for device syz [ 143.906274][ T5635] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 144.036230][ T5635] usb 3-1: device descriptor read/64, error -71 [ 144.276893][ T5635] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 144.406377][ T5635] usb 3-1: device descriptor read/64, error -71 [ 144.517485][ T5635] usb usb3-port1: attempt power cycle [ 144.836828][ T196] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 144.856253][ T5635] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 144.876993][ T5635] usb 3-1: device descriptor read/8, error -71 [ 144.987354][ T196] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 144.988160][ T196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.988176][ T196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.988187][ T196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.988209][ T196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.992026][ T196] usb 2-1: config 0 descriptor?? [ 145.116865][ T5635] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 145.139474][ T5635] usb 3-1: device descriptor read/8, error -71 [ 145.246587][ T5635] usb usb3-port1: unable to enumerate USB device [ 145.418538][ T196] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 145.435092][ T196] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.473335][ T6941] udevd[6941]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 146.413601][ T6947] FAULT_INJECTION: forcing a failure. [ 146.413601][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 146.413673][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 146.413686][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.413692][ T6947] Call Trace: [ 146.413696][ T6947] [ 146.413702][ T6947] dump_stack_lvl+0xe8/0x150 [ 146.413721][ T6947] should_fail_ex+0x3eb/0x540 [ 146.413738][ T6947] should_failslab+0xa8/0x100 [ 146.413753][ T6947] __kmalloc_cache_noprof+0x9e/0x600 [ 146.413767][ T6947] ? swnode_register+0x59/0x590 [ 146.413777][ T6947] ? swnode_register+0x59/0x590 [ 146.413791][ T6947] swnode_register+0x59/0x590 [ 146.413805][ T6947] fwnode_create_software_node+0x194/0x1f0 [ 146.413819][ T6947] device_create_managed_software_node+0xce/0x1f0 [ 146.413834][ T6947] iommufd_test+0x38a0/0x6360 [ 146.413852][ T6947] ? __lock_acquire+0x747/0x2de0 [ 146.413863][ T6947] ? __pfx_iommufd_test+0x10/0x10 [ 146.413881][ T6947] ? tomoyo_path_number_perm+0x219/0x5f0 [ 146.413893][ T6947] ? tomoyo_path_number_perm+0x219/0x5f0 [ 146.413906][ T6947] ? lock_acquire+0x115/0x350 [ 146.413923][ T6947] ? __might_fault+0xaf/0x130 [ 146.413940][ T6947] iommufd_fops_ioctl+0x465/0x600 [ 146.413957][ T6947] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 146.413973][ T6947] ? __fget_files+0x2a/0x420 [ 146.413990][ T6947] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.414002][ T6947] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 146.414015][ T6947] __se_sys_ioctl+0xfc/0x170 [ 146.414029][ T6947] do_syscall_64+0x166/0x520 [ 146.414041][ T6947] ? trace_irq_disable+0x3b/0x140 [ 146.414052][ T6947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.414062][ T6947] ? clear_bhb_loop+0x70/0xc0 [ 146.414073][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.414083][ T6947] RIP: 0033:0x7f8d91f9f559 [ 146.414092][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.414100][ T6947] RSP: 002b:00007f8d92f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.414112][ T6947] RAX: ffffffffffffffda RBX: 00007f8d92225fa0 RCX: 00007f8d91f9f559 [ 146.414119][ T6947] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 146.414125][ T6947] RBP: 00007f8d92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 146.414131][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.414137][ T6947] R13: 00007f8d92226038 R14: 00007f8d92225fa0 R15: 00007ffcc9823338 [ 146.414152][ T6947] [ 146.414785][ T6947] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 146.710304][ T196] usb 2-1: USB disconnect, device number 26 [ 147.132315][ T4954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.146483][ T4954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.147249][ T4954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.165489][ T4954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.174143][ T4954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.636347][ T196] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 147.785665][ T196] usb 2-1: Using ep0 maxpacket: 8 [ 147.786114][ T196] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.812733][ T196] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 147.812751][ T196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.812764][ T196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.812775][ T196] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.812799][ T196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.923515][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.939698][ T6950] syz.0.303 (6950): drop_caches: 2 [ 147.976241][ T6969] md: invalid raid superblock magic on ram4 [ 147.976254][ T6969] md: ram4 does not have a valid v0.0 superblock, not importing! [ 147.976311][ T6969] md: md_import_device returned -22 [ 148.084327][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.108370][ T196] usb 2-1: usb_control_msg returned -32 [ 148.108398][ T196] usbtmc 2-1:16.0: can't read capabilities [ 148.249795][ T196] usb 2-1: USB disconnect, device number 27 [ 148.292372][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.294485][ T6977] FAULT_INJECTION: forcing a failure. [ 148.294485][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.294504][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.2.310 Not tainted syzkaller #0 PREEMPT(full) [ 148.294516][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.294523][ T6977] Call Trace: [ 148.294527][ T6977] [ 148.294532][ T6977] dump_stack_lvl+0xe8/0x150 [ 148.294552][ T6977] should_fail_ex+0x3eb/0x540 [ 148.294570][ T6977] _copy_from_user+0x2d/0xb0 [ 148.294586][ T6977] __se_sys_mount+0x18b/0x420 [ 148.294599][ T6977] ? __pfx___se_sys_mount+0x10/0x10 [ 148.294613][ T6977] ? __x64_sys_mount+0x20/0xc0 [ 148.294624][ T6977] do_syscall_64+0x166/0x520 [ 148.294637][ T6977] ? trace_irq_disable+0x3b/0x140 [ 148.294649][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.294659][ T6977] ? clear_bhb_loop+0x70/0xc0 [ 148.294671][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.294681][ T6977] RIP: 0033:0x7ff66e99f559 [ 148.294691][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.294700][ T6977] RSP: 002b:00007ff66f947028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.294711][ T6977] RAX: ffffffffffffffda RBX: 00007ff66ec25fa0 RCX: 00007ff66e99f559 [ 148.294718][ T6977] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 148.294725][ T6977] RBP: 00007ff66ea36b20 R08: 0000200000000440 R09: 0000000000000000 [ 148.294731][ T6977] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000 [ 148.294736][ T6977] R13: 00007ff66ec26038 R14: 00007ff66ec25fa0 R15: 00007ffe5ba17e28 [ 148.294752][ T6977] [ 148.495847][ T6977] 9pnet_virtio: no channels available for device syz [ 148.559373][ T6958] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.597964][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.936098][ T5635] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 148.943457][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.029276][ T64] bridge_slave_0: left allmulticast mode [ 149.029301][ T64] bridge_slave_0: left promiscuous mode [ 149.029430][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.086867][ T5635] usb 3-1: Using ep0 maxpacket: 16 [ 149.088785][ T5635] usb 3-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 149.089592][ T5635] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 149.089605][ T5635] usb 3-1: config 0 has no interface number 0 [ 149.089627][ T5635] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.089639][ T5635] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.093422][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 149.093436][ T5635] usb 3-1: Product: syz [ 149.093443][ T5635] usb 3-1: SerialNumber: syz [ 149.163339][ T5635] usb 3-1: config 0 descriptor?? [ 149.190413][ T5635] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 149.207569][ T5635] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 149.227051][ T4954] Bluetooth: hci4: command tx timeout [ 149.487832][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489074][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489254][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489427][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489596][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489798][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.489965][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.490132][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.490300][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.490470][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 149.491812][ T5635] usb 3-1: USB disconnect, device number 34 [ 149.491922][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 149.601923][ T5635] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 149.827076][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.833829][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.858674][ T7001] md: invalid raid superblock magic on ram2 [ 149.858685][ T7001] md: ram2 does not have a valid v0.0 superblock, not importing! [ 149.858727][ T7001] md: md_import_device returned -22 [ 149.881486][ T64] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 149.898545][ T64] bond0 (unregistering): Released all slaves [ 150.016637][ T64] tipc: Left network mode [ 150.311567][ T7014] FAULT_INJECTION: forcing a failure. [ 150.311567][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 150.311587][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(full) [ 150.311600][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.311607][ T7014] Call Trace: [ 150.311611][ T7014] [ 150.311616][ T7014] dump_stack_lvl+0xe8/0x150 [ 150.311636][ T7014] should_fail_ex+0x3eb/0x540 [ 150.311652][ T7014] should_failslab+0xa8/0x100 [ 150.311667][ T7014] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 150.311680][ T7014] ? property_entries_dup+0x4d3/0xbc0 [ 150.311690][ T7014] ? property_entries_dup+0x4d3/0xbc0 [ 150.311701][ T7014] ? __kmalloc_noprof+0x1a6/0x710 [ 150.311713][ T7014] kstrdup+0x42/0x100 [ 150.311729][ T7014] property_entries_dup+0x4d3/0xbc0 [ 150.311751][ T7014] fwnode_create_software_node+0x92/0x1f0 [ 150.311764][ T7014] device_create_managed_software_node+0xce/0x1f0 [ 150.311779][ T7014] iommufd_test+0x38a0/0x6360 [ 150.311798][ T7014] ? __lock_acquire+0x747/0x2de0 [ 150.311809][ T7014] ? __pfx_iommufd_test+0x10/0x10 [ 150.311828][ T7014] ? tomoyo_path_number_perm+0x219/0x5f0 [ 150.311840][ T7014] ? tomoyo_path_number_perm+0x219/0x5f0 [ 150.311853][ T7014] ? lock_acquire+0x115/0x350 [ 150.311870][ T7014] ? __might_fault+0xaf/0x130 [ 150.311887][ T7014] iommufd_fops_ioctl+0x465/0x600 [ 150.311905][ T7014] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 150.311920][ T7014] ? __fget_files+0x2a/0x420 [ 150.311938][ T7014] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.311954][ T7014] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 150.311967][ T7014] __se_sys_ioctl+0xfc/0x170 [ 150.311981][ T7014] do_syscall_64+0x166/0x520 [ 150.311993][ T7014] ? trace_irq_disable+0x3b/0x140 [ 150.312004][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.312014][ T7014] ? clear_bhb_loop+0x70/0xc0 [ 150.312026][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.312036][ T7014] RIP: 0033:0x7fab3259f559 [ 150.312046][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.312055][ T7014] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.312066][ T7014] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 150.312073][ T7014] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 150.312079][ T7014] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.312085][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.312091][ T7014] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 150.312106][ T7014] [ 150.312120][ T7014] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 150.527340][ T196] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 150.698757][ T196] usb 3-1: New USB device found: idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 150.701729][ T196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.701744][ T196] usb 3-1: Product: syz [ 150.701751][ T196] usb 3-1: Manufacturer: syz [ 150.701758][ T196] usb 3-1: SerialNumber: syz [ 150.740271][ T196] usb 3-1: config 0 descriptor?? [ 150.773673][ T5299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 150.998646][ T196] usb 3-1: USB disconnect, device number 35 [ 151.297585][ T4954] Bluetooth: hci4: command tx timeout [ 151.461514][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.461630][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.461707][ T6958] bridge_slave_0: entered allmulticast mode [ 151.464398][ T6958] bridge_slave_0: entered promiscuous mode [ 151.510950][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.514154][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.530549][ T6958] bridge_slave_1: entered allmulticast mode [ 151.551989][ T6958] bridge_slave_1: entered promiscuous mode [ 151.675192][ T64] hsr_slave_0: left promiscuous mode [ 151.688849][ T64] hsr_slave_1: left promiscuous mode [ 151.689617][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.689640][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.692831][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.692845][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.753630][ T64] veth1_macvtap: left promiscuous mode [ 151.753669][ T64] veth0_macvtap: left promiscuous mode [ 151.753727][ T64] veth1_vlan: left promiscuous mode [ 151.753777][ T64] veth0_vlan: left promiscuous mode [ 152.026130][ T7046] md: invalid raid superblock magic on ram4 [ 152.026143][ T7046] md: ram4 does not have a valid v0.0 superblock, not importing! [ 152.026184][ T7046] md: md_import_device returned -22 [ 152.235041][ T196] hid-generic 0005:0C45:0058.000A: unknown main item tag 0x0 [ 152.308192][ T7056] capability: warning: `syz.0.328' uses deprecated v2 capabilities in a way that may be insecure [ 152.335990][ T196] hid-generic 0005:0C45:0058.000A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 152.358973][ T7057] udevd[7057]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 152.558192][ T64] team0 (unregistering): Port device team_slave_1 removed [ 152.587907][ T64] team0 (unregistering): Port device team_slave_0 removed [ 152.782780][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.784746][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.808701][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.868229][ T6958] team0: Port device team_slave_0 added [ 152.889256][ T6958] team0: Port device team_slave_1 added [ 152.920561][ T7038] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.964898][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.964911][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.964924][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.000024][ T196] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 153.029449][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.029460][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.029474][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.156844][ T196] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 153.162868][ T196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.162887][ T196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.162898][ T196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.162924][ T196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.177934][ T196] usb 3-1: config 0 descriptor?? [ 153.318834][ T6958] hsr_slave_0: entered promiscuous mode [ 153.319541][ T6958] hsr_slave_1: entered promiscuous mode [ 153.320445][ T6958] debugfs: 'hsr0' already exists in 'hsr' [ 153.320458][ T6958] Cannot create hsr debugfs directory [ 153.375819][ T4954] Bluetooth: hci4: command tx timeout [ 153.548689][ T7076] kAFS: bad VL server IP address [ 153.623471][ T196] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 153.683325][ T196] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 153.739526][ T7081] udevd[7081]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 154.193529][ T7092] FAULT_INJECTION: forcing a failure. [ 154.193529][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.193550][ T7092] CPU: 0 UID: 0 PID: 7092 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 154.193563][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.193569][ T7092] Call Trace: [ 154.193574][ T7092] [ 154.193578][ T7092] dump_stack_lvl+0xe8/0x150 [ 154.193598][ T7092] should_fail_ex+0x3eb/0x540 [ 154.193616][ T7092] _copy_from_user+0x2d/0xb0 [ 154.193631][ T7092] iommufd_fops_ioctl+0x416/0x600 [ 154.193649][ T7092] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 154.193665][ T7092] ? __fget_files+0x2a/0x420 [ 154.193682][ T7092] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.193694][ T7092] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 154.193709][ T7092] __se_sys_ioctl+0xfc/0x170 [ 154.193724][ T7092] do_syscall_64+0x166/0x520 [ 154.193737][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.193747][ T7092] ? clear_bhb_loop+0x70/0xc0 [ 154.193759][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.193768][ T7092] RIP: 0033:0x7fab3259f559 [ 154.193778][ T7092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.193786][ T7092] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.193798][ T7092] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 154.193806][ T7092] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 154.193812][ T7092] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 154.193818][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.193823][ T7092] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 154.193839][ T7092] [ 154.550568][ T6958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.612173][ T6958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.631851][ T6958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.661001][ T6958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.675136][ T6958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.698338][ T6958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.701346][ T6958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.733080][ T6958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.834822][ T5299] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.057038][ T196] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 155.083489][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.156996][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.186033][ T196] usb 3-1: device descriptor read/64, error -32 [ 155.202971][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.203032][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.231825][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.231885][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.456611][ T4954] Bluetooth: hci4: command tx timeout [ 155.952369][ T5299] 8021q: adding VLAN 0 to HW filter on device eth4 [ 155.994901][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.242471][ T7144] 9p: Bad value for 'wfdno' [ 156.338333][ T5635] usb 3-1: USB disconnect, device number 36 [ 156.413769][ T7151] FAULT_INJECTION: forcing a failure. [ 156.413769][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 156.413789][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT(full) [ 156.413802][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.413808][ T7151] Call Trace: [ 156.413812][ T7151] [ 156.413818][ T7151] dump_stack_lvl+0xe8/0x150 [ 156.413836][ T7151] should_fail_ex+0x3eb/0x540 [ 156.413855][ T7151] should_failslab+0xa8/0x100 [ 156.413869][ T7151] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 156.413881][ T7151] ? property_entries_dup+0x4d3/0xbc0 [ 156.413892][ T7151] ? property_entries_dup+0x4d3/0xbc0 [ 156.413903][ T7151] ? __kmalloc_noprof+0x1a6/0x710 [ 156.413914][ T7151] kstrdup+0x42/0x100 [ 156.413925][ T7151] property_entries_dup+0x4d3/0xbc0 [ 156.413942][ T7151] fwnode_create_software_node+0x92/0x1f0 [ 156.413956][ T7151] device_create_managed_software_node+0xce/0x1f0 [ 156.413970][ T7151] iommufd_test+0x38a0/0x6360 [ 156.413988][ T7151] ? __lock_acquire+0x747/0x2de0 [ 156.413999][ T7151] ? __pfx_iommufd_test+0x10/0x10 [ 156.414017][ T7151] ? tomoyo_path_number_perm+0x219/0x5f0 [ 156.414030][ T7151] ? tomoyo_path_number_perm+0x219/0x5f0 [ 156.414042][ T7151] ? lock_acquire+0x115/0x350 [ 156.414068][ T7151] ? __might_fault+0xaf/0x130 [ 156.414086][ T7151] iommufd_fops_ioctl+0x465/0x600 [ 156.414105][ T7151] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 156.414121][ T7151] ? __fget_files+0x2a/0x420 [ 156.414138][ T7151] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.414151][ T7151] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 156.414166][ T7151] __se_sys_ioctl+0xfc/0x170 [ 156.414180][ T7151] do_syscall_64+0x166/0x520 [ 156.414192][ T7151] ? trace_irq_disable+0x3b/0x140 [ 156.414204][ T7151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.414214][ T7151] ? clear_bhb_loop+0x70/0xc0 [ 156.414226][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.414236][ T7151] RIP: 0033:0x7fab3259f559 [ 156.414246][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.414254][ T7151] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.414266][ T7151] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 156.414272][ T7151] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 156.414278][ T7151] RBP: 00007fab32636b20 R08: 0000000000000000 R09: 0000000000000000 [ 156.414284][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.414290][ T7151] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 156.414306][ T7151] [ 156.414321][ T7151] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 156.568540][ T5635] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 156.737351][ T5635] usb 3-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 156.738382][ T5635] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.738399][ T5635] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.738411][ T5635] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.738429][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.793687][ T5635] usb 3-1: config 0 descriptor?? [ 156.974632][ T6958] veth0_vlan: entered promiscuous mode [ 156.998487][ T6958] veth1_vlan: entered promiscuous mode [ 157.072480][ T6958] veth0_macvtap: entered promiscuous mode [ 157.091703][ T6958] veth1_macvtap: entered promiscuous mode [ 157.133702][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.167653][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.246369][ T7160] md: invalid raid superblock magic on ram0 [ 157.246382][ T7160] md: ram0 does not have a valid v0.0 superblock, not importing! [ 157.246422][ T7160] md: md_import_device returned -22 [ 157.278811][ T121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.279602][ T121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.279885][ T121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.279905][ T121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.347061][ T5635] usbhid 3-1:0.0: can't add hid device: -71 [ 157.347126][ T5635] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.373729][ T5635] usb 3-1: USB disconnect, device number 37 [ 157.532849][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.532864][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.609111][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.609127][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.748744][ T7166] device-mapper: table: 248:4: striped: Target length not divisible by chunk size (-EINVAL) [ 157.748760][ T7166] device-mapper: ioctl: error adding target to table [ 158.270253][ T7188] FAULT_INJECTION: forcing a failure. [ 158.270253][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 158.270273][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.356 Not tainted syzkaller #0 PREEMPT(full) [ 158.270284][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.270291][ T7188] Call Trace: [ 158.270296][ T7188] [ 158.270300][ T7188] dump_stack_lvl+0xe8/0x150 [ 158.270319][ T7188] should_fail_ex+0x3eb/0x540 [ 158.270335][ T7188] should_failslab+0xa8/0x100 [ 158.270350][ T7188] __kmalloc_noprof+0xf9/0x710 [ 158.270361][ T7188] ? lock_acquire+0x115/0x350 [ 158.270371][ T7188] ? tomoyo_encode+0x2ad/0x570 [ 158.270384][ T7188] ? tomoyo_encode+0x2ad/0x570 [ 158.270400][ T7188] tomoyo_encode+0x2ad/0x570 [ 158.270416][ T7188] tomoyo_mount_permission+0x3a4/0x9e0 [ 158.270428][ T7188] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 158.270443][ T7188] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 158.270454][ T7188] ? kasan_save_track+0x4f/0x80 [ 158.270490][ T7188] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.270502][ T7188] security_sb_mount+0xe4/0x320 [ 158.270517][ T7188] path_mount+0xbc/0x1050 [ 158.270530][ T7188] ? user_path_at+0xd4/0x160 [ 158.270543][ T7188] __se_sys_mount+0x31d/0x420 [ 158.270556][ T7188] ? __pfx___se_sys_mount+0x10/0x10 [ 158.270569][ T7188] ? __x64_sys_mount+0x20/0xc0 [ 158.270581][ T7188] do_syscall_64+0x166/0x520 [ 158.270593][ T7188] ? trace_irq_disable+0x3b/0x140 [ 158.270605][ T7188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.270615][ T7188] ? clear_bhb_loop+0x70/0xc0 [ 158.270627][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.270637][ T7188] RIP: 0033:0x7fab3259f559 [ 158.270648][ T7188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.270656][ T7188] RSP: 002b:00007fab307f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.270667][ T7188] RAX: ffffffffffffffda RBX: 00007fab32825fa0 RCX: 00007fab3259f559 [ 158.270675][ T7188] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180 [ 158.270681][ T7188] RBP: 00007fab32636b20 R08: 0000200000004e40 R09: 0000000000000000 [ 158.270687][ T7188] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 158.270693][ T7188] R13: 00007fab32826038 R14: 00007fab32825fa0 R15: 00007fffac62bcb8 [ 158.270710][ T7188] [ 158.289326][ T5635] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 158.450005][ T5635] usb 3-1: Using ep0 maxpacket: 8 [ 158.483081][ T5635] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.483112][ T5635] usb 3-1: New USB device found: idVendor=2040, idProduct=c602, bcdDevice=2a.af [ 158.503788][ T5635] usb 3-1: config 4 interface 0 has no altsetting 0 [ 158.531274][ T5635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.531290][ T5635] usb 3-1: Product: 鵶䷽份叉ﶭ´蚹ያ❄쇏臄쏘笘邩輗앛廵䧰籉笜㨙ཤ쑌ꢰﰐ뚝艻냱찂跭㳦䤓㤰諎姦츎堽趺壘罥벚腾퀼頊웭䥶魨랄㺍⹻灿ꝏ㶏∂붬釼䙄魵욪㉪膁ꐐ贿⪎픽⛷즜瞦輖⾡ꜹ뗡뗀搃푵礄筯達솙푬搳貣萚㣍ᄲ [ 158.531302][ T5635] usb 3-1: Manufacturer: 頉潩⠉沾틄埪烕侌贌䖴ᛑ䅒䫄ꢪ人业츼떾㊺긙唟ⴚ悋覕뵓롇♽킷蓐讄 [ 158.531311][ T5635] usb 3-1: SerialNumber: ๪똒韾䄃엊⹷濕멎Ⱑ駍궀휫띸㏚䭏奚祾赉볶罚抏㔟ꗙ坰䉻㚛硷̳ⱃᑋｨՌё㽨矄갞ḵ詨㨐삪뮀씞ᦹ耄㝯氤桥鿢롒䛩曎汷粼൫꺝溏ធǪ [ 158.744558][ T5635] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 158.769008][ T7192] netlink: 'syz.4.358': attribute type 29 has an invalid length. [ 158.769506][ T5635] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.769818][ T5635] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 158.769847][ T5635] usb 3-1: media controller created [ 158.771663][ T7192] netlink: 'syz.4.358': attribute type 29 has an invalid length. [ 158.773693][ T7192] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 158.773703][ T7192] netlink: 'syz.4.358': attribute type 2 has an invalid length. [ 158.773710][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 158.773965][ T7192] netlink: 'syz.4.358': attribute type 29 has an invalid length. [ 158.866574][ T5635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.893807][ T7192] netlink: 'syz.4.358': attribute type 46 has an invalid length. [ 158.894359][ T7192] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 158.913937][ T7192] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 158.922338][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.4.358 Not tainted syzkaller #0 PREEMPT(full) [ 158.931519][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.941572][ T7192] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 158.946936][ T7192] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b be d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 12 36 26 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 158.966522][ T7192] RSP: 0018:ffffc90003c1f460 EFLAGS: 00010206 [ 158.972570][ T7192] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 158.980525][ T7192] RDX: 0000000000000000 RSI: ffffffff8ea7a0b0 RDI: 00000000000000c0 [ 158.988482][ T7192] RBP: ffffc90003c1f5f8 R08: ffffc90003c1f567 R09: 0000000000000000 [ 158.996439][ T7192] R10: ffffc90003c1f540 R11: fffff52000783ead R12: 0000000000000068 [ 159.004390][ T7192] R13: 0000000000000000 R14: 1ffff92000783ea0 R15: 0000000000000000 [ 159.012342][ T7192] FS: 00007f76be1bb6c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 159.021268][ T7192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.027832][ T7192] CR2: 000000110c3a5117 CR3: 000000005bd1c000 CR4: 00000000003526f0 [ 159.035788][ T7192] Call Trace: [ 159.039051][ T7192] [ 159.041966][ T7192] ? __mutex_lock+0x305/0x15a0 [ 159.046717][ T7192] ? dvb_usbv2_generic_write+0x26/0x60 [ 159.052168][ T7192] ? __mutex_trylock_common+0x15f/0x270 [ 159.057720][ T7192] ? __pfx___mutex_lock+0x10/0x10 [ 159.062731][ T7192] ? __pfx___mutex_lock+0x10/0x10 [ 159.067752][ T7192] ? trace_contention_end+0x3d/0x140 [ 159.073017][ T7192] ? __mutex_lock+0x305/0x15a0 [ 159.077762][ T7192] dvb_usbv2_generic_write+0x26/0x60 [ 159.083031][ T7192] mxl111sf_ctrl_msg+0x160/0x2f0 [ 159.087951][ T7192] mxl111sf_write_reg+0xa9/0x1b0 [ 159.092872][ T7192] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 159.098402][ T7192] mxl111sf_i2c_xfer+0x463/0x5060 [ 159.103409][ T7192] ? lock_acquire+0x115/0x350 [ 159.108070][ T7192] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 159.113507][ T7192] ? is_bpf_text_address+0x26/0x2b0 [ 159.118706][ T7192] ? kernel_text_address+0xa5/0xe0 [ 159.123815][ T7192] ? __kernel_text_address+0xd/0x30 [ 159.129016][ T7192] ? unwind_get_return_address+0x4d/0x90 [ 159.134628][ T7192] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 159.140758][ T7192] ? arch_stack_walk+0xfb/0x150 [ 159.145590][ T7192] ? stack_trace_save+0xa9/0x100 [ 159.150522][ T7192] ? __pfx_stack_trace_save+0x10/0x10 [ 159.155894][ T7192] ? stack_depot_save_flags+0x33/0x810 [ 159.161337][ T7192] ? kasan_save_track+0x4f/0x80 [ 159.166170][ T7192] ? look_up_lock_class+0x57/0x110 [ 159.171263][ T7192] ? register_lock_class+0x31/0x2e0 [ 159.176467][ T7192] ? __lock_acquire+0x747/0x2de0 [ 159.181410][ T7192] ? do_raw_spin_lock+0x12b/0x2f0 [ 159.186431][ T7192] __i2c_transfer+0x7bf/0x1fe0 [ 159.191183][ T7192] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 159.196983][ T7192] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 159.202772][ T7192] ? rt_mutex_lock_nested+0x149/0x1c0 [ 159.208126][ T7192] ? i2c_transfer+0xc7/0x2d0 [ 159.212719][ T7192] i2c_transfer+0x1cb/0x2d0 [ 159.217203][ T7192] i2cdev_ioctl_rdwr+0x460/0x740 [ 159.222123][ T7192] i2cdev_ioctl+0x6a5/0x880 [ 159.226608][ T7192] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 159.231628][ T7192] ? __fget_files+0x2a/0x420 [ 159.236243][ T7192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.241170][ T7192] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 159.246181][ T7192] __se_sys_ioctl+0xfc/0x170 [ 159.250759][ T7192] do_syscall_64+0x166/0x520 [ 159.255334][ T7192] ? trace_irq_disable+0x3b/0x140 [ 159.260353][ T7192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.266420][ T7192] ? clear_bhb_loop+0x70/0xc0 [ 159.271090][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.276971][ T7192] RIP: 0033:0x7f76bd39f559 [ 159.281368][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.300955][ T7192] RSP: 002b:00007f76be1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.309349][ T7192] RAX: ffffffffffffffda RBX: 00007f76bd625fa0 RCX: 00007f76bd39f559 [ 159.317305][ T7192] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000003 [ 159.325256][ T7192] RBP: 00007f76bd436b20 R08: 0000000000000000 R09: 0000000000000000 [ 159.333211][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.341188][ T7192] R13: 00007f76bd626038 R14: 00007f76bd625fa0 R15: 00007ffda1e69168 [ 159.349165][ T7192] [ 159.352169][ T7192] Modules linked in: [ 159.357536][ T7192] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.364114][ T5635] usb 3-1: selecting invalid altsetting 1 [ 159.364126][ T5635] set interface failed [ 159.427436][ T5733] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 159.559133][ T7192] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 159.559162][ T7192] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b be d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 12 36 26 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 159.559171][ T7192] RSP: 0018:ffffc90003c1f460 EFLAGS: 00010206 [ 159.559181][ T7192] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 159.559189][ T7192] RDX: 0000000000000000 RSI: ffffffff8ea7a0b0 RDI: 00000000000000c0 [ 159.559195][ T7192] RBP: ffffc90003c1f5f8 R08: ffffc90003c1f567 R09: 0000000000000000 [ 159.559202][ T7192] R10: ffffc90003c1f540 R11: fffff52000783ead R12: 0000000000000068 [ 159.559208][ T7192] R13: 0000000000000000 R14: 1ffff92000783ea0 R15: 0000000000000000 [ 159.559214][ T7192] FS: 00007f76be1bb6c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 159.559223][ T7192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.559229][ T7192] CR2: 000055617a931ee8 CR3: 000000005bd1c000 CR4: 00000000003526f0 [ 159.559241][ T7192] Kernel panic - not syncing: Fatal exception [ 159.659465][ T7192] Kernel Offset: disabled [ 159.663783][ T7192] Rebooting in 86400 seconds..