last executing test programs: 19.549580114s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6000000002060500000000000000000a000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) 19.44925362s ago: executing program 0 (id=465): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="ac", 0x1}], 0x1, 0x0, 0x0, 0x8000000}}], 0x1, 0xc004444) 19.420247831s ago: executing program 0 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x40000000, 0x6, 0x2, 0x0, 0xdb}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810100020000000904010000020d00000904010102020d000009058202000200643809050396931ad3"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x9]}, 0x8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 16.250329198s ago: executing program 0 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002840)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff8, {0x2}, [@nested={0x8, 0x59, 0x0, 0x1, [@nested={0x4, 0x14c}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 15.991175351s ago: executing program 0 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/100, 0x64) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r2, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x6022}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x3}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x26c9604f}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000160001000000000000000000"], 0x14}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r6, &(0x7f0000001e80)='b', 0x1) (async) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001a00)=ANY=[@ANYBLOB="120150020000001044060f80400001020301090269000301032004080b000001052009d54e0000000101200009240101040c0900090904010000010220000904010101010220000905010940000ce00408250100000af9ff090402000001020600090402010101022000090582090800f2090108250182309f0002"], &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a010300000000000000000100fffd090001"], 0xcc}}, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0x18, r1, 0xc, &(0x7f0000000000)) 15.27110769s ago: executing program 0 (id=495): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_usb_connect(0x5, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002db46c510c8042007064c0102030109024d0002030090020904690200fb65bc080904a4e8000e0100030a2401"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 7.880021468s ago: executing program 1 (id=536): r0 = syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200228"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.275860187s ago: executing program 1 (id=549): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x60}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.194322079s ago: executing program 1 (id=550): r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x1) ioctl$RTC_WIE_OFF(r0, 0x7010) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0x0, 0x0, &(0x7f0000000380)) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.92135911s ago: executing program 1 (id=551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe8000d2001100000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4.806352096s ago: executing program 1 (id=552): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000000000000840000000200000004084900c004000002000000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001"], 0x50, 0x40001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 2.791029827s ago: executing program 2 (id=555): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x152}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x28, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe580, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x80, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 2.22297945s ago: executing program 2 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x7fff, 0x5, 0x5, 0x0, 0xa56, 0x10000, 0x646, 0x6, 0x3, 0x0, 0x3ff, 0x3, 0xffff, 0x1e2], 0xa000, 0x34080}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r2, 0xf5f) accept(r2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x2f, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "592c4c7b88546867", "b42d2c5ae4017173a023eb028d4decf8", "eb4d33fb", "0f61000000000008"}, 0x28) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4, 0x3, 0xcc}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x14}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x3, 0x0, 0x0, 0x7fffffff}]}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000140)={r4, &(0x7f0000000300)='\x006\xb1\x8d\xe4\x1a\'\x01X\xe6\x92\xdc\x00;{\xe6\xf6\xdfg\x1f=GD\xa9\\\xff\xe6\xbbP\xcf6\x84s\xcc\x9fw\xdd\xa2Q\x7f\xc9\xd0\xe0Z\xa0A\'EI\xea\xbf:n\x14-\xec\xd1?v\t', 0x8002, &(0x7f00000001c0)={@_ha_fsid={[0x6, 0x20003]}, {0x40, 0x8, 0x203, 0x3}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x9}) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x8000) 1.640604252s ago: executing program 1 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x40000000, 0x6, 0x2, 0x0, 0xdb}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810100020000000904010000020d00000904010102020d000009058202000200643809050396931ad3"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x9]}, 0x8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.460357162s ago: executing program 3 (id=562): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060224a1ff000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.215084194s ago: executing program 3 (id=563): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800ff0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f9400715fa007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {&(0x7f00000001c0)="6144c338abfb60e94f608498bd0e32960c945aed3bc143d3f34fdbc3a3105cce44aa66696ef36edf4b8c8f8435f02416a0e3c96f25d7b3d026744b475b8bdd6abc194e74e30f789f6aa9fb3f91c2834187309b03813bd071b84dc58d6fb09360a845326960d8415c09d1d96109006569d7f5a557e906c41bb3", 0x79}], 0x2, 0x0, 0x0, 0x2663}, 0x50000) 1.214769567s ago: executing program 2 (id=564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='123', 0x3, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.038908235s ago: executing program 3 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x8040, 0x0, 0xc2, 0x0, &(0x7f0000000280)=0x4}, {[0x77, 0x1ff, 0xffff, 0x4]}, 0xf424, 0x7d, &(0x7f00000002c0)=""/125}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000200)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f646d00"/312) (async) ioctl(r4, 0xc138fd09, &(0x7f0000000200)="040000003200000000000000680100003801000001000000000000000000000000000000000000000000000000000000746573745f646d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000300000007a65726f00"/360) ioctl(r4, 0xc138fd06, &(0x7f0000000200)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f646d00"/312) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000480)={0xed, 0x0, 0xfeb}) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) write(r4, &(0x7f0000000380)="c37f2cb0e340c0573903dcde380719029409def83baff949b2b640b70a7278ff6114745b83b876be944631fa723e595da29afebd5ee1be8bd5f8cc26404b1681c68b8b2b3a680efe03f3a6ad0ad9154822b0108d12b3755434a1dfee0cb4906139a7ef655d1b5d4e075c9714bae69c2285149711f659e65b7f15c2ee72ea80bcbf2699107e4a483cc5602f3e0cbc749051ec0ee34bff0d7439bc6d1c8c11a91804513072afdd3586ca30e4121945f30f485f398034568ccbba6385f1f888b33b0478c1d045c08a64400872209cfc2c6f93de", 0xd2) 1.038747228s ago: executing program 2 (id=566): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x68000, 0x0) 742.032448ms ago: executing program 2 (id=567): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}], 0x40000cf, 0x0) 523.713671ms ago: executing program 3 (id=568): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000100)={0x2, 0x10, 0x80, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x40500) 410.047776ms ago: executing program 3 (id=569): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ffff", 0x14}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 212.234216ms ago: executing program 32 (id=495): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_usb_connect(0x5, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002db46c510c8042007064c0102030109024d0002030090020904690200fb65bc080904a4e8000e0100030a2401"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 203.016195ms ago: executing program 3 (id=571): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) syz_emit_vhci(0x0, 0x0) r2 = accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x4004084, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) close(r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) dup(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=572): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x8000, 0x401, 0x2, r2}, &(0x7f0000000180)=0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) (async) landlock_create_ruleset(&(0x7f0000000000)={0x4000, 0x0, 0x0, 0x0, 0x6}, 0x30, 0x0) (async) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, 0x0, 0x0, 0x0) (async) userfaultfd(0x801) (async) r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)="b1", 0x1) ioctl$TIOCSBRK(r4, 0x5427) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000400)={r2, 0x73, "f0eb4fe6d1e4d9eb22d9cb6303b831136b3be1b0533f32ffed5dc3d637feb46173e402c10429dbb1dbd5f2bb610f8021336133d963e6a8f721d929ae04cab9ac49761bdfada2a0444d2147c8d59d31f412499536655c188ed671fc6d801f4708ad9f8d1a88276b7d6293c52ed86e180028b3e6"}, &(0x7f0000000480)=0x7b) r5 = syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, 0x0) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) setregid(0x0, 0xffffffffffffffff) (async) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.048478][ T863] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 142.051706][ T863] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.052126][ T863] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 142.052170][ T863] usb 3-1: media controller created [ 142.061398][ T5712] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 142.067486][ T863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.163727][ T5705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.164815][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.164839][ T5705] usb 2-1: config 1 has no interface number 0 [ 142.164881][ T5705] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.164936][ T5705] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 142.164969][ T5705] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 142.164995][ T5705] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 142.167354][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.167377][ T5705] usb 2-1: Product: syz [ 142.167392][ T5705] usb 2-1: Manufacturer: syz [ 142.167434][ T5705] usb 2-1: SerialNumber: syz [ 142.252595][ T863] zl10353_read_register: readreg error (reg=127, ret==-32) [ 142.252714][ T5712] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.256916][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.256945][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.257005][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.257025][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.257064][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.266510][ T5712] usb 4-1: config 0 descriptor?? [ 142.307469][ T942] gspca_ov534_9: sccb_write failed [ 142.395073][ T6391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 142.462192][ T863] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 142.472846][ T863] usb 3-1: USB disconnect, device number 24 [ 142.512214][ T942] gspca_ov534_9: reg_w failed -71 [ 142.722422][ T5712] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.751468][ T942] gspca_ov534_9: Unknown sensor 0000 [ 142.751601][ T942] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 142.757764][ T942] usb 1-1: USB disconnect, device number 21 [ 142.999462][ T6391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.012134][ T5705] cdc_ncm 2-1:1.1: bind() failure [ 143.202083][ T6391] netlink: 'syz.1.239': attribute type 2 has an invalid length. [ 143.321441][ T942] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 143.473632][ T942] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 143.474730][ T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.474758][ T942] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 143.474795][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.493267][ T942] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 143.504626][ T942] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 143.551867][ T942] usb 4-1: USB disconnect, device number 21 [ 143.818406][ T6407] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294901764.34303.0), cmd(9) [ 143.851688][ T6398] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 143.852042][ T6398] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 143.852342][ T6398] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 144.112305][ T6397] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 144.113883][ T863] usb 3-1: USB disconnect, device number 25 [ 144.134225][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 144.157823][ T863] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 144.159029][ T863] spcp8x5 3-1:1.0: device disconnected [ 144.292265][ T9] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 144.293254][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.293273][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.293298][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.295463][ T9] usb 1-1: config 0 descriptor?? [ 144.451464][ T5705] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.603069][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 144.604234][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.604251][ T5705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.604275][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.611188][ T5705] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 144.617985][ T5705] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 144.711648][ T9] belkin 0003:1020:0006.000B: global environment stack underflow [ 144.711676][ T9] belkin 0003:1020:0006.000B: item 0 0 1 11 parsing failed [ 144.712476][ T9] belkin 0003:1020:0006.000B: parse failed [ 144.712551][ T9] belkin 0003:1020:0006.000B: probe with driver belkin failed with error -22 [ 144.794323][ T942] usb 2-1: USB disconnect, device number 18 [ 144.982631][ T6416] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 144.982987][ T6416] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 144.983240][ T6416] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 145.023163][ T6423] syz.0.245: vmalloc error: size 68719476738, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.023253][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 145.023268][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.023275][ T6423] Call Trace: [ 145.023284][ T6423] [ 145.023290][ T6423] dump_stack_lvl+0xe8/0x150 [ 145.023311][ T6423] warn_alloc+0x24d/0x270 [ 145.023334][ T6423] ? __pfx_warn_alloc+0x10/0x10 [ 145.023381][ T6423] __vmalloc_node_range_noprof+0x12c/0x1690 [ 145.023408][ T6423] ? __pfx___mutex_trylock_common+0x10/0x10 [ 145.023425][ T6423] ? rcu_is_watching+0x16/0xb0 [ 145.023438][ T6423] ? trace_contention_end+0x3d/0x140 [ 145.023452][ T6423] ? __mutex_lock+0x305/0x15a0 [ 145.023468][ T6423] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.023483][ T6423] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.023494][ T6423] ? dvb_dvr_do_ioctl+0x76/0x220 [ 145.023514][ T6423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.023535][ T6423] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 145.023560][ T6423] vmalloc_noprof+0xb2/0xe0 [ 145.023576][ T6423] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 145.023593][ T6423] dvb_dvr_do_ioctl+0x12b/0x220 [ 145.023612][ T6423] dvb_usercopy+0x199/0x2e0 [ 145.023627][ T6423] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 145.023643][ T6423] ? __pfx_dvb_usercopy+0x10/0x10 [ 145.023664][ T6423] ? __fget_files+0x3a2/0x420 [ 145.023679][ T6423] ? __fget_files+0x2a/0x420 [ 145.023696][ T6423] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 145.023712][ T6423] dvb_dvr_ioctl+0x29/0x40 [ 145.023728][ T6423] __se_sys_ioctl+0xfc/0x170 [ 145.023749][ T6423] do_syscall_64+0x166/0x520 [ 145.023760][ T6423] ? trace_irq_disable+0x3b/0x140 [ 145.023777][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.023790][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 145.023805][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.023817][ T6423] RIP: 0033:0x7f590219e159 [ 145.023830][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.023841][ T6423] RSP: 002b:00007f5903108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.023855][ T6423] RAX: ffffffffffffffda RBX: 00007f5902426180 RCX: 00007f590219e159 [ 145.023865][ T6423] RDX: 0000001000000002 RSI: 0000000000006f2d RDI: 0000000000000009 [ 145.023873][ T6423] RBP: 00007f590223506b R08: 0000000000000000 R09: 0000000000000000 [ 145.023881][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.023889][ T6423] R13: 00007f5902426218 R14: 00007f5902426180 R15: 00007ffd66bb3ec8 [ 145.023908][ T6423] [ 145.023934][ T6423] Mem-Info: [ 145.023941][ T6423] active_anon:5560 inactive_anon:0 isolated_anon:0 [ 145.023941][ T6423] active_file:0 inactive_file:51088 isolated_file:0 [ 145.023941][ T6423] unevictable:0 dirty:88 writeback:0 [ 145.023941][ T6423] slab_reclaimable:10175 slab_unreclaimable:90396 [ 145.023941][ T6423] mapped:24821 shmem:522 pagetables:1095 [ 145.023941][ T6423] sec_pagetables:0 bounce:0 [ 145.023941][ T6423] kernel_misc_reclaimable:0 [ 145.023941][ T6423] free:1339494 free_pcp:10166 free_cma:0 [ 145.023972][ T6423] Node 0 active_anon:22240kB inactive_anon:0kB active_file:0kB inactive_file:204148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99284kB dirty:352kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11652kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 145.024008][ T6423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 145.024039][ T6423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.024094][ T6423] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 145.024120][ T6423] Node 0 DMA32 free:1409876kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22240kB inactive_anon:0kB active_file:0kB inactive_file:204148kB unevictable:0kB writepending:352kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:40636kB local_pcp:20544kB free_cma:0kB [ 145.024157][ T6423] lowmem_reserve[]: 0 0 1 1 1 [ 145.024180][ T6423] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 145.024233][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 145.024257][ T6423] Node 1 Normal free:3932740kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.024292][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 145.024315][ T6423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.024418][ T6423] Node 0 DMA32: 1386*4kB (UM) 584*8kB (UM) 232*16kB (UME) 54*32kB (UME) 90*64kB (UME) 69*128kB (UM) 63*256kB (UM) 9*512kB (UM) 7*1024kB (UME) 6*2048kB (UME) 327*4096kB (UM) = 1409832kB [ 145.024553][ T6423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 145.025522][ T6423] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 3*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932740kB [ 145.025653][ T6423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.025663][ T6423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.025673][ T6423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.025683][ T6423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.025693][ T6423] 51606 total pagecache pages [ 145.025698][ T6423] 0 pages in swap cache [ 145.025703][ T6423] Free swap = 124996kB [ 145.025708][ T6423] Total swap = 124996kB [ 145.025713][ T6423] 2097051 pages RAM [ 145.025718][ T6423] 0 pages HighMem/MovableOnly [ 145.025723][ T6423] 429554 pages reserved [ 145.025727][ T6423] 0 pages cma reserved [ 145.030473][ T6423] program syz.0.245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.141827][ T942] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 145.212231][ T5705] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 145.294635][ T942] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 145.295999][ T942] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 145.296038][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 145.296088][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 145.296128][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.300001][ T942] usb 2-1: config 0 descriptor?? [ 145.304686][ T6420] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 145.309258][ T6415] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 145.324226][ T5350] usb 4-1: USB disconnect, device number 22 [ 145.353995][ T5350] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 145.358060][ T5350] spcp8x5 4-1:1.0: device disconnected [ 145.362699][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 145.365612][ T5705] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 145.377664][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.377688][ T5705] usb 3-1: Product: syz [ 145.377701][ T5705] usb 3-1: Manufacturer: syz [ 145.377740][ T5705] usb 3-1: SerialNumber: syz [ 145.396154][ T5705] usb 3-1: config 0 descriptor?? [ 145.614205][ T5705] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.722766][ T942] hid_parser_main: 70 callbacks suppressed [ 145.722814][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722842][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722865][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722888][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722912][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722959][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.722982][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.723005][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.723028][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.723051][ T942] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 145.734061][ T942] corsair 0003:1B1C:1B3E.000C: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 146.046290][ T5705] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 146.051475][ T5705] usb 3-1: USB disconnect, device number 26 [ 146.211437][ T863] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 146.361401][ T863] usb 4-1: Using ep0 maxpacket: 32 [ 146.361998][ T863] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 146.365294][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.365321][ T863] usb 4-1: Product: syz [ 146.365336][ T863] usb 4-1: Manufacturer: syz [ 146.365350][ T863] usb 4-1: SerialNumber: syz [ 146.367743][ T863] usb 4-1: config 0 descriptor?? [ 146.414229][ T863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 146.624880][ T5627] Bluetooth: Unknown LE signaling command 0xf6 [ 146.624903][ T5627] Bluetooth: Wrong link type (-22) [ 146.824383][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.998102][ T5629] usb 1-1: USB disconnect, device number 22 [ 147.255274][ T6438] FAULT_INJECTION: forcing a failure. [ 147.255274][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 147.255299][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT(full) [ 147.255314][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.255322][ T6438] Call Trace: [ 147.255327][ T6438] [ 147.255333][ T6438] dump_stack_lvl+0xe8/0x150 [ 147.255355][ T6438] should_fail_ex+0x3eb/0x540 [ 147.255372][ T6438] should_failslab+0xa8/0x100 [ 147.255391][ T6438] __kmalloc_noprof+0xf9/0x710 [ 147.255413][ T6438] ? ___neigh_create+0x6d2/0x22b0 [ 147.255430][ T6438] ? ___neigh_create+0x6d2/0x22b0 [ 147.255452][ T6438] ___neigh_create+0x6d2/0x22b0 [ 147.255483][ T6438] ip_neigh_gw4+0x27e/0x3a0 [ 147.255502][ T6438] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 147.255526][ T6438] ip_finish_output2+0xe21/0x10b0 [ 147.255543][ T6438] ? ip_skb_dst_mtu+0x811/0xa50 [ 147.255558][ T6438] ? ip_finish_output2+0x3de/0x10b0 [ 147.255576][ T6438] ? ip_finish_output+0x40b/0x530 [ 147.255592][ T6438] ? __pfx_ip_mc_output+0x10/0x10 [ 147.255608][ T6438] NF_HOOK+0x205/0x4f0 [ 147.255626][ T6438] ? __pfx_NF_HOOK+0x10/0x10 [ 147.255643][ T6438] ? __pfx_dst_output+0x10/0x10 [ 147.255661][ T6438] ? ip_fast_csum+0x1ee/0x2b0 [ 147.255681][ T6438] raw_send_hdrinc+0xbcb/0x1420 [ 147.255705][ T6438] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 147.255727][ T6438] raw_sendmsg+0x136c/0x1a20 [ 147.255752][ T6438] ? __pfx_raw_sendmsg+0x10/0x10 [ 147.255766][ T6438] ? __lock_acquire+0x747/0x2de0 [ 147.255804][ T6438] ? aa_sock_msg_perm+0xfc/0x210 [ 147.255818][ T6438] ? sock_rps_record_flow+0x19/0x350 [ 147.255836][ T6438] ? inet_sendmsg+0x298/0x320 [ 147.255851][ T6438] ? apparmor_socket_sendmsg+0x98/0x360 [ 147.255865][ T6438] ? __pfx_inet_sendmsg+0x10/0x10 [ 147.255880][ T6438] sock_sendmsg_nosec+0x10e/0x180 [ 147.255906][ T6438] ____sys_sendmsg+0x54e/0x850 [ 147.255924][ T6438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.255944][ T6438] ? import_iovec+0x73/0xa0 [ 147.255962][ T6438] ___sys_sendmsg+0x2a5/0x360 [ 147.255975][ T6438] ? __lock_acquire+0x747/0x2de0 [ 147.255995][ T6438] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.256030][ T6438] ? __fget_files+0x2a/0x420 [ 147.256045][ T6438] ? __fget_files+0x3a2/0x420 [ 147.256066][ T6438] __x64_sys_sendmsg+0x1b1/0x290 [ 147.256087][ T6438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.256132][ T6438] do_syscall_64+0x166/0x520 [ 147.256152][ T6438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.256171][ T6438] ? clear_bhb_loop+0x70/0xc0 [ 147.256196][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.256215][ T6438] RIP: 0033:0x7f590219e159 [ 147.256235][ T6438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.256252][ T6438] RSP: 002b:00007f590314a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.256270][ T6438] RAX: ffffffffffffffda RBX: 00007f5902425fa0 RCX: 00007f590219e159 [ 147.256280][ T6438] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003 [ 147.256288][ T6438] RBP: 00007f590314a090 R08: 0000000000000000 R09: 0000000000000000 [ 147.256297][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.256305][ T6438] R13: 00007f5902426038 R14: 00007f5902425fa0 R15: 00007ffd66bb3ec8 [ 147.256324][ T6438] [ 147.443614][ T6442] jffs2: notice: (6442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.631698][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 147.725817][ T10] usb 2-1: USB disconnect, device number 19 [ 147.790440][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 147.792276][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.792305][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 147.792345][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.839431][ T9] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 147.853098][ T9] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 147.901442][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 148.011455][ T5705] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 148.052156][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.053210][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.053233][ T10] usb 2-1: config 1 has no interface number 0 [ 148.053257][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.053300][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 148.053320][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 148.053336][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 148.055423][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.055460][ T10] usb 2-1: Product: syz [ 148.055469][ T10] usb 2-1: Manufacturer: syz [ 148.055479][ T10] usb 2-1: SerialNumber: syz [ 148.183356][ T5705] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 148.184459][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.184487][ T5705] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 148.184536][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.211541][ T6440] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 148.211928][ T6440] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 148.212633][ T6440] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 148.222189][ T5705] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 148.225356][ T5705] usb 3-1: SPCP8x5 converter now attached to ttyUSB1 [ 148.268400][ T6442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 148.461750][ T6439] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 148.463120][ T5705] usb 1-1: USB disconnect, device number 23 [ 148.488652][ T5705] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 148.489535][ T5705] spcp8x5 1-1:1.0: device disconnected [ 148.632567][ T863] gspca_ov534_9: sccb_write failed [ 148.833783][ T863] gspca_ov534_9: reg_w failed -71 [ 148.873906][ T6442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 148.876325][ T10] cdc_ncm 2-1:1.1: bind() failure [ 149.020593][ T6449] netlink: 'syz.0.260': attribute type 21 has an invalid length. [ 149.020638][ T6449] netlink: 156 bytes leftover after parsing attributes in process `syz.0.260'. [ 149.080958][ T6442] netlink: 'syz.1.258': attribute type 2 has an invalid length. [ 149.091397][ T863] gspca_ov534_9: Unknown sensor 0000 [ 149.091578][ T863] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 149.094526][ T863] usb 4-1: USB disconnect, device number 23 [ 149.096840][ T6451] 9p: Bad value for 'rfdno' [ 149.128384][ T6452] 9p: Bad value for 'rfdno' [ 149.463980][ T6466] netlink: 'syz.3.265': attribute type 4 has an invalid length. [ 149.464008][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 150.081487][ T5350] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 150.234846][ T5350] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 150.236072][ T5350] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.236100][ T5350] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 150.236140][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.249992][ T5350] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 150.261241][ T5350] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 150.508291][ T5350] usb 2-1: USB disconnect, device number 20 [ 150.612983][ T6472] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 150.613445][ T6472] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 150.613747][ T6472] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 150.731443][ T863] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 150.836238][ T5350] usb 3-1: USB disconnect, device number 27 [ 150.850721][ T5350] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 150.851766][ T5350] spcp8x5 3-1:1.0: device disconnected [ 150.865806][ T6471] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 150.867357][ T10] usb 1-1: USB disconnect, device number 24 [ 150.897717][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 150.900046][ T10] spcp8x5 1-1:1.0: device disconnected [ 150.915466][ T863] usb 4-1: Using ep0 maxpacket: 32 [ 150.916525][ T863] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 150.939449][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.939480][ T863] usb 4-1: Product: syz [ 150.939504][ T863] usb 4-1: Manufacturer: syz [ 150.939520][ T863] usb 4-1: SerialNumber: syz [ 150.970485][ T863] usb 4-1: config 0 descriptor?? [ 150.984551][ T863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 151.549136][ T6505] jffs2: notice: (6505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.791782][ T942] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 151.953201][ T942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.954771][ T942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.954794][ T942] usb 3-1: config 1 has no interface number 0 [ 151.954837][ T942] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.954864][ T942] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 151.954894][ T942] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 151.954910][ T942] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 151.956776][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.956799][ T942] usb 3-1: Product: syz [ 151.956813][ T942] usb 3-1: Manufacturer: syz [ 151.956825][ T942] usb 3-1: SerialNumber: syz [ 152.081483][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 152.164230][ T6505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.232196][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 152.233339][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.233366][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 152.233433][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.273197][ T9] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 152.292317][ T9] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 152.611677][ T6512] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 152.612029][ T6512] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 152.612308][ T6512] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 152.767211][ T6505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.771127][ T942] cdc_ncm 3-1:1.1: bind() failure [ 152.823320][ T6517] device-mapper: ioctl: Target spec extends beyond end of parameters [ 152.823339][ T6517] device-mapper: ioctl: unable to find target [ 152.863562][ T6511] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 152.866721][ T9] usb 1-1: USB disconnect, device number 25 [ 152.891212][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 152.905179][ T9] spcp8x5 1-1:1.0: device disconnected [ 152.974592][ T6505] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 153.209524][ T863] gspca_ov534_9: sccb_write failed [ 153.231471][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 153.382082][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 153.383087][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.383112][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.383161][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.392843][ T10] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 153.404296][ T10] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 153.418405][ T863] gspca_ov534_9: reg_w failed -71 [ 153.661788][ T863] gspca_ov534_9: Unknown sensor 0000 [ 153.661919][ T863] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 153.664670][ T863] usb 4-1: USB disconnect, device number 24 [ 153.741601][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 153.754058][ T6522] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 153.754472][ T6522] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 153.754748][ T6522] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 153.892081][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.892956][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.892980][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.893006][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.895516][ T9] usb 1-1: config 0 descriptor?? [ 153.903117][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 154.061652][ T6521] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 154.067242][ T9] usb 2-1: USB disconnect, device number 21 [ 154.080541][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 154.085127][ T9] spcp8x5 2-1:1.0: device disconnected [ 154.481442][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 154.551678][ T5705] usb 3-1: USB disconnect, device number 28 [ 154.616407][ T6538] FAULT_INJECTION: forcing a failure. [ 154.616407][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 154.616440][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT(full) [ 154.616465][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.616478][ T6538] Call Trace: [ 154.616486][ T6538] [ 154.616495][ T6538] dump_stack_lvl+0xe8/0x150 [ 154.616528][ T6538] should_fail_ex+0x3eb/0x540 [ 154.616557][ T6538] should_failslab+0xa8/0x100 [ 154.616584][ T6538] __kmalloc_noprof+0xf9/0x710 [ 154.616615][ T6538] ? tomoyo_encode+0x2ad/0x570 [ 154.616639][ T6538] ? tomoyo_encode+0x2ad/0x570 [ 154.616671][ T6538] tomoyo_encode+0x2ad/0x570 [ 154.616704][ T6538] tomoyo_realpath_from_path+0x5fa/0x640 [ 154.616741][ T6538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 154.616764][ T6538] tomoyo_path_number_perm+0x246/0x5f0 [ 154.616790][ T6538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.616811][ T6538] ? __lock_acquire+0x747/0x2de0 [ 154.616858][ T6538] ? hook_file_ioctl+0x1f2/0x600 [ 154.616903][ T6538] ? __fget_files+0x2a/0x420 [ 154.616933][ T6538] ? __fget_files+0x2a/0x420 [ 154.616957][ T6538] ? __fget_files+0x3a2/0x420 [ 154.616982][ T6538] ? __fget_files+0x2a/0x420 [ 154.617022][ T6538] security_file_ioctl+0xc3/0x2a0 [ 154.617056][ T6538] __se_sys_ioctl+0x47/0x170 [ 154.617091][ T6538] do_syscall_64+0x166/0x520 [ 154.617111][ T6538] ? trace_irq_disable+0x3b/0x140 [ 154.617139][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.617162][ T6538] ? clear_bhb_loop+0x70/0xc0 [ 154.617188][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.617210][ T6538] RIP: 0033:0x7efc6c39e159 [ 154.617230][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.617247][ T6538] RSP: 002b:00007efc6d1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.617272][ T6538] RAX: ffffffffffffffda RBX: 00007efc6c625fa0 RCX: 00007efc6c39e159 [ 154.617288][ T6538] RDX: 00002000000000c0 RSI: 00000000c050561a RDI: 0000000000000003 [ 154.617302][ T6538] RBP: 00007efc6d1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.617316][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.617334][ T6538] R13: 00007efc6c626038 R14: 00007efc6c625fa0 R15: 00007ffc55f13c48 [ 154.617369][ T6538] [ 154.617420][ T6538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.635195][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 154.655569][ T10] usb 4-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 154.736066][ T10] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 154.736116][ T10] usb 4-1: can't read configurations, error -22 [ 154.941534][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 155.091492][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 155.092275][ T10] usb 4-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 155.112290][ T10] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 155.112333][ T10] usb 4-1: can't read configurations, error -22 [ 155.112705][ T10] usb usb4-port1: attempt power cycle [ 155.128880][ T6546] FAULT_INJECTION: forcing a failure. [ 155.128880][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.128908][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(full) [ 155.128930][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.128942][ T6546] Call Trace: [ 155.128949][ T6546] [ 155.128957][ T6546] dump_stack_lvl+0xe8/0x150 [ 155.128987][ T6546] should_fail_ex+0x3eb/0x540 [ 155.129013][ T6546] _copy_from_user+0x2d/0xb0 [ 155.129039][ T6546] ___sys_sendmsg+0x1c6/0x360 [ 155.129060][ T6546] ? __lock_acquire+0x747/0x2de0 [ 155.129090][ T6546] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.129116][ T6546] ? kstrtouint+0x6e/0xe0 [ 155.129163][ T6546] ? __fget_files+0x2a/0x420 [ 155.129187][ T6546] ? __fget_files+0x3a2/0x420 [ 155.129219][ T6546] __sys_sendmmsg+0x273/0x4d0 [ 155.129246][ T6546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.129276][ T6546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.129309][ T6546] ? ksys_write+0x242/0x270 [ 155.129337][ T6546] ? __pfx_ksys_write+0x10/0x10 [ 155.129369][ T6546] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.129392][ T6546] do_syscall_64+0x166/0x520 [ 155.129409][ T6546] ? trace_irq_disable+0x3b/0x140 [ 155.129435][ T6546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.129454][ T6546] ? clear_bhb_loop+0x70/0xc0 [ 155.129478][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.129497][ T6546] RIP: 0033:0x7efc6c39e159 [ 155.129515][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.129532][ T6546] RSP: 002b:00007efc6d1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.129553][ T6546] RAX: ffffffffffffffda RBX: 00007efc6c625fa0 RCX: 00007efc6c39e159 [ 155.129567][ T6546] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 155.129579][ T6546] RBP: 00007efc6d1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 155.129591][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.129610][ T6546] R13: 00007efc6c626038 R14: 00007efc6c625fa0 R15: 00007ffc55f13c48 [ 155.129640][ T6546] [ 155.451859][ T5705] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 155.511883][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 155.542720][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 155.544494][ T10] usb 4-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 155.546447][ T10] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 155.546485][ T10] usb 4-1: can't read configurations, error -22 [ 155.602136][ T5705] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 155.603196][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.603223][ T5705] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 155.603263][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.610089][ T5705] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 155.615156][ T5705] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 155.649777][ T863] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 155.701469][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 155.722104][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 155.722693][ T10] usb 4-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 155.724131][ T10] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 155.724167][ T10] usb 4-1: can't read configurations, error -22 [ 155.725673][ T10] usb usb4-port1: unable to enumerate USB device [ 155.841383][ T863] usb 2-1: Using ep0 maxpacket: 32 [ 155.847309][ T863] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.850617][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.850643][ T863] usb 2-1: Product: syz [ 155.850657][ T863] usb 2-1: Manufacturer: syz [ 155.850672][ T863] usb 2-1: SerialNumber: syz [ 155.884744][ T863] usb 2-1: config 0 descriptor?? [ 155.889671][ T863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 155.971579][ T6549] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 155.971912][ T6549] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 155.972217][ T6549] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 156.251966][ T6548] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 156.253353][ T5705] usb 3-1: USB disconnect, device number 29 [ 156.265847][ T5705] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 156.266512][ T5705] spcp8x5 3-1:1.0: device disconnected [ 156.525619][ T10] usb 1-1: USB disconnect, device number 26 [ 156.777541][ T6559] jffs2: notice: (6559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.021455][ T5705] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 157.082552][ T5629] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 157.172209][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.173346][ T5705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.173363][ T5705] usb 1-1: config 1 has no interface number 0 [ 157.173396][ T5705] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.173434][ T5705] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 157.173467][ T5705] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 157.173491][ T5705] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 157.175870][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.175886][ T5705] usb 1-1: Product: syz [ 157.175897][ T5705] usb 1-1: Manufacturer: syz [ 157.175912][ T5705] usb 1-1: SerialNumber: syz [ 157.238711][ T5629] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 157.241801][ T5629] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.241828][ T5629] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 157.241890][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.255809][ T5629] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 157.266258][ T5629] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 157.395709][ T6559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.622208][ T6562] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 157.622601][ T6562] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 157.622942][ T6562] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 157.911687][ T6561] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 157.913187][ T5727] usb 3-1: USB disconnect, device number 30 [ 157.937039][ T5727] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 157.937773][ T5727] spcp8x5 3-1:1.0: device disconnected [ 157.999866][ T6559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.004567][ T5705] cdc_ncm 1-1:1.1: bind() failure [ 158.131688][ T863] gspca_ov534_9: sccb_write failed [ 158.204537][ T6559] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 158.332367][ T863] gspca_ov534_9: reg_w failed -71 [ 158.475061][ T6579] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 158.581628][ T863] gspca_ov534_9: Unknown sensor 0000 [ 158.581692][ T863] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 158.584216][ T863] usb 2-1: USB disconnect, device number 22 [ 158.784205][ T5350] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 158.932214][ T5350] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.933264][ T5350] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.933283][ T5350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.933309][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.935194][ T5350] usb 3-1: config 0 descriptor?? [ 158.939596][ T5350] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 159.051408][ T5705] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 159.102763][ T863] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 159.202188][ T5705] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 159.203372][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.203404][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.206459][ T5705] usb 4-1: config 0 descriptor?? [ 159.251737][ T863] usb 2-1: Using ep0 maxpacket: 16 [ 159.252523][ T863] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 159.255609][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.255665][ T863] usb 2-1: Product: syz [ 159.255680][ T863] usb 2-1: Manufacturer: syz [ 159.255695][ T863] usb 2-1: SerialNumber: syz [ 159.467628][ T863] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 159.471141][ T863] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.472300][ T863] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 159.472363][ T863] usb 2-1: media controller created [ 159.488574][ T863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.664747][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.665490][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.668584][ T863] zl10353_read_register: readreg error (reg=127, ret==-32) [ 159.682219][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.682710][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.692091][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.697616][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.781980][ T10] usb 1-1: USB disconnect, device number 27 [ 159.869600][ T6599] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4286906372.65535.0), cmd(9) [ 159.886083][ T863] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 159.900202][ T863] usb 2-1: USB disconnect, device number 23 [ 160.232924][ T10] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 160.382143][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 160.383318][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 160.383365][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 160.383393][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 160.383436][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.386118][ T10] usb 1-1: config 0 descriptor?? [ 160.386924][ T6602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.600398][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 160.730798][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 160.730915][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 160.734582][ T5705] usb 4-1: USB disconnect, device number 29 [ 160.824920][ T10] hid_parser_main: 30 callbacks suppressed [ 160.824949][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.824979][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825005][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825030][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825056][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825081][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825106][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825131][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825155][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.825180][ T10] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 160.830401][ T10] corsair 0003:1B1C:1B3E.000D: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 161.511432][ T5705] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 161.549694][ T5629] usb 3-1: USB disconnect, device number 31 [ 161.666932][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 161.670451][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.670478][ T5705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 161.670505][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.680897][ T5705] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 161.688149][ T5705] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 161.716433][ T6622] jffs2: notice: (6622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.021409][ T5629] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 162.041691][ T6612] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 162.042043][ T6612] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 162.042347][ T6612] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 162.095005][ T6626] device-mapper: ioctl: Target spec extends beyond end of parameters [ 162.095020][ T6626] device-mapper: ioctl: unable to find target [ 162.173405][ T5629] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.175839][ T5629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.175869][ T5629] usb 3-1: config 1 has no interface number 0 [ 162.175946][ T5629] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.175981][ T5629] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 162.176016][ T5629] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 162.176068][ T5629] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 162.179972][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.179999][ T5629] usb 3-1: Product: syz [ 162.180044][ T5629] usb 3-1: Manufacturer: syz [ 162.180058][ T5629] usb 3-1: SerialNumber: syz [ 162.394700][ T6611] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 162.403819][ T5350] usb 4-1: USB disconnect, device number 30 [ 162.409711][ T6622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.450176][ T5350] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 162.457165][ T5350] spcp8x5 4-1:1.0: device disconnected [ 162.545754][ T6634] FAULT_INJECTION: forcing a failure. [ 162.545754][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 162.545788][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.0.324 Not tainted syzkaller #0 PREEMPT(full) [ 162.545818][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.545832][ T6634] Call Trace: [ 162.545841][ T6634] [ 162.545849][ T6634] dump_stack_lvl+0xe8/0x150 [ 162.545894][ T6634] should_fail_ex+0x3eb/0x540 [ 162.545924][ T6634] ? __alloc_skb+0x1db/0x7a0 [ 162.545945][ T6634] should_failslab+0xa8/0x100 [ 162.545973][ T6634] ? __alloc_skb+0x1db/0x7a0 [ 162.545991][ T6634] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 162.546022][ T6634] ? __alloc_skb+0x18d/0x7a0 [ 162.546044][ T6634] ? __alloc_skb+0x1db/0x7a0 [ 162.546072][ T6634] __alloc_skb+0x1db/0x7a0 [ 162.546099][ T6634] sock_wmalloc+0xb2/0x130 [ 162.546129][ T6634] l2tp_ip_sendmsg+0x1c3/0x1630 [ 162.546155][ T6634] ? sock_rps_record_flow+0x19/0x350 [ 162.546189][ T6634] ? inet_sendmsg+0x298/0x320 [ 162.546216][ T6634] ? apparmor_socket_sendmsg+0x98/0x360 [ 162.546244][ T6634] ? __pfx_inet_sendmsg+0x10/0x10 [ 162.546272][ T6634] sock_sendmsg_nosec+0x10e/0x180 [ 162.546306][ T6634] ____sys_sendmsg+0x54e/0x850 [ 162.546337][ T6634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.546372][ T6634] ? import_iovec+0x73/0xa0 [ 162.546405][ T6634] ___sys_sendmsg+0x2a5/0x360 [ 162.546428][ T6634] ? __lock_acquire+0x747/0x2de0 [ 162.546465][ T6634] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.546496][ T6634] ? kstrtouint+0x6e/0xe0 [ 162.546548][ T6634] ? __fget_files+0x2a/0x420 [ 162.546576][ T6634] ? __fget_files+0x3a2/0x420 [ 162.546614][ T6634] __sys_sendmmsg+0x273/0x4d0 [ 162.546647][ T6634] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.546682][ T6634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.546721][ T6634] ? ksys_write+0x242/0x270 [ 162.546755][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 162.546793][ T6634] __x64_sys_sendmmsg+0xa0/0xc0 [ 162.546822][ T6634] do_syscall_64+0x166/0x520 [ 162.546841][ T6634] ? trace_irq_disable+0x3b/0x140 [ 162.546882][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.546905][ T6634] ? clear_bhb_loop+0x70/0xc0 [ 162.546932][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.546956][ T6634] RIP: 0033:0x7f590219e159 [ 162.546976][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.546996][ T6634] RSP: 002b:00007f590314a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.547022][ T6634] RAX: ffffffffffffffda RBX: 00007f5902425fa0 RCX: 00007f590219e159 [ 162.547037][ T6634] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 162.547054][ T6634] RBP: 00007f590314a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.547067][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.547081][ T6634] R13: 00007f5902426038 R14: 00007f5902425fa0 R15: 00007ffd66bb3ec8 [ 162.547116][ T6634] [ 162.856917][ T5705] usb 1-1: USB disconnect, device number 28 [ 163.024825][ T6622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.036873][ T5629] cdc_ncm 3-1:1.1: bind() failure [ 163.201780][ T5705] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 163.224967][ T6644] netlink: 'syz.1.329': attribute type 89 has an invalid length. [ 163.260109][ T6622] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 163.314217][ T6648] veth1_macvtap: left promiscuous mode [ 163.327494][ T6648] veth1_macvtap: entered promiscuous mode [ 163.330288][ T6648] netlink: zone id is out of range [ 163.330301][ T6648] netlink: zone id is out of range [ 163.330309][ T6648] netlink: zone id is out of range [ 163.330317][ T6648] netlink: zone id is out of range [ 163.330398][ T6648] netlink: zone id is out of range [ 163.330407][ T6648] netlink: zone id is out of range [ 163.330415][ T6648] netlink: zone id is out of range [ 163.330423][ T6648] netlink: zone id is out of range [ 163.330431][ T6648] netlink: set zone limit has 4 unknown bytes [ 163.362985][ T5705] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 163.364007][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.367896][ T5705] usb 1-1: config 0 descriptor?? [ 163.374113][ T5705] pwc: Samsung MPC-C10 USB webcam detected. [ 163.571830][ T5705] pwc: send_video_command error -71 [ 163.571861][ T5705] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 163.571965][ T5705] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 163.579796][ T5705] usb 1-1: USB disconnect, device number 29 [ 163.849160][ T6658] overlay: Unknown parameter 'lo:erdir' [ 163.903844][ T6660] IPv6: Can't replace route, no match found [ 164.021542][ T5705] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 164.065788][ T6664] Invalid auth_tok structure returned from key query [ 164.065808][ T6664] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 164.065821][ T6664] One or more global auth toks could not properly register; rc = [-22] [ 164.065862][ T6664] Error validating options; rc = [-22] [ 164.172611][ T5705] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 164.175255][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.180648][ T5705] usb 1-1: config 0 descriptor?? [ 164.194155][ T5705] pwc: Samsung MPC-C10 USB webcam detected. [ 164.363704][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 164.681527][ T942] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 164.741074][ T10] usb 3-1: USB disconnect, device number 32 [ 164.844291][ T6678] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 164.848176][ T942] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 164.850615][ T942] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 164.850655][ T942] usb 2-1: can't read configurations, error -71 [ 165.459155][ T6696] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 165.589035][ T6702] jffs2: notice: (6702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.590490][ T6703] netlink: 'syz.2.351': attribute type 21 has an invalid length. [ 165.590582][ T6703] netlink: 156 bytes leftover after parsing attributes in process `syz.2.351'. [ 165.753122][ T6708] netlink: 56 bytes leftover after parsing attributes in process `syz.2.354'. [ 165.826788][ T6710] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.268435456.0), cmd(9) [ 165.842822][ T5712] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 165.871604][ T5705] pwc: recv_control_msg error -71 req 02 val 2b00 [ 165.875140][ T5705] pwc: recv_control_msg error -71 req 02 val 2700 [ 165.875614][ T5705] pwc: recv_control_msg error -71 req 04 val 1700 [ 165.876079][ T5705] pwc: recv_control_msg error -71 req 02 val 2c00 [ 165.877588][ T5705] pwc: recv_control_msg error -71 req 04 val 1000 [ 165.879478][ T5705] pwc: recv_control_msg error -71 req 04 val 1300 [ 165.895670][ T5705] pwc: recv_control_msg error -71 req 04 val 1400 [ 165.913204][ T5705] pwc: recv_control_msg error -71 req 02 val 2000 [ 165.927421][ T942] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 165.927626][ T5705] pwc: recv_control_msg error -71 req 02 val 2100 [ 165.928235][ T5705] pwc: recv_control_msg error -71 req 02 val 2200 [ 165.958223][ T5705] pwc: recv_control_msg error -71 req 06 val 0600 [ 165.972016][ T5705] pwc: recv_control_msg error -71 req 04 val 1500 [ 165.972519][ T5705] pwc: recv_control_msg error -71 req 02 val 2500 [ 165.972983][ T5705] pwc: recv_control_msg error -71 req 02 val 2400 [ 165.973431][ T5705] pwc: recv_control_msg error -71 req 02 val 2600 [ 165.973885][ T5705] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.974348][ T5705] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.975226][ T5705] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.975730][ T5705] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.980120][ T5705] pwc: Registered as video103. [ 166.041798][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 166.051052][ T5705] usb 1-1: USB disconnect, device number 30 [ 166.069834][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.082769][ T5712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.082800][ T5712] usb 4-1: config 1 has no interface number 0 [ 166.082843][ T5712] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.082870][ T5712] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 166.082904][ T5712] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 166.082930][ T5712] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 166.118921][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.118951][ T5712] usb 4-1: Product: syz [ 166.118966][ T5712] usb 4-1: Manufacturer: syz [ 166.118980][ T5712] usb 4-1: SerialNumber: syz [ 166.175720][ T942] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 166.177132][ T942] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.177167][ T942] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.177202][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.232147][ T942] usb 2-1: config 0 descriptor?? [ 166.402963][ T6702] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 166.560894][ T6726] loop0: detected capacity change from 0 to 2049 [ 166.614068][ T6726] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 166.614099][ T6726] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 166.614112][ T6726] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 166.614170][ T6726] loop0: [ 166.659491][ T942] hid_parser_main: 30 callbacks suppressed [ 166.659519][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.659549][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.659575][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.659601][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.659659][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.659685][ T942] ryos 0003:1E7D:3232.000E: unknown main item tag 0x0 [ 166.717118][ T942] ryos 0003:1E7D:3232.000E: hidraw0: USB HID v10.01 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 166.785150][ T6731] netlink: 'syz.2.363': attribute type 4 has an invalid length. [ 166.785176][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 166.855618][ T942] usb 2-1: USB disconnect, device number 25 [ 166.888758][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 167.008881][ T6702] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 167.022078][ T5712] cdc_ncm 4-1:1.1: bind() failure [ 167.216581][ T6702] netlink: 'syz.3.352': attribute type 2 has an invalid length. [ 167.231128][ T863] usb 4-1: USB disconnect, device number 31 [ 167.298895][ T6752] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 167.320253][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.327991][ T6752] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 167.383784][ T6754] FAULT_INJECTION: forcing a failure. [ 167.383784][ T6754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.383817][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 167.383841][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.383854][ T6754] Call Trace: [ 167.383863][ T6754] [ 167.383872][ T6754] dump_stack_lvl+0xe8/0x150 [ 167.383904][ T6754] should_fail_ex+0x3eb/0x540 [ 167.383934][ T6754] _copy_to_user+0x31/0xb0 [ 167.383962][ T6754] video_usercopy+0xdf4/0x1430 [ 167.383999][ T6754] ? __pfx___video_do_ioctl+0x10/0x10 [ 167.384028][ T6754] ? __pfx_video_usercopy+0x10/0x10 [ 167.384066][ T6754] ? __fget_files+0x2a/0x420 [ 167.384096][ T6754] ? __fget_files+0x2a/0x420 [ 167.384119][ T6754] ? __fget_files+0x3a2/0x420 [ 167.384148][ T6754] v4l2_ioctl+0x18d/0x1e0 [ 167.384175][ T6754] ? __pfx_v4l2_ioctl+0x10/0x10 [ 167.384199][ T6754] __se_sys_ioctl+0xfc/0x170 [ 167.384234][ T6754] do_syscall_64+0x166/0x520 [ 167.384254][ T6754] ? trace_irq_disable+0x3b/0x140 [ 167.384281][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.384303][ T6754] ? clear_bhb_loop+0x70/0xc0 [ 167.384329][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.384349][ T6754] RIP: 0033:0x7efc6c39e159 [ 167.384369][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.384391][ T6754] RSP: 002b:00007efc6d1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.384415][ T6754] RAX: ffffffffffffffda RBX: 00007efc6c625fa0 RCX: 00007efc6c39e159 [ 167.384431][ T6754] RDX: 00002000000000c0 RSI: 00000000c050561a RDI: 0000000000000003 [ 167.384454][ T6754] RBP: 00007efc6d1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 167.384467][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.384480][ T6754] R13: 00007efc6c626038 R14: 00007efc6c625fa0 R15: 00007ffc55f13c48 [ 167.384514][ T6754] [ 167.393767][ T942] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 167.545161][ T942] usb 1-1: Using ep0 maxpacket: 32 [ 167.550932][ T942] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.550982][ T942] usb 1-1: New USB device found, idVendor=1f4d, idProduct=d220, bcdDevice=30.ec [ 167.553032][ T942] usb 1-1: config 2 has an invalid interface number: 55 but max is 0 [ 167.553056][ T942] usb 1-1: config 2 has no interface number 0 [ 167.553084][ T942] usb 1-1: config 2 interface 55 has no altsetting 0 [ 167.559728][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.559753][ T942] usb 1-1: Product: syz [ 167.559767][ T942] usb 1-1: Manufacturer: syz [ 167.559780][ T942] usb 1-1: SerialNumber: syz [ 167.695150][ T5712] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 167.834885][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.839918][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.840467][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.841041][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.842819][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 167.852806][ T5712] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 167.854126][ T5712] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 167.854149][ T5712] usb 2-1: config 135 has an invalid descriptor of length 214, skipping remainder of the config [ 167.854166][ T5712] usb 2-1: config 135 has no interface number 0 [ 167.854204][ T5712] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.856904][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.856925][ T5712] usb 2-1: Product: syz [ 167.856939][ T5712] usb 2-1: Manufacturer: syz [ 167.856952][ T5712] usb 2-1: SerialNumber: syz [ 167.905755][ T5712] uvcvideo 2-1:135.230: probe with driver uvcvideo failed with error -22 [ 167.939363][ T863] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 168.071453][ T5629] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 168.092112][ T863] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 168.093097][ T863] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 168.093143][ T863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 168.093170][ T863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 168.093207][ T863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.096054][ T863] usb 3-1: config 0 descriptor?? [ 168.096956][ T6763] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 168.137278][ T5350] usb 2-1: USB disconnect, device number 26 [ 168.222964][ T5629] usb 4-1: not running at top speed; connect to a high speed hub [ 168.222990][ T5629] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 168.224333][ T5629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 168.226724][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.226777][ T5629] usb 4-1: Product: syz [ 168.226792][ T5629] usb 4-1: Manufacturer: syz [ 168.226806][ T5629] usb 4-1: SerialNumber: syz [ 168.231988][ T6765] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 168.234705][ T5629] oti6858 4-1:1.0: oti6858 converter detected [ 168.239267][ T5629] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 168.437555][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.438291][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.725698][ T863] usbhid 3-1:0.0: can't add hid device: -71 [ 168.725808][ T863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.735563][ T863] usb 3-1: USB disconnect, device number 33 [ 168.791711][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.792236][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.061614][ T5727] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 169.191487][ T5727] usb 2-1: device descriptor read/64, error -71 [ 169.306235][ T6774] overlayfs: failed lookup in lower (newroot/98, name='file0', err=-40): overlapping layers [ 169.431394][ T5727] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 169.459371][ T6778] loop0: detected capacity change from 0 to 2049 [ 169.494186][ T6778] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 169.494218][ T6778] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 169.494232][ T6778] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 169.494297][ T6778] loop0: [ 169.563218][ T5727] usb 2-1: device descriptor read/64, error -71 [ 169.583321][ T6780] gadgetfs: bound to dummy_udc driver [ 169.672906][ T5727] usb usb2-port1: attempt power cycle [ 169.724923][ T6786] netlink: 'syz.2.382': attribute type 89 has an invalid length. [ 169.797788][ T6788] jffs2: notice: (6788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.846238][ T942] dvb-usb: found a 'Geniatech T220 DVB-T/T2 USB2.0' in warm state. [ 169.846290][ T942] dw2102: su3000_power_ctrl: 1, initialized 0 [ 169.846662][ T942] dvb-usb: bulk message failed: -22 (2/0) [ 169.879787][ T942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.880726][ T942] dvbdev: DVB: registering new adapter (Geniatech T220 DVB-T/T2 USB2.0) [ 169.880784][ T942] usb 1-1: media controller created [ 169.881046][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881065][ T942] dw2102: i2c transfer failed. [ 169.881081][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881095][ T942] dw2102: i2c transfer failed. [ 169.881110][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881123][ T942] dw2102: i2c transfer failed. [ 169.881137][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881150][ T942] dw2102: i2c transfer failed. [ 169.881163][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881176][ T942] dw2102: i2c transfer failed. [ 169.881189][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 169.881202][ T942] dw2102: i2c transfer failed. [ 169.881211][ T942] dvb-usb: MAC address: 02:02:02:02:02:02 [ 169.992309][ T942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.012902][ T5727] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 170.019319][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 170.019341][ T942] dw2102: command 0x0e transfer failed. [ 170.019351][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 170.019365][ T942] dw2102: command 0x0e transfer failed. [ 170.019374][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 170.019387][ T942] dw2102: command 0x0e transfer failed. [ 170.048043][ T5727] usb 2-1: device descriptor read/8, error -71 [ 170.071564][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 170.071588][ T942] dw2102: command 0x0e transfer failed. [ 170.071599][ T942] dvb-usb: bulk message failed: -22 (1/0) [ 170.071612][ T942] dw2102: command 0x51 transfer failed. [ 170.147128][ T5629] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 170.147547][ T942] DVB: Unable to find symbol cxd2820r_attach() [ 170.147589][ T942] dw2102: Failed to attach TDA18271HD/CXD2820R! [ 170.147599][ T942] dvb-usb: no frontend was attached by 'Geniatech T220 DVB-T/T2 USB2.0' [ 170.193542][ T6797] ecryptfs: Bad value for 'ecryptfs_key_bytes' [ 170.251431][ T942] rc_core: IR keymap rc-su3000 not found [ 170.251453][ T942] Registered IR keymap rc-empty [ 170.256817][ T942] rc rc0: Geniatech T220 DVB-T/T2 USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 170.284853][ T942] input: Geniatech T220 DVB-T/T2 USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input15 [ 170.288603][ T942] dvb-usb: schedule remote query interval to 150 msecs. [ 170.288626][ T942] dw2102: su3000_power_ctrl: 0, initialized 1 [ 170.288640][ T942] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 successfully initialized and connected. [ 170.292013][ T5727] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 170.316469][ T5629] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.323226][ T5727] usb 2-1: device descriptor read/8, error -71 [ 170.351606][ T5629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.351636][ T5629] usb 3-1: config 1 has no interface number 0 [ 170.351678][ T5629] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.351707][ T5629] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 170.351737][ T5629] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 170.351762][ T5629] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 170.409409][ T942] usb 1-1: USB disconnect, device number 31 [ 170.411578][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.411607][ T5629] usb 3-1: Product: syz [ 170.411623][ T5629] usb 3-1: Manufacturer: syz [ 170.411638][ T5629] usb 3-1: SerialNumber: syz [ 170.436161][ T5727] usb usb2-port1: unable to enumerate USB device [ 170.448148][ T5350] dvb-usb: bulk message failed: -22 (1/0) [ 170.448171][ T5350] dw2102: i2c transfer failed. [ 170.548924][ T942] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 successfully deinitialized and disconnected. [ 170.673185][ T6788] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 170.806978][ T6799] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 170.806997][ T6799] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 170.808792][ T6799] overlayfs: conflicting lowerdir path [ 170.870182][ T5350] usb 4-1: USB disconnect, device number 32 [ 170.913849][ T5350] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 170.916514][ T5350] oti6858 4-1:1.0: device disconnected [ 170.976327][ T6803] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 171.110390][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 171.124522][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 171.289346][ T6788] netlink: 'syz.2.383': attribute type 2 has an invalid length. [ 171.650126][ T6822] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 171.650149][ T6822] device-mapper: ioctl: error adding target to table [ 171.651524][ T5712] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 171.811763][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 171.816308][ T5712] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 171.817470][ T5712] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 171.817526][ T5712] usb 1-1: config 0 has no interface number 0 [ 171.817568][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.830522][ T5712] usb 1-1: config 0 descriptor?? [ 171.942804][ T5712] viperboard 1-1:0.143: version 0.00 found at bus 001 address 032 [ 172.001991][ T5627] Bluetooth: Unknown LE signaling command 0xf6 [ 172.002016][ T5627] Bluetooth: Wrong link type (-22) [ 172.002167][ T5627] Bluetooth: hci2: link tx timeout [ 172.002245][ T5627] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 172.004462][ T5627] Bluetooth: hci2: link tx timeout [ 172.004477][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.015314][ T5712] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 172.015343][ T5712] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 172.049837][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.050485][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.052512][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.053132][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.436553][ T31] audit: type=1326 audit(1789827072.124:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438004][ T31] audit: type=1326 audit(1789827072.124:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438055][ T31] audit: type=1326 audit(1789827072.124:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438098][ T31] audit: type=1326 audit(1789827072.124:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438141][ T31] audit: type=1326 audit(1789827072.124:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438202][ T31] audit: type=1326 audit(1789827072.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438246][ T31] audit: type=1326 audit(1789827072.124:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438286][ T31] audit: type=1326 audit(1789827072.124:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438326][ T31] audit: type=1326 audit(1789827072.124:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.438368][ T31] audit: type=1326 audit(1789827072.124:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.1.407" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x7ffc0000 [ 172.924060][ T5629] cdc_ncm 3-1:1.1: bind() failure [ 172.960122][ T5629] usb 3-1: USB disconnect, device number 34 [ 173.109384][ T6863] CIFS: Attempting to mount //127.0.0.1/share [ 173.153580][ T6863] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange [ 173.154603][ T6863] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 173.155887][ T6863] CIFS: VFS: cifs_mount failed w/return code = -11 [ 173.241470][ T5712] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 173.391567][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 173.392484][ T5712] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 173.400301][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.400328][ T5712] usb 4-1: Product: syz [ 173.400343][ T5712] usb 4-1: Manufacturer: syz [ 173.400357][ T5712] usb 4-1: SerialNumber: syz [ 173.413142][ T5712] usb 4-1: config 0 descriptor?? [ 173.417649][ T6867] device-mapper: ioctl: populate_table: no targets specified [ 173.423744][ T5712] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 173.582614][ T6872] Sensor B: ================= START STATUS ================= [ 173.582635][ T6872] Sensor B: Test Pattern: 75% Colorbar [ 173.582660][ T6872] Sensor B: Show Information: All [ 173.582677][ T6872] Sensor B: Vertical Flip: false [ 173.582688][ T6872] Sensor B: Horizontal Flip: false [ 173.582699][ T6872] Sensor B: Brightness: 128 [ 173.582711][ T6872] Sensor B: Contrast: 128 [ 173.582723][ T6872] Sensor B: Hue: 0 [ 173.582741][ T6872] Sensor B: Saturation: 128 [ 173.582760][ T6872] Sensor B: Pixel Rate: 160000000 [ 173.582781][ T6872] Sensor B: Horizontal Blanking: 800 [ 173.582800][ T6872] Sensor B: Vertical Blanking: 3223 [ 173.582820][ T6872] Sensor B: ================== END STATUS ================== [ 173.831502][ T863] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 173.991412][ T863] usb 2-1: Using ep0 maxpacket: 8 [ 173.992174][ T863] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 173.993670][ T863] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 173.993697][ T863] usb 2-1: config 0 has an invalid interface number: 149 but max is -1 [ 173.993718][ T863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 173.993738][ T863] usb 2-1: config 0 has no interface number 0 [ 173.993768][ T863] usb 2-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 173.993807][ T863] usb 2-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 173.993835][ T863] usb 2-1: config 0 interface 149 has no altsetting 0 [ 173.995902][ T863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.995933][ T863] usb 2-1: Product: syz [ 173.995948][ T863] usb 2-1: Manufacturer: syz [ 173.995962][ T863] usb 2-1: SerialNumber: syz [ 173.998543][ T863] usb 2-1: config 0 descriptor?? [ 174.007308][ T863] hub 2-1:0.149: bad descriptor, ignoring hub [ 174.007336][ T863] hub 2-1:0.149: probe with driver hub failed with error -5 [ 174.027135][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 174.204403][ T6872] rust_binder: 6871:6872 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 174.204450][ T6872] rust_binder: 6871:6872 got transaction to invalid handle 1 [ 174.204467][ T6872] rust_binder: 6871:6872 transaction call to 0:0 failed ENOENT, code 0 size 88-24 [ 174.204746][ T6871] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 174.311734][ T10] usb 2-1: USB disconnect, device number 31 [ 174.430808][ T942] usb 1-1: USB disconnect, device number 32 [ 174.769802][ T6881] kvm: apic: phys broadcast and lowest prio [ 174.807836][ T6872] syz.1.415 (6872) used greatest stack depth: 17456 bytes left [ 174.875569][ T6887] jffs2: notice: (6887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.131174][ T6894] netlink: 'syz.0.423': attribute type 89 has an invalid length. [ 175.131470][ T942] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 175.284064][ T942] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.285621][ T942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.285644][ T942] usb 2-1: config 1 has no interface number 0 [ 175.285681][ T942] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.285703][ T942] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 175.285763][ T942] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 175.285787][ T942] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 175.289641][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.289665][ T942] usb 2-1: Product: syz [ 175.289678][ T942] usb 2-1: Manufacturer: syz [ 175.289691][ T942] usb 2-1: SerialNumber: syz [ 175.461469][ T5727] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 175.503112][ T6887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.613285][ T5727] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 175.614633][ T5727] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.614660][ T5727] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 175.614698][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.626335][ T5727] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 175.633049][ T5727] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 175.676843][ T5712] gspca_ov534_9: sccb_write failed [ 175.875422][ T5712] gspca_ov534_9: reg_w failed -71 [ 175.951359][ T863] usb 1-1: USB disconnect, device number 33 [ 175.968990][ T863] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 175.976465][ T863] spcp8x5 1-1:1.0: device disconnected [ 176.111589][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 176.117747][ T6887] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 176.121483][ T5712] gspca_ov534_9: Unknown sensor 0000 [ 176.121607][ T5712] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 176.156689][ T5712] usb 4-1: USB disconnect, device number 33 [ 176.622196][ T6900] overlay: Unknown parameter 'low:rdir' [ 176.855622][ T6906] ecryptfs: Bad value for 'ecryptfs_key_bytes' [ 176.881481][ T5727] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 177.033424][ T5727] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.035858][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.036088][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.036131][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.042537][ T5727] usb 1-1: config 0 descriptor?? [ 177.275575][ T5727] usbhid 1-1:0.0: can't add hid device: -71 [ 177.275688][ T5727] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.286029][ T5727] usb 1-1: USB disconnect, device number 34 [ 177.713066][ T5727] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 177.861392][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 177.862338][ T5727] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.40 [ 177.863847][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.863876][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.863915][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.871277][ T5727] usb 1-1: config 0 descriptor?? [ 177.935082][ T942] cdc_ncm 2-1:1.1: bind() failure [ 177.954030][ T942] usb 2-1: USB disconnect, device number 32 [ 178.302761][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.303287][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.513782][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.517380][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.518804][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.520818][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.596017][ T5727] mcp2200 0003:04D8:00DF.000F: item fetching failed at offset 0/1 [ 178.596799][ T5727] mcp2200 0003:04D8:00DF.000F: can't parse reports [ 178.596918][ T5727] mcp2200 0003:04D8:00DF.000F: probe with driver mcp2200 failed with error -22 [ 178.760668][ T863] usb 1-1: USB disconnect, device number 35 [ 178.921426][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 178.921611][ T5727] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 179.072553][ T5727] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 179.072790][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 179.074316][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.074340][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.074380][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.076436][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.076461][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.076499][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.097290][ T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 179.105718][ T5727] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 179.117875][ T5727] usb 2-1: SPCP8x5 converter now attached to ttyUSB1 [ 179.122674][ T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 179.415378][ T9] usb 4-1: USB disconnect, device number 34 [ 179.433165][ T942] usb 2-1: USB disconnect, device number 33 [ 179.438402][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 179.458401][ T9] spcp8x5 4-1:1.0: device disconnected [ 179.477580][ T942] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 179.479845][ T942] spcp8x5 2-1:1.0: device disconnected [ 179.559305][ T6936] jffs2: notice: (6936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.589558][ T6939] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 179.592587][ T4933] Bluetooth: hci0: unexpected event 0x32 length: 7 < 9 [ 179.821425][ T5712] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 179.972762][ T5712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.975057][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.975086][ T5712] usb 3-1: config 1 has no interface number 0 [ 179.975128][ T5712] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.975156][ T5712] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 179.975190][ T5712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 179.975217][ T5712] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 179.979497][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.979522][ T5712] usb 3-1: Product: syz [ 179.979538][ T5712] usb 3-1: Manufacturer: syz [ 179.979553][ T5712] usb 3-1: SerialNumber: syz [ 180.212200][ T6950] sit0: entered promiscuous mode [ 180.218994][ T6950] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 180.219021][ T6950] netlink: 1 bytes leftover after parsing attributes in process `syz.0.443'. [ 180.237365][ T6951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.237381][ T6951] IPv6: NLM_F_CREATE should be set when creating new route [ 180.237421][ T6951] IPv6: NLM_F_CREATE should be set when creating new route [ 180.237445][ T6951] IPv6: NLM_F_CREATE should be set when creating new route [ 180.250572][ T6936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.271530][ T942] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 180.365068][ T6955] loop0: detected capacity change from 0 to 2049 [ 180.384898][ T6955] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 180.384930][ T6955] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 180.384943][ T6955] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 180.385002][ T6955] loop0: [ 180.446823][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 180.447623][ T942] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 180.450666][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.463982][ T942] usb 4-1: config 0 descriptor?? [ 180.478088][ T942] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 180.541581][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 180.692055][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 180.693035][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.693055][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.693069][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.693105][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.695855][ T9] usb 1-1: config 0 descriptor?? [ 180.781423][ T5727] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 180.858416][ T6936] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 180.942001][ T5727] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 180.943399][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.943417][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 180.943483][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.989800][ T5727] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 180.999925][ T5727] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 181.073129][ T942] gspca_vc032x: reg_w err -71 [ 181.073151][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073164][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073174][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073183][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073193][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073201][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073211][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073219][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073228][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073267][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073276][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073285][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073302][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073311][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073329][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073339][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073348][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073356][ T942] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.073366][ T942] gspca_vc032x: Unknown sensor... [ 181.073475][ T942] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 181.076515][ T942] usb 4-1: USB disconnect, device number 35 [ 181.163065][ T5705] usb 2-1: USB disconnect, device number 34 [ 181.183918][ T5705] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 181.197591][ T5705] spcp8x5 2-1:1.0: device disconnected [ 181.236268][ T9] thrustmaster 0003:044F:B324.0010: hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.0-1/input0 [ 181.319605][ T942] usb 1-1: USB disconnect, device number 36 [ 181.760830][ T6967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.005327][ T6977] loop0: detected capacity change from 0 to 2049 [ 182.041473][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 182.060834][ T6977] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 182.060873][ T6977] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 182.060886][ T6977] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 182.061031][ T6977] loop0: [ 182.161891][ T6979] syzkaller1: entered promiscuous mode [ 182.161916][ T6979] syzkaller1: entered allmulticast mode [ 182.214225][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 182.215238][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 182.215283][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 182.215308][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 182.215349][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.218055][ T9] usb 4-1: config 0 descriptor?? [ 182.218805][ T6969] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.232594][ T5705] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 182.392175][ T5705] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 182.393614][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 182.396343][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.396366][ T5705] usb 2-1: Product: syz [ 182.396380][ T5705] usb 2-1: Manufacturer: syz [ 182.396423][ T5705] usb 2-1: SerialNumber: syz [ 182.403048][ T6975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.575886][ T5712] cdc_ncm 3-1:1.1: bind() failure [ 182.593476][ T5712] usb 3-1: USB disconnect, device number 35 [ 182.624211][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.629483][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.648953][ T6975] FAULT_INJECTION: forcing a failure. [ 182.648953][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 182.648985][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(full) [ 182.649013][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.649024][ T6975] Call Trace: [ 182.649033][ T6975] [ 182.649042][ T6975] dump_stack_lvl+0xe8/0x150 [ 182.649075][ T6975] should_fail_ex+0x3eb/0x540 [ 182.649105][ T6975] should_failslab+0xa8/0x100 [ 182.649130][ T6975] __kmalloc_cache_noprof+0x9e/0x600 [ 182.649163][ T6975] ? kobject_uevent_env+0x289/0x9e0 [ 182.649189][ T6975] ? kobject_uevent_env+0x289/0x9e0 [ 182.649222][ T6975] kobject_uevent_env+0x289/0x9e0 [ 182.649257][ T6975] swnode_register+0x4ea/0x590 [ 182.649287][ T6975] fwnode_create_software_node+0x194/0x1f0 [ 182.649317][ T6975] device_create_managed_software_node+0xce/0x1f0 [ 182.649346][ T6975] iommufd_test+0x38a1/0x6360 [ 182.649387][ T6975] ? __lock_acquire+0x747/0x2de0 [ 182.649418][ T6975] ? __pfx_iommufd_test+0x10/0x10 [ 182.649461][ T6975] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.649485][ T6975] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.649512][ T6975] ? lock_acquire+0x115/0x350 [ 182.649557][ T6975] ? __might_fault+0xaf/0x130 [ 182.649591][ T6975] iommufd_fops_ioctl+0x465/0x600 [ 182.649621][ T6975] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 182.649652][ T6975] ? __fget_files+0x2a/0x420 [ 182.649683][ T6975] ? __fget_files+0x2a/0x420 [ 182.649712][ T6975] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.649738][ T6975] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 182.649761][ T6975] __se_sys_ioctl+0xfc/0x170 [ 182.649795][ T6975] do_syscall_64+0x166/0x520 [ 182.649815][ T6975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.649998][ T6975] ? clear_bhb_loop+0x70/0xc0 [ 182.650040][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.650065][ T6975] RIP: 0033:0x7f40c6f9e159 [ 182.650086][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.650104][ T6975] RSP: 002b:00007f40c7e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.650129][ T6975] RAX: ffffffffffffffda RBX: 00007f40c7225fa0 RCX: 00007f40c6f9e159 [ 182.650146][ T6975] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000008 [ 182.650159][ T6975] RBP: 00007f40c703506b R08: 0000000000000000 R09: 0000000000000000 [ 182.650173][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.650186][ T6975] R13: 00007f40c7226038 R14: 00007f40c7225fa0 R15: 00007ffc2ca774a8 [ 182.650217][ T6975] [ 182.674875][ T6975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.709353][ T6985] sctp: [Deprecated]: syz.3.451 (pid 6985) Use of int in max_burst socket option. [ 182.709353][ T6985] Use struct sctp_assoc_value instead [ 182.757138][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.785597][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.962112][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962148][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962174][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962200][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962225][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962250][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962275][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962301][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962326][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.962351][ T9] corsair 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 182.965985][ T9] corsair 0003:1B1C:1B3E.0011: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 182.995348][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.998618][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.027716][ T5705] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.028718][ T5705] usb 2-1: MIDIStreaming interface descriptor not found [ 183.178434][ T5705] usb 2-1: USB disconnect, device number 35 [ 183.195229][ T5712] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 183.261008][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.343037][ T5712] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 183.344040][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.344066][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 183.344096][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.350056][ T5712] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 183.361243][ T5712] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 183.556920][ T9] usb 3-1: USB disconnect, device number 36 [ 183.587873][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 183.588470][ T9] spcp8x5 3-1:1.0: device disconnected [ 183.672506][ T6981] NFSD: Unable to initialize client recovery tracking! (-110) [ 183.672530][ T6981] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 183.672542][ T6981] NFSD: starting 90-second grace period (net f00004cc) [ 183.811493][ T5705] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 183.964016][ T5705] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 183.966265][ T5705] usb 2-1: config 1 interface 0 altsetting 54 endpoint 0x1 is Bulk; changing to Interrupt [ 183.966295][ T5705] usb 2-1: config 1 interface 0 has no altsetting 0 [ 183.969358][ T5705] usb 2-1: string descriptor 0 read error: -22 [ 183.969496][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.986048][ T6993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.996797][ T5705] hub 2-1:1.0: bad descriptor, ignoring hub [ 183.996825][ T5705] hub 2-1:1.0: probe with driver hub failed with error -5 [ 184.040060][ T6998] overlay: Unknown parameter 'low\rdir' [ 184.292441][ T7009] jffs2: notice: (7009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.311822][ T5705] usb 2-1: USB disconnect, device number 36 [ 184.551626][ T5778] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 184.623316][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 184.703204][ T5778] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.704414][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.704452][ T5778] usb 1-1: config 1 has no interface number 0 [ 184.704483][ T5778] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.704500][ T5778] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 184.704519][ T5778] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 184.704535][ T5778] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 184.706532][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.706556][ T5778] usb 1-1: Product: syz [ 184.706571][ T5778] usb 1-1: Manufacturer: syz [ 184.706585][ T5778] usb 1-1: SerialNumber: syz [ 184.784795][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 184.787926][ T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.794278][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.794329][ T10] usb 3-1: Product: syz [ 184.794344][ T10] usb 3-1: Manufacturer: syz [ 184.794356][ T10] usb 3-1: SerialNumber: syz [ 184.916779][ T9] usb 4-1: USB disconnect, device number 36 [ 184.918741][ T7009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.015967][ T10] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 185.018420][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.018675][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 185.018705][ T10] usb 3-1: media controller created [ 185.033614][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.190359][ T7025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 185.190400][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.194305][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 185.199716][ T7026] usbip_core: unknown command [ 185.199766][ T7026] vhci_hcd: unknown pdu 2185597400 [ 185.199779][ T7026] usbip_core: unknown command [ 185.208649][ T12] vhci_hcd vhci_hcd.3: stop threads [ 185.209523][ T12] vhci_hcd vhci_hcd.3: release socket [ 185.209624][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 185.217126][ T10] zl10353_read_register: readreg error (reg=127, ret==-32) [ 185.231435][ T863] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 185.322157][ T5778] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 185.322190][ T5778] cdc_ncm 1-1:1.1: bind() failure [ 185.324715][ T7009] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 185.383194][ T863] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 185.384073][ T863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.384091][ T863] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.384115][ T863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.398595][ T863] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 185.413050][ T863] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 185.432458][ T10] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 185.459398][ T5350] usb 3-1: USB disconnect, device number 37 [ 185.598291][ T10] usb 2-1: USB disconnect, device number 37 [ 185.605265][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 185.605948][ T10] spcp8x5 2-1:1.0: device disconnected [ 186.120508][ T7048] loop0: detected capacity change from 0 to 2049 [ 186.176094][ T7048] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 186.176125][ T7048] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 186.176138][ T7048] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 186.176200][ T7048] loop0: [ 186.356016][ T4933] Bluetooth: Unknown LE signaling command 0xf6 [ 186.356042][ T4933] Bluetooth: Wrong link type (-22) [ 186.356144][ T4933] Bluetooth: hci3: link tx timeout [ 186.356209][ T4933] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.419921][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 186.419943][ T31] audit: type=1326 audit(1789827086.104:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.1.480" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40c6f9e159 code=0x0 [ 187.078782][ T7077] kvm: apic: phys broadcast and lowest prio [ 187.374870][ T863] usb 1-1: USB disconnect, device number 37 [ 187.637283][ T7105] netlink: 'syz.0.486': attribute type 89 has an invalid length. [ 187.792870][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 187.811472][ T5705] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 187.964585][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 187.966776][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.966806][ T5705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 187.966847][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.020827][ T5705] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 188.035714][ T5705] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 188.104007][ T7125] jffs2: notice: (7125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.361476][ T5778] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 188.380687][ T7102] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 188.381023][ T7102] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 188.381440][ T7102] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 188.424615][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 188.512178][ T5778] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.513235][ T5778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.513261][ T5778] usb 3-1: config 1 has no interface number 0 [ 188.513304][ T5778] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.513333][ T5778] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 188.513365][ T5778] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 188.513402][ T5778] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 188.516608][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.516635][ T5778] usb 3-1: Product: syz [ 188.516650][ T5778] usb 3-1: Manufacturer: syz [ 188.516665][ T5778] usb 3-1: SerialNumber: syz [ 188.613624][ T7101] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 188.615134][ T5705] usb 4-1: USB disconnect, device number 37 [ 188.640817][ T5705] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 188.652650][ T5705] spcp8x5 4-1:1.0: device disconnected [ 188.725782][ T7125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 189.048094][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 189.143343][ T5778] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 189.143400][ T5778] cdc_ncm 3-1:1.1: bind() failure [ 189.145936][ T7125] netlink: 'syz.2.494': attribute type 2 has an invalid length. [ 189.283370][ T7141] netlink: 'syz.3.499': attribute type 19 has an invalid length. [ 189.283396][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.499'. [ 189.309066][ T7141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.499'. [ 189.363552][ T5350] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 189.492843][ T5350] usb 2-1: device descriptor read/64, error -71 [ 189.731486][ T5350] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 189.861634][ T5350] usb 2-1: device descriptor read/64, error -71 [ 189.972558][ T5350] usb usb2-port1: attempt power cycle [ 190.221623][ T5705] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 190.311593][ T5350] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 190.332783][ T5350] usb 2-1: device descriptor read/8, error -71 [ 190.372177][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 190.373234][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.373269][ T5705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 190.373298][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.388938][ T5705] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 190.414256][ T5705] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 190.581524][ T5350] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 190.605720][ T5350] usb 2-1: device descriptor read/8, error -71 [ 190.609423][ T10] usb 4-1: USB disconnect, device number 38 [ 190.642736][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 190.644235][ T10] spcp8x5 4-1:1.0: device disconnected [ 190.711674][ T5350] usb usb2-port1: unable to enumerate USB device [ 191.105765][ T10] usb 3-1: USB disconnect, device number 38 [ 191.459860][ T7163] netlink: 'syz.3.510': attribute type 10 has an invalid length. [ 191.601428][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 191.752398][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 191.753870][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.753897][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.753938][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.804220][ T10] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 191.808356][ T10] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 192.116916][ T7166] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 192.125519][ T31] audit: type=1400 audit(1789827091.814:83): apparmor="STATUS" info="failed to unpack - dfa" error=-71 profile="unconfined" name="p" pid=7165 comm="syz.3.511" name="p" offset=92 [ 192.155263][ T7157] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 192.155594][ T7157] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 192.155871][ T7157] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 192.309113][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 192.394217][ T7156] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 192.412535][ T5712] usb 3-1: USB disconnect, device number 39 [ 192.445073][ T5712] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 192.448701][ T5712] spcp8x5 3-1:1.0: device disconnected [ 192.497242][ T7172] loop0: detected capacity change from 0 to 2049 [ 192.563723][ T7172] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 192.563755][ T7172] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 192.563768][ T7172] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 192.563840][ T7172] loop0: [ 192.766917][ T7178] jffs2: notice: (7178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.051928][ T5712] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 193.070044][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 193.202149][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.203188][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.203215][ T5712] usb 2-1: config 1 has no interface number 0 [ 193.203254][ T5712] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.203281][ T5712] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 193.203316][ T5712] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 193.203342][ T5712] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 193.209561][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.209590][ T5712] usb 2-1: Product: syz [ 193.209605][ T5712] usb 2-1: Manufacturer: syz [ 193.209619][ T5712] usb 2-1: SerialNumber: syz [ 193.230287][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 193.231034][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 193.326055][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.326087][ T10] usb 4-1: Product: syz [ 193.326102][ T10] usb 4-1: Manufacturer: syz [ 193.326118][ T10] usb 4-1: SerialNumber: syz [ 193.353987][ T10] usb 4-1: config 0 descriptor?? [ 193.365465][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 193.429591][ T7178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.851260][ T5712] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 193.853309][ T5712] cdc_ncm 2-1:1.1: bind() failure [ 193.856149][ T7178] netlink: 'syz.1.515': attribute type 2 has an invalid length. [ 193.972837][ T7201] fuse: fd is not a fuse device [ 194.584809][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.584857][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.948648][ T7214] netlink: 'syz.2.532': attribute type 21 has an invalid length. [ 194.948714][ T7214] netlink: 156 bytes leftover after parsing attributes in process `syz.2.532'. [ 195.593877][ T10] gspca_ov534_9: reg_r err -71 [ 195.690908][ T7220] fuse: fd is not a fuse device [ 195.757065][ T5712] usb 2-1: USB disconnect, device number 42 [ 195.872771][ T10] gspca_ov534_9: Unknown sensor 0000 [ 195.872886][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 195.879904][ T10] usb 4-1: USB disconnect, device number 39 [ 196.153200][ T5712] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 196.302738][ T5712] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 196.306064][ T5712] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 196.306111][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 196.306138][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 196.306181][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.311201][ T5712] usb 2-1: config 0 descriptor?? [ 196.316351][ T7222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.441469][ T5705] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 196.594663][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 196.595619][ T5705] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.597065][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.597091][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.600127][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.600152][ T5705] usb 4-1: Product: syz [ 196.600167][ T5705] usb 4-1: Manufacturer: syz [ 196.600182][ T5705] usb 4-1: SerialNumber: syz [ 196.692428][ T5705] usb 4-1: 0:2 : does not exist [ 196.699201][ T7237] IPv6: Can't replace route, no match found [ 196.749381][ T5712] hid_parser_main: 30 callbacks suppressed [ 196.749439][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749471][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749497][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749522][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749548][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749603][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749629][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749655][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749680][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.749733][ T5712] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 196.766125][ T5712] corsair 0003:1B1C:1B3E.0012: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 196.908942][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 196.908966][ T7225] tipc: Invalid UDP bearer configuration [ 196.925113][ T7225] tipc: Enabling of bearer rejected, failed to enable media [ 197.186077][ T5705] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 197.244894][ T5705] usb 4-1: USB disconnect, device number 40 [ 197.297699][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.456528][ T7247] jffs2: notice: (7247) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.465524][ T7247] netlink: 'syz.2.544': attribute type 2 has an invalid length. [ 197.849705][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 197.849734][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 197.849747][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 197.849815][ T4984] loop0: [ 198.471405][ T5778] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 198.621951][ T5778] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 198.625670][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.625697][ T5778] usb 4-1: Product: syz [ 198.625711][ T5778] usb 4-1: Manufacturer: syz [ 198.625726][ T5778] usb 4-1: SerialNumber: syz [ 198.708957][ T5712] usb 2-1: USB disconnect, device number 43 [ 198.835969][ T7266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.835996][ T7266] IPv6: NLM_F_CREATE should be set when creating new route [ 199.201418][ T5712] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 199.354060][ T5712] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.355257][ T5712] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 199.355310][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.355354][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.358690][ T5712] usb 2-1: config 0 descriptor?? [ 199.368546][ T5712] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 199.515170][ T5778] kalmia 4-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle, 02:00:00:00:00:01 [ 200.336143][ C1] kalmia 4-1:1.0 wwan0: Received unknown frame header: 00:00:00:00:00:00. Package length: 4 [ 200.561049][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 200.651385][ T5712] usb 4-1: USB disconnect, device number 41 [ 200.665259][ T5712] kalmia 4-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle [ 200.759057][ T7303] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 201.377178][ T7319] netlink: 'syz.3.556': attribute type 4 has an invalid length. [ 201.377205][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 202.015356][ T5778] usb 2-1: USB disconnect, device number 44 [ 202.100703][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 202.100734][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 202.100755][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 202.100821][ T4984] loop0: [ 202.249355][ T7341] jffs2: notice: (7341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.365674][ T7345] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 202.561692][ T5712] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 202.568083][ T7348] IPv6: Can't replace route, no match found [ 202.718981][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.725010][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.725037][ T5712] usb 2-1: config 1 has no interface number 0 [ 202.725076][ T5712] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.725100][ T5712] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 202.725130][ T5712] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 202.725154][ T5712] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 202.730440][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.730464][ T5712] usb 2-1: Product: syz [ 202.730477][ T5712] usb 2-1: Manufacturer: syz [ 202.730490][ T5712] usb 2-1: SerialNumber: syz [ 202.951170][ T7341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.364929][ T5712] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 203.364987][ T5712] cdc_ncm 2-1:1.1: bind() failure [ 203.397534][ T7341] netlink: 'syz.1.561': attribute type 2 has an invalid length. [ 203.570836][ T7378] CIFS: Attempting to mount //127.0.0.1/share [ 203.683409][ T7378] CIFS: VFS ** replaying previous printk message ** [ 203.683409][ T7378] CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server [ 203.694432][ T7378] ------------[ cut here ]------------ [ 203.694445][ T7378] server->in_flight == 0 [ 203.694454][ T7378] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1249/0x2b70, CPU#1: syz.3.571/7378 [ 203.730040][ T7378] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.734379][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.3.571 Not tainted syzkaller #0 PREEMPT(full) [ 203.743678][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.753857][ T7378] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 203.759735][ T7378] Code: de 83 e6 01 31 ff e8 a6 1a b8 fe f6 c3 01 75 0a e8 9c 15 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 15 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 3b 52 75 0d 01 0f 85 9e 03 00 00 e8 72 15 b8 fe 49 [ 203.779449][ T7378] RSP: 0018:ffffc900036c7178 EFLAGS: 00010246 [ 203.786328][ T7378] RAX: ffffffff830fe118 RBX: 1ffff11005241c61 RCX: ffff888026633e80 [ 203.795004][ T7378] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.803706][ T7378] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 203.812438][ T7378] R10: dffffc0000000000 R11: ffffffff83100e70 R12: ffff88802920e308 [ 203.821873][ T7378] R13: ffffc900036c7390 R14: ffff88802920e000 R15: 0000000000000000 [ 203.829887][ T7378] FS: 00007fd8bd7896c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 203.839515][ T7378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.846641][ T7378] CR2: 00007f54434f2530 CR3: 000000003552c000 CR4: 00000000003526f0 [ 203.854696][ T7378] Call Trace: [ 203.858006][ T7378] [ 203.860978][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 203.866310][ T7378] compound_send_recv+0x13b4/0x2b90 [ 203.871684][ T7378] ? __pfx_compound_send_recv+0x10/0x10 [ 203.877328][ T7378] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.882472][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 203.887633][ T7378] cifs_send_recv+0x42/0x60 [ 203.892245][ T7378] SMB2_tcon+0x901/0x1ea0 [ 203.896635][ T7378] ? __pfx_SMB2_tcon+0x10/0x10 [ 203.901513][ T7378] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.906590][ T7378] ? rcu_is_watching+0x16/0xb0 [ 203.911447][ T7378] ? __pfx_SMB2_tcon+0x10/0x10 [ 203.916269][ T7378] cifs_setup_ipc+0x344/0x820 [ 203.921572][ T7378] ? __pfx_cifs_setup_ipc+0x10/0x10 [ 203.926828][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 203.932436][ T7378] cifs_get_smb_ses+0x15a1/0x1ff0 [ 203.937527][ T7378] cifs_mount_get_session+0xf1/0x440 [ 203.942929][ T7378] dfs_mount_share+0x22e/0x990 [ 203.947741][ T7378] cifs_mount+0xcc/0xbf0 [ 203.952149][ T7378] ? __pfx_cifs_mount+0x10/0x10 [ 203.957054][ T7378] ? smb3_update_mnt_flags+0x2df/0x410 [ 203.962642][ T7378] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 203.967892][ T7378] cifs_smb3_do_mount+0x2d0/0x8a0 [ 203.973012][ T7378] ? smb3_get_tree+0x2bf/0x400 [ 203.977820][ T7378] ? __pfx___mutex_lock+0x10/0x10 [ 203.982928][ T7378] ? kfree+0x1c5/0x650 [ 203.987039][ T7378] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 203.992849][ T7378] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 203.999232][ T7378] smb3_get_tree+0x2dd/0x400 [ 204.003935][ T7378] vfs_get_tree+0x92/0x2a0 [ 204.008398][ T7378] do_new_mount+0x319/0xdc0 [ 204.012995][ T7378] ? __pfx_do_new_mount+0x10/0x10 [ 204.018064][ T7378] ? ns_capable+0x84/0xe0 [ 204.023222][ T7378] ? path_mount+0x647/0x1050 [ 204.027860][ T7378] ? user_path_at+0xd4/0x160 [ 204.032905][ T7378] __se_sys_mount+0x31d/0x420 [ 204.037640][ T7378] ? __pfx___se_sys_mount+0x10/0x10 [ 204.042970][ T7378] ? __x64_sys_mount+0x20/0xc0 [ 204.047780][ T7378] do_syscall_64+0x166/0x520 [ 204.052548][ T7378] ? trace_irq_disable+0x3b/0x140 [ 204.057617][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.063784][ T7378] ? clear_bhb_loop+0x70/0xc0 [ 204.068520][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.074496][ T7378] RIP: 0033:0x7fd8bc99e159 [ 204.078940][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.098655][ T7378] RSP: 002b:00007fd8bd789028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.107660][ T7378] RAX: ffffffffffffffda RBX: 00007fd8bcc25fa0 RCX: 00007fd8bc99e159 [ 204.115986][ T7378] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 204.124609][ T7378] RBP: 00007fd8bca3506b R08: 0000200000000300 R09: 0000000000000000 [ 204.133166][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.141564][ T7378] R13: 00007fd8bcc26038 R14: 00007fd8bcc25fa0 R15: 00007fff5b5ca2f8 [ 204.149596][ T7378] [ 204.152724][ T7378] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.160033][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.3.571 Not tainted syzkaller #0 PREEMPT(full) [ 204.169265][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.179356][ T7378] Call Trace: [ 204.182666][ T7378] [ 204.185618][ T7378] vpanic+0x56d/0xa70 [ 204.189645][ T7378] ? __pfx__printk+0x10/0x10 [ 204.194269][ T7378] ? __pfx_vpanic+0x10/0x10 [ 204.198821][ T7378] ? is_bpf_text_address+0x292/0x2b0 [ 204.204142][ T7378] ? is_bpf_text_address+0x26/0x2b0 [ 204.209381][ T7378] panic+0xc5/0xd0 [ 204.213126][ T7378] ? __pfx_panic+0x10/0x10 [ 204.217575][ T7378] __warn+0x315/0x4c0 [ 204.221569][ T7378] ? smb2_add_credits+0x1249/0x2b70 [ 204.226778][ T7378] ? smb2_add_credits+0x1249/0x2b70 [ 204.231982][ T7378] __report_bug+0x276/0x570 [ 204.236505][ T7378] ? smb2_add_credits+0x1249/0x2b70 [ 204.241710][ T7378] ? __pfx___report_bug+0x10/0x10 [ 204.246744][ T7378] ? __lock_acquire+0x747/0x2de0 [ 204.251694][ T7378] ? __pfx___schedule+0x10/0x10 [ 204.256562][ T7378] ? smb2_add_credits+0x1249/0x2b70 [ 204.261766][ T7378] report_bug+0x16b/0x220 [ 204.266109][ T7378] ? smb2_add_credits+0x1249/0x2b70 [ 204.271318][ T7378] ? smb2_add_credits+0x124b/0x2b70 [ 204.276520][ T7378] handle_bug+0x9c/0x200 [ 204.280766][ T7378] exc_invalid_op+0x1a/0x50 [ 204.285275][ T7378] asm_exc_invalid_op+0x1a/0x20 [ 204.290134][ T7378] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 204.295947][ T7378] Code: de 83 e6 01 31 ff e8 a6 1a b8 fe f6 c3 01 75 0a e8 9c 15 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 15 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 3b 52 75 0d 01 0f 85 9e 03 00 00 e8 72 15 b8 fe 49 [ 204.315558][ T7378] RSP: 0018:ffffc900036c7178 EFLAGS: 00010246 [ 204.321637][ T7378] RAX: ffffffff830fe118 RBX: 1ffff11005241c61 RCX: ffff888026633e80 [ 204.329616][ T7378] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.337602][ T7378] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 204.345575][ T7378] R10: dffffc0000000000 R11: ffffffff83100e70 R12: ffff88802920e308 [ 204.353550][ T7378] R13: ffffc900036c7390 R14: ffff88802920e000 R15: 0000000000000000 [ 204.361528][ T7378] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 204.367430][ T7378] ? smb2_add_credits+0x3f8/0x2b70 [ 204.372555][ T7378] ? smb2_add_credits+0x3f8/0x2b70 [ 204.377682][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 204.382804][ T7378] compound_send_recv+0x13b4/0x2b90 [ 204.388030][ T7378] ? __pfx_compound_send_recv+0x10/0x10 [ 204.393610][ T7378] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.398648][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 204.403770][ T7378] cifs_send_recv+0x42/0x60 [ 204.408287][ T7378] SMB2_tcon+0x901/0x1ea0 [ 204.412653][ T7378] ? __pfx_SMB2_tcon+0x10/0x10 [ 204.417457][ T7378] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.422519][ T7378] ? rcu_is_watching+0x16/0xb0 [ 204.427301][ T7378] ? __pfx_SMB2_tcon+0x10/0x10 [ 204.432077][ T7378] cifs_setup_ipc+0x344/0x820 [ 204.436791][ T7378] ? __pfx_cifs_setup_ipc+0x10/0x10 [ 204.442024][ T7378] ? do_raw_spin_unlock+0xf5/0x200 [ 204.447147][ T7378] cifs_get_smb_ses+0x15a1/0x1ff0 [ 204.452194][ T7378] cifs_mount_get_session+0xf1/0x440 [ 204.457516][ T7378] dfs_mount_share+0x22e/0x990 [ 204.462290][ T7378] cifs_mount+0xcc/0xbf0 [ 204.466562][ T7378] ? __pfx_cifs_mount+0x10/0x10 [ 204.471425][ T7378] ? smb3_update_mnt_flags+0x2df/0x410 [ 204.476903][ T7378] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 204.482123][ T7378] cifs_smb3_do_mount+0x2d0/0x8a0 [ 204.487158][ T7378] ? smb3_get_tree+0x2bf/0x400 [ 204.491936][ T7378] ? __pfx___mutex_lock+0x10/0x10 [ 204.496962][ T7378] ? kfree+0x1c5/0x650 [ 204.501040][ T7378] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 204.506601][ T7378] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 204.512948][ T7378] smb3_get_tree+0x2dd/0x400 [ 204.517550][ T7378] vfs_get_tree+0x92/0x2a0 [ 204.521979][ T7378] do_new_mount+0x319/0xdc0 [ 204.526501][ T7378] ? __pfx_do_new_mount+0x10/0x10 [ 204.531534][ T7378] ? ns_capable+0x84/0xe0 [ 204.535875][ T7378] ? path_mount+0x647/0x1050 [ 204.540475][ T7378] ? user_path_at+0xd4/0x160 [ 204.545082][ T7378] __se_sys_mount+0x31d/0x420 [ 204.549774][ T7378] ? __pfx___se_sys_mount+0x10/0x10 [ 204.554985][ T7378] ? __x64_sys_mount+0x20/0xc0 [ 204.559766][ T7378] do_syscall_64+0x166/0x520 [ 204.564362][ T7378] ? trace_irq_disable+0x3b/0x140 [ 204.569404][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.575477][ T7378] ? clear_bhb_loop+0x70/0xc0 [ 204.580163][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.586067][ T7378] RIP: 0033:0x7fd8bc99e159 [ 204.590513][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.610130][ T7378] RSP: 002b:00007fd8bd789028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.618566][ T7378] RAX: ffffffffffffffda RBX: 00007fd8bcc25fa0 RCX: 00007fd8bc99e159 [ 204.626548][ T7378] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 204.634712][ T7378] RBP: 00007fd8bca3506b R08: 0000200000000300 R09: 0000000000000000 [ 204.642717][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.650703][ T7378] R13: 00007fd8bcc26038 R14: 00007fd8bcc25fa0 R15: 00007fff5b5ca2f8 [ 204.658704][ T7378] [ 204.661882][ T7378] Kernel Offset: disabled [ 204.666207][ T7378] Rebooting in 86400 seconds..