last executing test programs: 2m19.681282603s ago: executing program 0 (id=297): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300), 0x651, 0x200000000000000) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r1 = landlock_create_ruleset(&(0x7f0000000580)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 2m19.066198936s ago: executing program 0 (id=299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='r:s/_ ./file0:0', 0xf) unshare(0x28000600) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xd023, 0x7, [{0xd}, {0xe}, {0x5, 0x1}, {0xa, 0x1}, {0x2, 0x1}, {0xb}, {0x7}]}) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x28001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 2m18.773844153s ago: executing program 0 (id=300): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) r2 = syz_ublk_setup_io_uring(0x1571, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, 0x0) 2m18.663188233s ago: executing program 0 (id=301): r0 = socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing\x00', 0x1be) (async) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/set_event\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='!*ys:*', 0x6) (async) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="4400000010000104000000000000000000000000000000000000000000000000240012000a00010076786c616e00000014000200080001007b0000e00800020001020304", 0x44}], 0x1}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) mknodat$md(0xffffffffffffff9c, &(0x7f0000000640)='./md0\x00', 0x6180, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000680)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f00000006c0)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000740)={0x0, {0x1, 0x0}, 0x0, 0x40408}) (async) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000780)={0x1, {0x1, 0x1}, 0x1, 0x6}) (async) ioctl$RUN_ARRAY(r2, 0x400c0930, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$STOP_ARRAY_RO(r2, 0x933, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$midi(0x2, 0x58, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x5, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xbe, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1a, 0x4}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0xfa, 0x5, [{0xf5, 0x6}, {0x5}, {0x2, 0x81}, {0x10}, {0xa1, 0x1}], 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xc, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x7359, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x3, "d3c593"}}}]}}}}}]}}, 0x0) (async) syz_clone(0x5000, &(0x7f0000000380)="68a0e886e9124b459582ff70ebf82e8b36c41aaea828596c522c9538d0d5bbc86ce492cbcdd5d5657aa73fbf47f9995a90cb22fbc3ae163925a51470430d320bbd338275ffbbb962d0a928d55b358fccae99c8259e47ff07a560b4a80dd8bca982ff2642991214510e8fa6af6614cabea14ce03526158ed65ec6e942e5da66693c1d8e210661eb54346224b5a28d9eea1e196eeb363f25add3c5100f8b6e49679ea4b25f517b756d4c2f8cef67e717", 0xaf, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="6c209e8025f273ba2b9fa1a163e8c92cfe3dd3872fd349ae14f91032913d646633dc54e29fee3a9c60122a952ad84653c1ba661b92b5fabcf6") (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_ep_write(r3, 0x81, 0xffffffffffffff6d, &(0x7f0000000200)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2m15.534155739s ago: executing program 0 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./sys/kernel/reboot/mode\x00') (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000980)=0x0) timer_settime(0x0, 0x0, &(0x7f00000009c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000a00)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000a40)) sendto(r1, 0x0, 0x0, 0x20040845, 0x0, 0xfffffffffffffd11) (async) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000480)=@generic={0x21, "74f13142bd94f1a77ede7985b0309e6a11c9dcb340bf206053d31ae7f382cb98156eeb22e0d6200b370cf233d2cd4687c5b1f8b64de5159b9e839fe3d688a3b39dcea72d1f69eb5bef2310b93a12900c5a2af44fdb5d9c35796e3f9811d3a72e294c5fc4eb5dc227b6ce1a294e1d38b9218d478eb84b40f8b2032f6b1901"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="f98125e41a24b86f5234bf5bd9810898b13738b5eb64850224c359ea3ea7a8dabafacd5949fc14f6a2860e", 0x2b}, {&(0x7f00000005c0)="c4112cb40204ec5b8774706f29645394023ebd1cfedf1de7b8f1fc6b55a8c50834a9f04239397c3e9c9b238305744255602f162852962549c89d38f791e502d72e27807c17912bb145c0811676dde79aa06f37e25d01d6d7b2958181fc63218a9692139b07edd242b3b3a699c7e44caf4ab61d957094ed4ea7d199647489fa0f19891428676db88a09f658f52730dc27f611807ea6d1060711cbde72f6aa7bc206db937945a66c90e03ba42763afc6edfffad42bfb3fbd6f913f046280af20c3094496cf43a0252cc37dc413ec18c1bba005aeafaae2d4f2c6f47c3c4cde8c676104aa54b5604e5a5cc49c35", 0xec}, {&(0x7f00000006c0)="6540db9a3bc777132bb9822f0e3d2b980089418218b2ffb5a45a94b34ea1b895a97fd19a3075778f6185a78296193d51d78448db64e7d060a99c7833e7bcdae541255d92b1cf7a4f7d15eb6fd853fa2c728cc87b0d034714ba5752d63c2b3f5af943c87fda81999bd65819fdc33c26b0d0879d9627748e665a15ab0b5e910f604f61cd3e8b476a19046f7791bd7e", 0x8e}], 0x3, &(0x7f00000007c0)=[{0xf8, 0x104, 0x1, "fdb734841348392923b460d2170335f0a61c50f29921be2ca54bc4a5abfb1eaa4385550b1f6cf34899286aed254a0965ebd4c6cdc08fcab23b934b5b92918a7832862d18c58faf2b256def4fd7311ff750925973de73b4565394c446805792a9cb05e0007b5b0e8e24143f1050726a15feafc5fdc3b95a8fb7f7d8fcf1826b519402b56c54e4604e2cdfdbd9b684bf84e3d1865bd922f00d8ae6706d2a9390f0c08382e4c6af027dc9014801f51819efadf242955beed9d694ca67bbded5803aaec9c292a2d54c46c349664c4329b0fad8e5a31f2b1f0b707d81df6ef4224bc889262890ba"}, {0x18, 0x1, 0x552d, "561794f9520f"}, {0x48, 0x111, 0x2, "c042fca25b8dd11a2306d672eddd8f9d365c416fbaa63a468b835cc3b6061dfa378c3990f50f024c9b7c5d91a02b3fe97695"}], 0x158}, 0x844) (async) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file1'}, 0xb) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x7, 0x1a, 0xaa, &(0x7f0000000000)="0066d33a6912d0627b5f282fedf5c84f4a3e0cac4ddba7ae61b5ae73e0a0e6bc235603d3d48bcfe5e9bac673aa8a0a4b1186e5fc7f0b6cc957a2dfd2eeff997dcb72df93103e45422745b326ee8d19c3cccb55ca0a9a641fe821e028ece41360f3d0a96a61cf60d643be19377a8339f31044770177f00a61336968e9fa14bd6b1f7afdfcbbcdfe00c206d36afd080eb7204d5b09d94b12ab9fbd827f354fbfb498af2c19d786563864b2b0f423262f05f082d5dd789367ec9503dfb6b9bfb7f4891c0c9b774e51cab9d7e9807549b5cca4b9a980f1c6727ea2dabae959d49d0468bbc3c006626733f1bd00444c8c75499506d399969ceac5c40934bef02d96aae59a7cb82fd44ed036b56b1b6874d7763c63fbdcb99950e40ec12e3f0d004c994557df95ec8afe97c277f1faf1dc396c71f2b46108b9fc1c416d94cc0b327d1aa67f32893249c8e0d6115ace40bbcf73451a3dc3b571771555afcb9647050418dc26569bdeb2e499fe6c109033fc92aa5a2f51122e692930e5b954049ef3f388f0a9b677057a284d74d426ad0f6bd977c4c6f373f6d3068cde2c76894d505946c2f65c83ae229544b55331270b95ec5e3e6e403851dbc6ee644b4bac95eba11486f6a84afb85e2983d5625d7738750903343b49463bcbb103f3c9b7dcbe5dbfadb258644406f97e56c022776fac6a6afc127d78d266b5147e8e4ae2cd9a8c82bd27cf3c04acc76ee19a9dc33713fcaa28cedb8258e167629f9a3af5621362ca48a0591f03538536f56487601cc9e5bf3be1c43596a6ad8ad3dca2c4ebe8e205dbab4f2ecf1cf2dc4ededf109a20c2095adb1bcbd3f9595c6d2b927b5f8d22dd0d91854a6d586d4f3757ddeb88c0f544f56e8d3a3778660454eacdff03119b9b6015e03269dfd4f12eaac2cff8fa93f040ed6a6368271447ff053a714aca9e8a5e9a45904b23b152dd1925264166714251217c0661d12417e65967b1d0b1ef5df2fe7d9a207b2b10aac7e83c62fcedfb158fef7203b05e71602a53f20ec31f26f0b313f6f6262bc7d1613a79986d99dfb47372e5f90531b36a3ee815dc5ba7a3f5eed41af137da3b6fa98d8d25309aeb9aea8596b54b2b80bf2f96095f3283453be98893074dfe13000e223249fd602d05d338682b7a8b6f64a1032cfd669a2c4af81dd4abbd19dc96a3d0f78da34d8b6638e4e8888dc95f2cd21abe23738b6062f296aeb928e65cb7b3dd48f29d0486a33d4f50d3f256be2b5a4bcebb9d8a999a7367ebf2e751d23bd40a6d1cd6a862aa8b5c00cdf9a1a917f7f7837310cc3e584415fd97f4b521a914a21e7d07b1c2dbf27670f7529516add9c289a691b80f04c68b39f1902ab3fea7627ae1a9ec8500f80f9070c30e297c3018222b92356d05b0f75fd9b63535beb28534f8bc5a8b735ffa5364268ef9aa98c9cf5eadf205f"}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 2m14.035384661s ago: executing program 0 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000700)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6}]}, 0x10) (fail_nth: 12) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6}]}, 0x10) 2m13.815649842s ago: executing program 32 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000700)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6}]}, 0x10) (fail_nth: 12) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6}]}, 0x10) 1m23.304270559s ago: executing program 1 (id=549): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100100077b639bc263b8a4e2c103edb0122d2150b07651f1a2a3b0ebe39cdf8e3", @ANYRES16=r2, @ANYBLOB="25032abd7000fcdbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) 1m23.151898292s ago: executing program 1 (id=550): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={0x0, 0xffa1, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) 1m22.942900666s ago: executing program 1 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x32, 0x3}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x20, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000d40)=""/4091, 0xffb}, {&(0x7f0000001d40)=""/175, 0xaf}, {&(0x7f0000001e00)=""/256, 0x100}, {&(0x7f0000001f00)=""/191, 0xbf}], 0x6}, 0x1ff}], 0x4, 0x0, 0x0) 1m22.82449964s ago: executing program 1 (id=552): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000040)=0x2a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x20000008, 0x90000, 0x9, 0xed, 0x0, 0x280ffa, 0x9, 0x4, 0xffffffff, 0x1030, 0x1000008, 0x4c, 0x4000000a, 0x5, 0x37, 0x1ff, 0x4e, 0x14000003, 0x1e41a175, 0x9, 0x101, 0xffffffff, 0x6, 0x5, 0x18, 0x2, 0x6, 0x77fd]}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='fd', 0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='p:s/_ ./file0:0', 0xf) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='r:s/_ ./file0:0', 0xf) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x244) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r10, r10) setpgid(0x0, r9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x80049370, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 1m22.584866916s ago: executing program 1 (id=555): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22e) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) write(r1, &(0x7f00000001c0)="2400000011005f0414f9f40700090426810000000e0000000000000008000f0001009ece", 0x24) shmget(0x1, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) 1m22.152591163s ago: executing program 1 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c040003"], 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) syz_open_dev$vim2m(0x0, 0x47b, 0x2) write(r4, &(0x7f0000000080)='3', 0x4e) mknodat$md(0xffffffffffffff9c, &(0x7f0000000400)='./md0\x00', 0x6180, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x1}], 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x88, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "bb84fab6b397e8ed7a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5b45818f0cac4c75126e0946c8"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "8f0a6dd96166e8b90c2ea57e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4080084}, 0x804) listen(r3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf042bbd7000fcdbdf251200000008000300", @ANYRES32=r10, @ANYBLOB="14009d000500020006000000050002002f0000000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) 1m21.285414884s ago: executing program 33 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c040003"], 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) syz_open_dev$vim2m(0x0, 0x47b, 0x2) write(r4, &(0x7f0000000080)='3', 0x4e) mknodat$md(0xffffffffffffff9c, &(0x7f0000000400)='./md0\x00', 0x6180, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x1}], 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x88, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "bb84fab6b397e8ed7a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5b45818f0cac4c75126e0946c8"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "8f0a6dd96166e8b90c2ea57e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4080084}, 0x804) listen(r3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf042bbd7000fcdbdf251200000008000300", @ANYRES32=r10, @ANYBLOB="14009d000500020006000000050002002f0000000a000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) 7.296499713s ago: executing program 2 (id=914): gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1003ffffffc]}, 0x8, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000200)={0x0, 0xe, 0x4, @thr={&(0x7f00000000c0)="b07931b5180bf2bcac7f9db5261a253f", &(0x7f0000000100)="61aa86f05c46aa874db2e8313350fa315d166f8da7bda348fa2b65f35f34e9398288385af2e09d4c89fc48e400607f98124585cc358a2372b59907fc0c8389b92c7008e1bc6aa826856a98eeb1c1e7399dc14beb20686540cc9fe15ddbd5"}}, &(0x7f00000002c0)) r1 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x802) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) sendto(0xffffffffffffffff, &(0x7f0000000000)="1200000012", 0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000280)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 5.811837372s ago: executing program 2 (id=919): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x1100, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 4.209394982s ago: executing program 4 (id=930): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x189083) memfd_create(&(0x7f0000000540)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x12\xd1\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r0, &(0x7f0000000400), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="180200001400040726bd7000fcdbdf251003c8000100bfbb34bd16bd97a5cc407ee5539a693f5192f59efb6c01f9de28d895fab81252ef52da9423535c6fa9d81b184ffea1e372d3f17a543c9c8eaa6837572591d5ee73a09165c8afcd36718b7168cf0a63481745e7e793c70bfd3113e094e473b770f6cc5bc0d509856d1ffd8a40273e8b085bab557b179f7ded61f7031941a82bc42d7bb5e54d8e09a8d69ac250a3fb650e9c4c45da92ff9ec5fb8597add108bf263cdbdf35e0da28278379c9fb5e565d96aeaad1bb0f4cf64320be147078592aeb3431defa3b000100570b617b8273c67074390443ca4e12bbc159da07a621c7278b5d11ec00882c00c984cc3dd2930a6132daaec316000001010012ebb9689f78df7570e3bb386764f23eb2e630a90b50cc309faedcf271cf237af72f607fd71558940addca500a8bc5e867779c1fb1987bd7a53d13227b90eb9adebc30d5ba437de8061f4dd9a8e0b261cd1df2cd26ff27f829bbb15b52d81b66cc5ab179ab7fa7588052ffda69ff4f8c8ed87de35df70f796bc2d3123e9f3cde38dee0978c2e0c7adacd9786ad504fb0bdb4bc55be06a8234890dabf623f43eae0086429c7ad4b6525664f583bf8d00df785b150eb2bbb706017b7d9ddaea9c4b6b98d084824f75b5c94ed43b8258315215e50eaf6d22013f122bf51d36e03c0933a6ff25b4d3c435e308832c311b40416d1f53b4a9f9e0abce04f3f000023733355d152769580a484bebcd84651313525fba2982e9e67f1e72a4965bdbb9241a8c2530bef6678572d0e9cd720c169664abcb14f56beda1445f53347736492fa48d32d93febc5bbf3666f496325c99f2ec3eb34e677b3bca89a01537bc1e03faee7a5efd4e5d1d852149262525c8e9f03a8d78c1522a4a401bf3e9f90d3a64bb5cf2b2102d457e3d2df50ff27729b7c3cc0c6d32f17d2c9726aebca649f150bc89d74ad390472e2cebbb20a08df1382faf3d689ae4d20dc8bb18d21dc3640d62803910be139e39db878f9bf099a1fc34b966b20b4ef20dec9fa08ceff585b84ee2412258f499ddf1d91493cfa33cacdf00"/778], 0x218}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xa) open(&(0x7f0000000940)='./file0\x00', 0x60840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x18d042, 0x15) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket(0x26, 0x4, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r3, 0x84, 0x25, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x4}}, 0xd8, 0x3825, 0x6}, &(0x7f0000000980)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={r4}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r2, 0x84, 0x7d, &(0x7f00000000c0)={r5, 0xffffffff}, 0x8) 3.249371148s ago: executing program 2 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',n']) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',n']) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {@noprefix}, {@clone_children}], [{@subj_user={'subj_user', 0x3d, 'jf\x10;'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 3.14060338s ago: executing program 4 (id=937): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000000040)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='dir0\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000440)={0x0, 0xa0, 0x100, 0xfffffff6, 0x1e5}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_FILES_UPDATE={0x14, 0x41, 0x0, 0x0, 0x8, 0x0}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000600)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c000000150020"], 0xc) socketpair(0x28, 0x1, 0x28, &(0x7f0000000400)) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x7, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfdc6, &(0x7f0000001080)=ANY=[@ANYRES64, @ANYBLOB="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"]) 3.061685765s ago: executing program 5 (id=939): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800010000000003080002000000000074000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000004800048024000180090001006d6574610000000014000280080001000000000808000200000000002000018007000100637400001400028008000200000000120800040000000008"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000206010800001f05730a5240bf1700040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000000000000a004e2008000004ff02000000000000000000000000000101800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) r4 = socket$inet6(0xa, 0x3, 0x7) syz_usb_connect(0x0, 0x32, &(0x7f0000000900)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./dev\x00', 0x40) mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f00000009c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/gnss0\x00', 0x1001, 0x0) write(r5, 0x0, 0x52) r6 = socket$rxrpc(0x21, 0x2, 0x2) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendmsg(r6, &(0x7f0000000480)={&(0x7f0000000000)=@ll={0x11, 0xf7, 0x0, 0x1, 0x1, 0x6, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="463cfac7496c8e39b97a6f2b2e3ef3605465b589feba7d4d14148c6f985076ea58e43545d0ecb63f2ec88a85a1b9d1d895829c3ddc16c085d7ee2b18cf70d221a36c3a7b8a66da2b1e2328663499847f3be9ee32b3af0c596c6adf784716c0843cdfa56337064997ec610bc4287cbec29019dabf1e955046b243aa016e7d7e25fe3675b1a7703869969506b0aad803890fccf2a3ecde81fcb3c58d96a9b7e257cc7ae2288514a588c3a9", 0xaa}, {&(0x7f0000000140)="925660756ebda89b7c48dcc12f2d16bdc0e0f2b45d2daf783e1f5ab029d10bd03fae04f83df123b432f60c278e1a28a59aa93892c4095826a48963fccb654f1f", 0x40}], 0x2, &(0x7f0000000400)=[{0x50, 0x101, 0x8, "1a7e121fc1779e1d7520e6a966755f9a0684c0bcf2514543432f4f040e4975c1210f3217f7221963a34dae8728b4af55a744ec2dd0eb298258"}], 0x50}, 0x8010) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) 3.008008265s ago: executing program 2 (id=940): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000000, 0x7, 0x35314142, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0xfffffffe}, {0x1002}, {0x8}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0xfffff, 0x13ff}], 0x0, 0x0, 0x7}}) 2.960517417s ago: executing program 3 (id=941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast1}], 0x10) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0xa, 0x4e24, 0x8, @loopback, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000006c0)=""/250) getsockopt$inet_tcp_int(r4, 0x6, 0x2b, 0x0, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000bc0)={0x0, 0x1, 0x1d, 0x1c, 0x28, &(0x7f00000007c0)="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"}) write$P9_RSETATTR(r6, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0xffffff9a) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={0x1, 0x61a095e8}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r7, 0x1, 0x1}, 0xc) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.883114175s ago: executing program 2 (id=942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.77527051s ago: executing program 3 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000280)='100', 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (fail_nth: 15) 2.559596767s ago: executing program 3 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=ANY=[@ANYRES16=r0], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0xaffffffa) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000240)={[0x7ff]}, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0x4) r3 = syz_create_resource$futex(&(0x7f0000002740)) futex$unlock_pi_list64(r3, 0x287, 0xc9fe, &(0x7f0000002780)={0x0, 0x3938700}, &(0x7f00000027c0)=0x6, 0xfffffffd) bind$rds(r2, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/111, 0x6f}], 0x1, &(0x7f0000000580)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ee) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002700)={'ip6gretap0\x00', 0x800}) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='offline', 0x7) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 2.54603613s ago: executing program 2 (id=945): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x100, 0x0, 0x2}, 0x88, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') openat(r2, &(0x7f0000000440)='./cgroup\x00', 0x440, 0x107) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0xa4) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./proc\x00', 0x4c) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000380)=""/38, 0x26}], 0x1) r5 = landlock_create_ruleset(&(0x7f00000003c0)={0x40, 0x3, 0x0, 0x4180, 0x0, 0x3}, 0x30, 0x1) landlock_restrict_self(r5, 0xe) write(r3, &(0x7f0000000780)='7', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setreuid(r7, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000180)={0xdfe, 0x4, 0x4, 0x9}) syz_open_dev$hidraw(&(0x7f00000002c0), 0x15e, 0x127f2783a61cc563) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f0000000040), 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="744f00733d66642c726664f0b23d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fowner=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x81002) 1.486057708s ago: executing program 5 (id=946): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, 0x0, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x7044}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x1, {0x2, [{0x3, 0xff}, {0x0, 0x12}]}}, 0x8) 1.413194119s ago: executing program 4 (id=947): openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000340)=0x9, 0x4) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x20}}, 0x4000000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x4}}, @generic={0x1a, "6050df14b75818db5f26eebf120a"}, 0x5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='pimreg\x00', 0x7, 0x4, 0x6b}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1a8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r7, &(0x7f00000009c0)='7', 0x1) futex(0x0, 0xc, 0x8, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.29172621s ago: executing program 3 (id=948): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0xbe, 0x4) write(r1, &(0x7f0000000400)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40}, 0x1c, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20044044) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x54000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f00000009c0)=""/4057, &(0x7f00000019c0)=0xfd9) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000300)=0x10) socket(0x10, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) r11 = socket(0x1e, 0x4, 0x0) write$nci(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="5001", @ANYRES8=r8, @ANYRES16=r11], 0x14) syz_open_dev$evdev(&(0x7f0000000680), 0x1, 0x280040) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000003c0)={r12}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={r12, 0x1e1, "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"}, &(0x7f00000000c0)=0x1e9) 1.220154076s ago: executing program 5 (id=949): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x240040, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = dup3(r0, r1, 0x80000) getdents64(r1, &(0x7f0000000080)=""/217, 0xd9) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ef474a1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ef474a1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002300), 0x101002, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, 0xee01, &(0x7f0000002340)) (async) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, 0xee01, &(0x7f0000002340)) bind$rxrpc(r2, &(0x7f00000023c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x24) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_open_dev$video(&(0x7f0000002500), 0x0, 0x101002) (async) r4 = syz_open_dev$video(&(0x7f0000002500), 0x0, 0x101002) read(r4, &(0x7f0000002540)=""/29, 0x1d) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000002580), &(0x7f00000025c0)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x50, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r2) symlinkat(&(0x7f0000002840)='./file0\x00', r0, &(0x7f0000002880)='./file0\x00') (async) symlinkat(&(0x7f0000002840)='./file0\x00', r0, &(0x7f0000002880)='./file0\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(r2, 0x4, 0x4, 0x3) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000028c0)={0xfffffbff, "006961f86e35cfce4b57a40a7afd2fc6fae4563db28e89d6f411af017837f5df", 0x0, 0x6, 0x2, 0xffffff, 0x4000000, 0x4}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002980), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000029c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '/dev/video#\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}}, 0x801) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '/dev/video#\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}}, 0x801) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000002d00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b00)={0x198, r6, 0xb7d88084d552481f, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c080b7274980b6b77e75db6519d5104495d394ce53468227ca85b2b9c141db21"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4cd24ec0c6ce75afb2b0f3a2ece0986a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "42138b69ca57543171e2c7c6a0e35cbac313583e3f48db91bb727d7d2703bf84"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f8a82e87b904a65f98809bfa5b82669e3d6e5d27f242b728ff05c4c57cad8f9"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28daa451615b79683ce642f63d2a9473"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e7344596080969924ea062488ea7abcc92a79deb8415f6d1dc2addd7d1f190ab"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b9c14ca9c670d6591c1676ecd5223ad203a456c6092e0328d4ed39bce8901daf"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "682af82cb8bef4c42cb48403c2079526"}]}]}, 0x198}}, 0xe1) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000002d00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b00)={0x198, r6, 0xb7d88084d552481f, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c080b7274980b6b77e75db6519d5104495d394ce53468227ca85b2b9c141db21"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4cd24ec0c6ce75afb2b0f3a2ece0986a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "42138b69ca57543171e2c7c6a0e35cbac313583e3f48db91bb727d7d2703bf84"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f8a82e87b904a65f98809bfa5b82669e3d6e5d27f242b728ff05c4c57cad8f9"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28daa451615b79683ce642f63d2a9473"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e7344596080969924ea062488ea7abcc92a79deb8415f6d1dc2addd7d1f190ab"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b9c14ca9c670d6591c1676ecd5223ad203a456c6092e0328d4ed39bce8901daf"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "682af82cb8bef4c42cb48403c2079526"}]}]}, 0x198}}, 0xe1) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002f00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x42000005}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048c4}, 0xc4001) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002f00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x42000005}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048c4}, 0xc4001) 1.046508096s ago: executing program 5 (id=950): setresuid(0x0, 0xee01, 0x0) socket(0xa, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x40, 0x12, 0x4, "03e470f5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x7, 0xc4, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x7d, 0x20, 0xaa, {0x8, 0xb, 0x3, 0xd, 0x1, 0x7, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x39, 0x1379}, [@extension_unit={0x19, 0x24, 0xa, 0x5, 0x4, [0x1, 0x2, 0x3, 0x2, 0x2]}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0x0, 0x7f, 0xfffc}, @multiply_unit={0xb, 0x24, 0xd, 0x4, 0x2, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0xa4, 0xb8, "9c0f3d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x401, 0xfe, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x2, 0x1, {0xa, 0x25, 0x25, 0x3, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf, 0x9, 0x7, {0xa, 0x25, 0x25, 0x1, 0x9, 0x95}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x38, 0x40, 0x7d, 0x20, 0xfa}, 0x45, &(0x7f0000000340)={0x5, 0xf, 0x45, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "1c04101722f62b56006b271aca4db24a"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "75facc50037c2a0417c3819d400cc2b7"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x2, 0x800}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x3, 0x26, 0x0, 0xc}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x1b, &(0x7f00000004c0)=@string={0x1b, 0x3, "4ecbd7ac51e67aeedb17d55d019ccc40d20a806eeb0be28fb7"}}, {0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="36034bfb7ba327962aa5ff2a37953cff4c77b603fe729aafbea1554f6188919b7949a21d2145fabe4b7d13188deca0463d12e98258e6"]}, {0x7d, &(0x7f0000000540)=ANY=[@ANYBLOB="7d03cd0ac7bc4d3936067a1aa8cf9cf62e8f8786c4d9f27eff8f7a8b54ad9d6e7201adce1713330dc08f095ce56ac91822b1fe1b144828e79c509e62583a2e195ce0293c8f03b7c34a241f0fa8c0ad8b9540cbf14013269889db960d6c4b4b90c96ea42c3d7bdbe75368ab2209548aaae7f42e50dbf274d0cc860386de"]}, {0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1703b6c36eb6d69ba2783602c200"/23]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42b}}, {0x4d, &(0x7f0000000640)=@string={0x4d, 0x3, "ed90f38618a90672dbde3bf0a9637ac762963f34c62bc61e8ed41fa399ed4690010fe4fa7fc557cf0eee531e91020b1376a43688f89875eb5c76f384d5a94d6f5d344e324c3d01fc4b1942"}}]}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000780)={0x14c, 0x5, 0x0, {0x0, 0x3, 0x8, 0x20}}, 0x188) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r4, 0xb4114000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000800)) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000bc0)={r0, &(0x7f0000000ac0)='-\x00', 0x840, &(0x7f0000000b00)={@_ha_fsid={[0x47a8, 0x9]}, {0x6, 0x152, 0x1, 0x63}}, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)}) writev(r5, &(0x7f0000001f40)=[{&(0x7f0000000c00)="36198ca3e4b0a3c8773b8eb3911c", 0xe}, {&(0x7f0000000c40)="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", 0xfc}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="dfb613775fa372f6bf58fff1fe0fc4ec3b4af33f0134bcead4d5c128dbf1d10785fbc57f972ad5652e4717bf327eec540eb80c9a0b1e642825fea60ae2680271747d33ab27456b5707075e0c43b82888a8a4812fcf090974f1207d9c1e16a9e33e8cf1740373c49f35339716246bd17238926ea3db9ec28da41d2920ad1aea12168fd007ea1f544f79b1605e72cbcac8304ff6f7df4f2968ef9365579f5b4a146ff6a9ba54010eb1c314d64b6bc4c7c1d740552ee0aa23c14706793fe1ea059e4ae95cedba471b722a8e6c260c1b06d0059075716ac5149a82b85f8c917bec853d3536c01655580ec1d2a4ddbaf903f48dc84e2a0fb6e838b1", 0xf9}, {&(0x7f0000001e40)="b3c7f29e716fb9900f891f6a88819a0b7fc038c8320a0f4e6feb74c520e6ce4f6090c8c5d893dbd5b59a454e0eb8da08d1", 0x31}, {0xfffffffffffffffc}, {&(0x7f0000001e80)="335cd6d58a3d9759cae50aee3a77bfa73e70d2123adeb2177858d42dcb7bdea29322ed7e8780a777ebc522a342734718e9e17a581d7331d24900940b56dac0653911164d4c4faa30108763b7647383c47088a1aec5b363", 0x57}, {&(0x7f0000001f00)="b76757c227d673d0018d6f38ecfb8359d7dbd9c3dc71d421a005fab1c862a8b019a8a55439c435abb7b81d7fee4b3a3269e674ebcbaab5708e", 0x39}], 0x8) 769.395458ms ago: executing program 4 (id=951): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/module/zswap/parameters/compressor\x00', 0x2023c2, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) 674.78801ms ago: executing program 3 (id=952): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x9e95752ad8da5319}, 0x800) 655.5917ms ago: executing program 4 (id=953): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 634.492476ms ago: executing program 3 (id=954): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='mtd0/file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='dummy_udc.0', 0xb) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) sendmsg$netlink(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf2508000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="0c001a8008000a00"], 0x2c}], 0x1}, 0x0) 526.357074ms ago: executing program 4 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./config\x00', &(0x7f0000000780)='configfs\x00', 0x0, 0x0) setxattr(&(0x7f0000000000)='./config\x00', &(0x7f0000000040)=@random={'btrfs.', '&:\x00'}, &(0x7f0000000080)='configfs\x00', 0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='usbip-vudc.0', 0xc) 226.979684ms ago: executing program 5 (id=956): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x2}, {0x30, 0xfe, 0x0, 0x1b}, {0x6, 0x4, 0x0, 0xffff0001}]}) open$dir(&(0x7f0000000540)='./file0\x00', 0x40, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="0793d58b33a0bb07a151477a968fe9dd0ec7c4a268f0eb6e16204152ccfb96584ee3937444e2ba65dfd5ce645944640153a4f3ea357182", 0x37}, {&(0x7f0000000040)="0a01eaacd486326602a48848ab7ae13378081749af2608506abd4c001ee48064189b6469a08c8f182ce2ba887772d1298b2d21ac74e6ceef27f80feec0d5a3c1d61eb8c1c069add3607caad91bfd16cadbc6980e1043709997e00dcb689eff7c49cc8f43c1ee892842edd73ced3a03f79061024f3fda1ff5fa9a48ec4bef5706369aacccc9270353da5c541a7f6bb78e6405c6e8", 0x94}, {&(0x7f0000000100)="cf6006c43cf3f8d654a8c5796fe4eebcc3d8b62847b74f3acebfea75838f14d229caaf666b8e4b6300cd230b525f7831779a94ca4aeb8e249dd21049c49f3099347adad26a", 0x45}, {&(0x7f0000000180)="a7f495f0d2874a0477937f8e15ab264f9167c0e63f4de15536037d551b97b4a20c0e3fd9c213a952e36c109dc6ff7f38110d18ac904373082ad5c2a91bccd79a77282015ab454e7dc57c8c6ab399f7883f38d190093b40b27bb3435849c75824585ed9198f28fccbc29e0beb820042e2e2067446011ccf82d7a860f98c81c4e7bf029be40efd688163a8578d2f1c1b9425c8c6e992bf73266a48ad57d45739e8928ceaa185fa5ea9d98ca772677fed521c25e6ac8a82f288b2fbfefb89e8ad78e0eb05e15bd8862e51e4d89661a5f7a4c3cee2e0a050464c679504298de951fa2f480bdc2e7769265576b0393031faf3770662718c0ab85bee", 0xf9}, {&(0x7f0000000280)="ddd58ef3ba597b7a3a46afe33bdb23244eabf21abb646359451e405ee170d7f2de51ce8ef2a3c39c4b21a83269b800ea06b134a43653f67cd407e95df1f99999a16bb9b2dc79aaa8adc74a06ddb5086364226e29e2f1beaffe8954164167e47c5522b018c99105cc2661892445f0f72612aea72ef3bdb81d7d907ba0beadd47c6e696ad6ece4f0211a", 0x89}, {&(0x7f0000000340)="847c31a8a50762f860c719e5933505b8ec21f557ab139c7facc02c2f8a1f4e8b524c0235cf47286273c0ad96156cc84dd0d19b9533", 0x35}, {&(0x7f0000000380)="283bdea76cf430c5e82ea5d71686ff7853a78314f19f481fc631f2a4feffa473ee905e25a18fd96f8f556c4016c8ec498a914b5a1b08975e21efbe9c842088012912b22f3bb40d0b354a23bf09498d1d57bf1f6391378c7f44429f5f17478147c280ddd23d34db033797991fa92e8b9d4edd19472b60f4d2fc181e6b7852143571595e48db4c3961f886c4e48430905685ecc26f48dd617f81b788733e7c1c161d77e29137498ecba9c0f6f9277c71", 0xaf}], 0x7}, 0x0) 0s ago: executing program 5 (id=957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000440)="ebe3a0e9", 0x4}], 0x2, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/81, 0x51}], 0x1, 0x0, 0x8d}, 0x0) kernel console output (not intermixed with test programs): ? lock_acquire+0x115/0x350 [ 257.820113][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.820157][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.820192][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.820234][ T8504] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 257.820275][ T8504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.820320][ T8504] ? rcu_is_watching+0x16/0xb0 [ 257.820351][ T8504] ? trace_kmem_cache_alloc+0x29/0xe0 [ 257.820374][ T8504] ? kvm_arch_vcpu_create+0x3b4/0x8a0 [ 257.820398][ T8504] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 257.820428][ T8504] vzalloc_noprof+0xb2/0xe0 [ 257.820450][ T8504] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 257.820482][ T8504] fpu_alloc_guest_fpstate+0x24/0x410 [ 257.820515][ T8504] kvm_arch_vcpu_create+0x44a/0x8a0 [ 257.820544][ T8504] kvm_vm_ioctl_create_vcpu+0x4f0/0x9f0 [ 257.820579][ T8504] ? __se_sys_ioctl+0x47/0x170 [ 257.820620][ T8504] ? __pfx_kvm_vm_ioctl_create_vcpu+0x10/0x10 [ 257.820668][ T8504] kvm_vm_ioctl+0x442/0xcb0 [ 257.820705][ T8504] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 257.820758][ T8504] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.820794][ T8504] ? tomoyo_path_number_perm+0x219/0x5f0 [ 257.820824][ T8504] ? tomoyo_path_number_perm+0x219/0x5f0 [ 257.820857][ T8504] ? do_vfs_ioctl+0x116f/0x1530 [ 257.820892][ T8504] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 257.820965][ T8504] ? __fget_files+0x2a/0x420 [ 257.820994][ T8504] ? __fget_files+0x2a/0x420 [ 257.821022][ T8504] ? __fget_files+0x2a/0x420 [ 257.821052][ T8504] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.821082][ T8504] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 257.821116][ T8504] __se_sys_ioctl+0xfc/0x170 [ 257.821151][ T8504] do_syscall_64+0x166/0x520 [ 257.821183][ T8504] ? trace_irq_disable+0x3b/0x140 [ 257.821211][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.821236][ T8504] ? clear_bhb_loop+0x70/0xc0 [ 257.821265][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.821296][ T8504] RIP: 0033:0x7feeb139f559 [ 257.821318][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.821338][ T8504] RSP: 002b:00007feeb2294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.821364][ T8504] RAX: ffffffffffffffda RBX: 00007feeb1625fa0 RCX: 00007feeb139f559 [ 257.821381][ T8504] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 257.821396][ T8504] RBP: 00007feeb2294090 R08: 0000000000000000 R09: 0000000000000000 [ 257.821408][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.821419][ T8504] R13: 00007feeb1626038 R14: 00007feeb1625fa0 R15: 00007ffe54d52778 [ 257.821448][ T8504] [ 257.859207][ T8504] syz.5.695: vmalloc error: size 896, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.859517][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz.5.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.859609][ T8504] Tainted: [L]=SOFTLOCKUP [ 257.859632][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 257.859674][ T8504] Call Trace: [ 257.859704][ T8504] [ 257.859729][ T8504] dump_stack_lvl+0xe8/0x150 [ 257.859834][ T8504] warn_alloc+0x24d/0x270 [ 257.859899][ T8504] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.859991][ T8504] ? __pfx_warn_alloc+0x10/0x10 [ 257.860065][ T8504] ? __get_vm_area_node+0x263/0x330 [ 257.860170][ T8504] ? __get_vm_area_node+0x263/0x330 [ 257.860290][ T8504] __vmalloc_node_range_noprof+0x396/0x16f0 [ 257.860386][ T8504] ? lock_acquire+0x115/0x350 [ 257.860469][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.860584][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.860679][ T8504] ? percpu_ref_get_many+0x19/0x140 [ 257.860823][ T8504] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 257.860937][ T8504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.861036][ T8504] ? rcu_is_watching+0x16/0xb0 [ 257.861121][ T8504] ? trace_kmem_cache_alloc+0x29/0xe0 [ 257.861185][ T8504] ? kvm_arch_vcpu_create+0x3b4/0x8a0 [ 257.861256][ T8504] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 257.861344][ T8504] vzalloc_noprof+0xb2/0xe0 [ 257.861408][ T8504] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 257.861493][ T8504] fpu_alloc_guest_fpstate+0x24/0x410 [ 257.861588][ T8504] kvm_arch_vcpu_create+0x44a/0x8a0 [ 257.861665][ T8504] kvm_vm_ioctl_create_vcpu+0x4f0/0x9f0 [ 257.861759][ T8504] ? __se_sys_ioctl+0x47/0x170 [ 257.861882][ T8504] ? __pfx_kvm_vm_ioctl_create_vcpu+0x10/0x10 [ 257.862008][ T8504] kvm_vm_ioctl+0x442/0xcb0 [ 257.862112][ T8504] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 257.862241][ T8504] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.862335][ T8504] ? tomoyo_path_number_perm+0x219/0x5f0 [ 257.862364][ T8504] ? tomoyo_path_number_perm+0x219/0x5f0 [ 257.862395][ T8504] ? do_vfs_ioctl+0x116f/0x1530 [ 257.862454][ T8504] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 257.862680][ T8504] ? __fget_files+0x2a/0x420 [ 257.862756][ T8504] ? __fget_files+0x2a/0x420 [ 257.862843][ T8504] ? __fget_files+0x2a/0x420 [ 257.862928][ T8504] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.863005][ T8504] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 257.863099][ T8504] __se_sys_ioctl+0xfc/0x170 [ 257.863194][ T8504] do_syscall_64+0x166/0x520 [ 257.863283][ T8504] ? trace_irq_disable+0x3b/0x140 [ 257.863367][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.863431][ T8504] ? clear_bhb_loop+0x70/0xc0 [ 257.863506][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.863570][ T8504] RIP: 0033:0x7feeb139f559 [ 257.863634][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.863687][ T8504] RSP: 002b:00007feeb2294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.863751][ T8504] RAX: ffffffffffffffda RBX: 00007feeb1625fa0 RCX: 00007feeb139f559 [ 257.863807][ T8504] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 257.863849][ T8504] RBP: 00007feeb2294090 R08: 0000000000000000 R09: 0000000000000000 [ 257.863891][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.863932][ T8504] R13: 00007feeb1626038 R14: 00007feeb1625fa0 R15: 00007ffe54d52778 [ 257.864051][ T8504] [ 257.952716][ T8504] Mem-Info: [ 257.952772][ T8504] active_anon:6215 inactive_anon:12 isolated_anon:0 [ 257.952772][ T8504] active_file:125 inactive_file:52058 isolated_file:0 [ 257.952772][ T8504] unevictable:0 dirty:103 writeback:0 [ 257.952772][ T8504] slab_reclaimable:10998 slab_unreclaimable:99369 [ 257.952772][ T8504] mapped:25440 shmem:530 pagetables:1333 [ 257.952772][ T8504] sec_pagetables:0 bounce:0 [ 257.952772][ T8504] kernel_misc_reclaimable:0 [ 257.952772][ T8504] free:1291365 free_pcp:18638 free_cma:0 [ 257.952971][ T8504] Node 0 active_anon:24860kB inactive_anon:48kB active_file:500kB inactive_file:208036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101760kB dirty:412kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12764kB pagetables:5192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.953174][ T8504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.953295][ T8504] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.953427][ T8504] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 257.953667][ T8504] Node 0 DMA32 free:1211732kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24860kB inactive_anon:48kB active_file:500kB inactive_file:208036kB unevictable:0kB writepending:412kB zspages:0kB present:3129332kB managed:2519536kB mlocked:0kB bounce:0kB free_pcp:73616kB local_pcp:52652kB free_cma:0kB [ 257.953890][ T8504] lowmem_reserve[]: 0 0 1 1 1 [ 257.960487][ T8504] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 257.973128][ T8504] lowmem_reserve[]: 0 0 0 0 0 [ 257.973322][ T8504] Node 1 Normal free:3938368kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:932kB local_pcp:932kB free_cma:0kB [ 257.973658][ T8504] lowmem_reserve[]: 0 0 0 0 0 [ 257.973781][ T8504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.999126][ T8504] Node 0 DMA32: 1543*4kB (UM) 311*8kB (UME) 680*16kB (UME) 586*32kB (UME) 594*64kB (UME) 334*128kB (UME) 170*256kB (ME) 77*512kB (UME) 24*1024kB (ME) 1*2048kB (M) 240*4096kB (UM) = 1211668kB [ 257.999670][ T8504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 258.000025][ T8504] Node 1 Normal: 4*4kB (UM) 2*8kB (U) 8*16kB (U) 5*32kB (U) 2*64kB (U) 1*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 959*4096kB (M) = 3938368kB [ 258.047105][ T8504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.047168][ T8504] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 258.047220][ T8504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.047274][ T8504] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 258.047326][ T8504] 52709 total pagecache pages [ 258.047350][ T8504] 0 pages in swap cache [ 258.047372][ T8504] Free swap = 124996kB [ 258.047401][ T8504] Total swap = 124996kB [ 258.047498][ T8504] 2097051 pages RAM [ 258.047522][ T8504] 0 pages HighMem/MovableOnly [ 258.047544][ T8504] 435221 pages reserved [ 258.047566][ T8504] 0 pages cma reserved [ 258.047601][ T8504] kvm: failed to allocate vcpu's fpu [ 258.792744][ T5789] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 259.012686][ T5789] usb 5-1: New USB device found: idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 259.034382][ T5789] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 259.034414][ T5789] usb 5-1: config 0 has no interface number 0 [ 259.034459][ T5789] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 259.034490][ T5789] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 259.034533][ T5789] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 259.034561][ T5789] usb 5-1: config 0 interface 2 has no altsetting 0 [ 259.086138][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.086202][ T5789] usb 5-1: Product: syz [ 259.086248][ T5789] usb 5-1: Manufacturer: syz [ 259.086295][ T5789] usb 5-1: SerialNumber: syz [ 259.104430][ T5789] usb 5-1: config 0 descriptor?? [ 259.108736][ T8508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.109165][ T8508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.149036][ T5789] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.164567][ T8511] syzkaller0: entered promiscuous mode [ 259.164591][ T8511] syzkaller0: entered allmulticast mode [ 259.277257][ T8516] netlink: 'syz.5.698': attribute type 10 has an invalid length. [ 259.301705][ T5649] Bluetooth: hci3: command 0x0c1a tx timeout [ 259.408500][ T8516] veth0_vlan: entered allmulticast mode [ 259.468093][ T8516] team0: Device veth0_vlan failed to register rx_handler [ 259.499518][ T8524] FAULT_INJECTION: forcing a failure. [ 259.499518][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.499557][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.2.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.499589][ T8524] Tainted: [L]=SOFTLOCKUP [ 259.499598][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.499623][ T8524] Call Trace: [ 259.499631][ T8524] [ 259.499642][ T8524] dump_stack_lvl+0xe8/0x150 [ 259.499683][ T8524] should_fail_ex+0x3eb/0x540 [ 259.499722][ T8524] strncpy_from_user+0x36/0x2c0 [ 259.499761][ T8524] do_getname+0x77/0x250 [ 259.499788][ T8524] do_sys_openat2+0xce/0x200 [ 259.499810][ T8524] ? __se_sys_futex+0x3a8/0x450 [ 259.499847][ T8524] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.499876][ T8524] ? rcu_is_watching+0x16/0xb0 [ 259.499913][ T8524] __x64_sys_openat+0x138/0x170 [ 259.499939][ T8524] do_syscall_64+0x166/0x520 [ 259.499969][ T8524] ? trace_irq_disable+0x3b/0x140 [ 259.499999][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.500024][ T8524] ? clear_bhb_loop+0x70/0xc0 [ 259.500053][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.500076][ T8524] RIP: 0033:0x7efe4199f559 [ 259.500098][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.500120][ T8524] RSP: 002b:00007efe3fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.500145][ T8524] RAX: ffffffffffffffda RBX: 00007efe41c25fa0 RCX: 00007efe4199f559 [ 259.500163][ T8524] RDX: 0000000000020000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 259.500180][ T8524] RBP: 00007efe41a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 259.500195][ T8524] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 259.500209][ T8524] R13: 00007efe41c26038 R14: 00007efe41c25fa0 R15: 00007ffedda871e8 [ 259.500246][ T8524] [ 259.764228][ T8530] netlink: 52 bytes leftover after parsing attributes in process `syz.4.694'. [ 259.823454][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.855393][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.884674][ T8536] netlink: 52 bytes leftover after parsing attributes in process `syz.4.694'. [ 260.166911][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.167422][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.392533][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 260.541675][ T10] usb 6-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 260.543073][ T10] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 260.543104][ T10] usb 6-1: config 0 has no interface number 0 [ 260.543145][ T10] usb 6-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 31 [ 260.543174][ T10] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 260.543192][ T10] usb 6-1: config 0 interface 238 has no altsetting 0 [ 260.545399][ T10] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 260.545428][ T10] usb 6-1: Product: syz [ 260.545444][ T10] usb 6-1: Manufacturer: syz [ 260.545459][ T10] usb 6-1: SerialNumber: syz [ 260.547961][ T10] usb 6-1: config 0 descriptor?? [ 260.548869][ T8542] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 260.654174][ T10] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 260.669107][ T27] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 260.810886][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 260.811660][ T27] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.812732][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 260.812789][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.812814][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.812842][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.812869][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.812914][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.875993][ T10] usb 6-1: USB disconnect, device number 11 [ 260.965061][ T8564] device-mapper: table: 248:7: integrity: Unknown tag size (-EINVAL) [ 260.965098][ T8564] device-mapper: ioctl: error adding target to table [ 260.987169][ T8564] overlay: Unknown parameter 'euid<00000000000000000000' [ 261.024961][ T8564] loop5: detected capacity change from 0 to 7 [ 261.039391][ T8564] Dev loop5: unable to read RDB block 7 [ 261.039438][ T8564] loop5: unable to read partition table [ 261.039676][ T8564] loop5: partition table beyond EOD, truncated [ 261.039696][ T8564] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.235385][ T8557] syz.2.707: attempt to access beyond end of device [ 261.235385][ T8557] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 261.269419][ T8557] device-mapper: table: 248:8: integrity: Error reading superblock (-EIO) [ 261.269449][ T8557] device-mapper: ioctl: error adding target to table [ 261.314163][ T8576] sg_write: data in/out 399324/22 bytes for SCSI command 0x0-- guessing data in; [ 261.314163][ T8576] program syz.3.713 not setting count and/or reply_len properly [ 261.354159][ T8557] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.357112][ T27] usb 3-1: USB disconnect, device number 48 [ 261.383224][ T5649] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.494572][ T5726] usb 5-1: USB disconnect, device number 21 [ 261.554472][ T8578] null_blk: disk nullb1 created [ 261.581253][ T5372] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 261.608729][ T8580] FAULT_INJECTION: forcing a failure. [ 261.608729][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 261.608771][ T8580] CPU: 1 UID: 0 PID: 8580 Comm: syz.4.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.608794][ T8580] Tainted: [L]=SOFTLOCKUP [ 261.608801][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.608812][ T8580] Call Trace: [ 261.608819][ T8580] [ 261.608826][ T8580] dump_stack_lvl+0xe8/0x150 [ 261.608858][ T8580] should_fail_ex+0x3eb/0x540 [ 261.608886][ T8580] should_failslab+0xa8/0x100 [ 261.608909][ T8580] ? locks_get_lock_context+0x95/0x5c0 [ 261.608935][ T8580] kmem_cache_alloc_noprof+0x9c/0x600 [ 261.608954][ T8580] ? locks_get_lock_context+0x95/0x5c0 [ 261.608983][ T8580] locks_get_lock_context+0x95/0x5c0 [ 261.609008][ T8580] ? aa_file_perm+0x18b/0x15f0 [ 261.609035][ T8580] flock_lock_inode+0xfe/0x1310 [ 261.609063][ T8580] ? __pfx_futex_wake_mark+0x10/0x10 [ 261.609086][ T8580] ? __pfx_flock_lock_inode+0x10/0x10 [ 261.609119][ T8580] locks_lock_inode_wait+0x10f/0x450 [ 261.609144][ T8580] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 261.609176][ T8580] ? apparmor_file_lock+0x21c/0x2d0 [ 261.609200][ T8580] __se_sys_flock+0x4c9/0x650 [ 261.609225][ T8580] ? __pfx___se_sys_flock+0x10/0x10 [ 261.609276][ T8580] do_syscall_64+0x166/0x520 [ 261.609298][ T8580] ? trace_irq_disable+0x3b/0x140 [ 261.609319][ T8580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.609342][ T8580] ? clear_bhb_loop+0x70/0xc0 [ 261.609363][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.609380][ T8580] RIP: 0033:0x7f986159f559 [ 261.609396][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.609411][ T8580] RSP: 002b:00007f9862445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 261.609429][ T8580] RAX: ffffffffffffffda RBX: 00007f9861825fa0 RCX: 00007f986159f559 [ 261.609442][ T8580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 261.609452][ T8580] RBP: 00007f9861636b20 R08: 0000000000000000 R09: 0000000000000000 [ 261.609462][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.609472][ T8580] R13: 00007f9861826038 R14: 00007f9861825fa0 R15: 00007ffeff83eb08 [ 261.609497][ T8580] [ 261.643675][ T8580] macvlan1: entered allmulticast mode [ 261.658533][ T8580] veth1_vlan: entered allmulticast mode [ 261.658920][ T8580] macvlan1: entered promiscuous mode [ 261.802454][ T5372] usb 4-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 261.828449][ T5372] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.828557][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.910638][ T5372] usb 4-1: sample width is not 24 bits [ 262.080250][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'. [ 262.119062][ T32] usb 4-1: USB disconnect, device number 50 [ 262.144970][ T8589] fuse: Unknown parameter 'rootmode‚90000000000000000040000' [ 262.205672][ T8591] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 262.320948][ T27] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 262.370985][ T5726] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 262.471664][ T27] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 262.472969][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.473005][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.473055][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 262.473075][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 262.475203][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.475231][ T27] usb 3-1: Product: syz [ 262.475246][ T27] usb 3-1: Manufacturer: syz [ 262.475274][ T27] usb 3-1: SerialNumber: syz [ 262.478124][ T8587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 262.526375][ T5726] usb 5-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 262.548555][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.548585][ T5726] usb 5-1: Product: syz [ 262.548601][ T5726] usb 5-1: Manufacturer: syz [ 262.548618][ T5726] usb 5-1: SerialNumber: syz [ 262.597154][ T5726] usb 5-1: config 0 descriptor?? [ 262.679887][ T8587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 262.680025][ T8587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 262.737776][ T8596] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 262.753197][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.802430][ T5726] usb 5-1: ignoring: probably an ADSL modem [ 263.207276][ T5726] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 263.231554][ T5726] usb 5-1: USB disconnect, device number 22 [ 263.284607][ T8587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 263.284733][ T8587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 263.485831][ T27] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 263.485864][ T27] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 263.485881][ T27] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 263.790932][ T5726] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 263.798368][ T8606] usb usb9: usbfs: process 8606 (syz.4.726) did not claim interface 30 before use [ 263.941390][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 263.942838][ T5726] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.944551][ T5726] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 263.944649][ T5726] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.944680][ T5726] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.944711][ T5726] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.944741][ T5726] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.944822][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.021083][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 264.127984][ T8610] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 264.451885][ T8618] FAULT_INJECTION: forcing a failure. [ 264.451885][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 264.451924][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.5.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.451957][ T8618] Tainted: [L]=SOFTLOCKUP [ 264.451966][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 264.451981][ T8618] Call Trace: [ 264.451990][ T8618] [ 264.452000][ T8618] dump_stack_lvl+0xe8/0x150 [ 264.452044][ T8618] should_fail_ex+0x3eb/0x540 [ 264.452105][ T8618] should_failslab+0xa8/0x100 [ 264.452142][ T8618] __kmalloc_cache_noprof+0x9e/0x600 [ 264.452169][ T8618] ? ip_set_create+0x38f/0x1a50 [ 264.452194][ T8618] ? ip_set_create+0x38f/0x1a50 [ 264.452229][ T8618] ip_set_create+0x38f/0x1a50 [ 264.452260][ T8618] ? rcu_is_watching+0x16/0xb0 [ 264.452300][ T8618] ? __pfx_ip_set_create+0x10/0x10 [ 264.452332][ T8618] ? lock_acquire+0x115/0x350 [ 264.452399][ T8618] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 264.452439][ T8618] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 264.452496][ T8618] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 264.452571][ T8618] ? hook_capable+0x1c3/0x5e0 [ 264.452616][ T8618] netlink_rcv_skb+0x226/0x4a0 [ 264.452656][ T8618] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 264.452694][ T8618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.452745][ T8618] ? bpf_lsm_capable+0x9/0x20 [ 264.452778][ T8618] ? security_capable+0x7e/0x2c0 [ 264.452819][ T8618] nfnetlink_rcv+0x2b9/0x28c0 [ 264.452862][ T8618] ? __dev_queue_xmit+0x29b/0x3920 [ 264.452899][ T8618] ? __local_bh_enable_ip+0xd6/0x140 [ 264.452929][ T8618] ? lockdep_hardirqs_on+0x7b/0x110 [ 264.452963][ T8618] ? __dev_queue_xmit+0x29b/0x3920 [ 264.452993][ T8618] ? __local_bh_enable_ip+0xd6/0x140 [ 264.453022][ T8618] ? __dev_queue_xmit+0x29b/0x3920 [ 264.453053][ T8618] ? __dev_queue_xmit+0x1efb/0x3920 [ 264.453092][ T8618] ? __dev_queue_xmit+0x29b/0x3920 [ 264.453132][ T8618] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 264.453178][ T8618] ? __pfx___dev_queue_xmit+0x10/0x10 [ 264.453224][ T8618] ? __copy_skb_header+0xa3/0x4a0 [ 264.453256][ T8618] ? __asan_memcpy+0x40/0x70 [ 264.453280][ T8618] ? __skb_clone+0x5c/0x760 [ 264.453323][ T8618] ? __skb_clone+0x4a2/0x760 [ 264.453363][ T8618] ? skb_clone+0x246/0x3a0 [ 264.453398][ T8618] ? __netlink_deliver_tap+0x681/0x6e0 [ 264.453420][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.453451][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.453474][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.453505][ T8618] netlink_unicast+0x8ef/0xa80 [ 264.453559][ T8618] netlink_sendmsg+0x7f0/0xb20 [ 264.453591][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.453619][ T8618] ? aa_sock_msg_perm+0x144/0x210 [ 264.453659][ T8618] ? apparmor_socket_sendmsg+0x98/0x360 [ 264.453693][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.453715][ T8618] sock_sendmsg_nosec+0x14e/0x190 [ 264.453754][ T8618] ____sys_sendmsg+0x54e/0x850 [ 264.453791][ T8618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.453832][ T8618] ? import_iovec+0x73/0xa0 [ 264.453872][ T8618] ___sys_sendmsg+0x2a6/0x360 [ 264.453900][ T8618] ? __lock_acquire+0x747/0x2de0 [ 264.453933][ T8618] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.453968][ T8618] ? futex_wait+0x2a2/0x390 [ 264.454029][ T8618] ? __fget_files+0x3a2/0x420 [ 264.454055][ T8618] ? __fget_files+0x2a/0x420 [ 264.454095][ T8618] __x64_sys_sendmsg+0x1b1/0x290 [ 264.454128][ T8618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.454182][ T8618] do_syscall_64+0x166/0x520 [ 264.454215][ T8618] ? trace_irq_disable+0x3b/0x140 [ 264.454244][ T8618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.454270][ T8618] ? clear_bhb_loop+0x70/0xc0 [ 264.454300][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.454332][ T8618] RIP: 0033:0x7feeb139f559 [ 264.454355][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.454379][ T8618] RSP: 002b:00007feeb2294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.454406][ T8618] RAX: ffffffffffffffda RBX: 00007feeb1625fa0 RCX: 00007feeb139f559 [ 264.454425][ T8618] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000005 [ 264.454440][ T8618] RBP: 00007feeb1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 264.454456][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.454471][ T8618] R13: 00007feeb1626038 R14: 00007feeb1625fa0 R15: 00007ffe54d52778 [ 264.454510][ T8618] [ 264.456632][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 264.456692][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 264.459471][ T8604] syz.3.725: attempt to access beyond end of device [ 264.459471][ T8604] ram7: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 264.913206][ T8604] device-mapper: table: 248:6: integrity: Error reading superblock (-EIO) [ 264.913280][ T8604] device-mapper: ioctl: error adding target to table [ 264.969966][ T8624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.015129][ T8604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 265.025225][ T5726] usb 4-1: USB disconnect, device number 51 [ 265.074569][ T27] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 265.138361][ T27] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 265.207771][ T27] usb 3-1: USB disconnect, device number 49 [ 265.215240][ T27] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 265.336744][ T8633] 8021q: VLANs not supported on sit0 [ 265.661436][ T27] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 265.811660][ T27] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 265.812904][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 265.812938][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 265.812979][ T27] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.815019][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.815039][ T27] usb 3-1: Product: syz [ 265.815050][ T27] usb 3-1: Manufacturer: syz [ 265.815061][ T27] usb 3-1: SerialNumber: syz [ 265.818796][ T8631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.818950][ T8631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.846000][ T27] ims_pcu 3-1:1.1: Control endpoint is not INTERRUPT IN [ 265.846158][ T27] ims_pcu 3-1:1.1: probe with driver ims_pcu failed with error -22 [ 265.861532][ T32] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 266.014054][ T32] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 266.017642][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.017672][ T32] usb 4-1: Product: syz [ 266.017689][ T32] usb 4-1: Manufacturer: syz [ 266.017713][ T32] usb 4-1: SerialNumber: syz [ 266.027204][ T32] usb 4-1: config 0 descriptor?? [ 266.075056][ T5726] usb 3-1: USB disconnect, device number 50 [ 266.118109][ T8642] FAULT_INJECTION: forcing a failure. [ 266.118109][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 266.118146][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.4.736 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.118177][ T8642] Tainted: [L]=SOFTLOCKUP [ 266.118187][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 266.118201][ T8642] Call Trace: [ 266.118211][ T8642] [ 266.118221][ T8642] dump_stack_lvl+0xe8/0x150 [ 266.118263][ T8642] should_fail_ex+0x3eb/0x540 [ 266.118303][ T8642] should_failslab+0xa8/0x100 [ 266.118336][ T8642] ? jbd2__journal_start+0x145/0x5d0 [ 266.118364][ T8642] kmem_cache_alloc_noprof+0x9c/0x600 [ 266.118392][ T8642] ? jbd2__journal_start+0x145/0x5d0 [ 266.118426][ T8642] jbd2__journal_start+0x145/0x5d0 [ 266.118460][ T8642] __ext4_journal_start_sb+0x205/0x780 [ 266.118503][ T8642] __ext4_new_inode+0x1310/0x3ed0 [ 266.118552][ T8642] ? __asan_memset+0x22/0x50 [ 266.118584][ T8642] ? __pfx___ext4_new_inode+0x10/0x10 [ 266.118621][ T8642] ? __pfx___dquot_initialize+0x10/0x10 [ 266.118651][ T8642] ? d_splice_alias_ops+0x11c/0x440 [ 266.118683][ T8642] ? d_splice_alias+0x12/0x30 [ 266.118715][ T8642] ? ext4_lookup+0x302/0x710 [ 266.118748][ T8642] ext4_create+0x237/0x480 [ 266.118792][ T8642] ? __pfx_ext4_create+0x10/0x10 [ 266.118826][ T8642] ? bpf_lsm_inode_create+0x9/0x20 [ 266.118850][ T8642] ? security_inode_create+0xc3/0x340 [ 266.118890][ T8642] lookup_open+0xedc/0x1970 [ 266.118960][ T8642] path_openat+0x70c/0x20f0 [ 266.119021][ T8642] do_file_open+0x23e/0x4a0 [ 266.119060][ T8642] ? __pfx_do_file_open+0x10/0x10 [ 266.119116][ T8642] ? _raw_spin_unlock+0x28/0x50 [ 266.119145][ T8642] ? alloc_fd+0x6af/0x760 [ 266.119184][ T8642] do_sys_openat2+0x115/0x200 [ 266.119212][ T8642] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.119237][ T8642] ? ksys_write+0x242/0x270 [ 266.119268][ T8642] ? __pfx_ksys_write+0x10/0x10 [ 266.119303][ T8642] __x64_sys_open+0x11e/0x150 [ 266.119332][ T8642] do_syscall_64+0x166/0x520 [ 266.119363][ T8642] ? trace_irq_disable+0x3b/0x140 [ 266.119392][ T8642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.119416][ T8642] ? clear_bhb_loop+0x70/0xc0 [ 266.119446][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.119471][ T8642] RIP: 0033:0x7f986159f559 [ 266.119493][ T8642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.119513][ T8642] RSP: 002b:00007f9862445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 266.119538][ T8642] RAX: ffffffffffffffda RBX: 00007f9861825fa0 RCX: 00007f986159f559 [ 266.119557][ T8642] RDX: 0000000000000010 RSI: 00000000001c527e RDI: 0000200000000040 [ 266.119573][ T8642] RBP: 00007f9862445090 R08: 0000000000000000 R09: 0000000000000000 [ 266.119588][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.119601][ T8642] R13: 00007f9861826038 R14: 00007f9861825fa0 R15: 00007ffeff83eb08 [ 266.119638][ T8642] [ 266.119762][ T8642] EXT4-fs error (device sda1) in __ext4_new_inode:1096: Out of memory [ 266.475971][ T32] usb 4-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 266.678996][ T32] usb 4-1: Read permanent extended address 00:00:00:00:00:00:00:cf from device [ 266.679028][ T32] usb 4-1: atusb_probe: initialization failed, error = -524 [ 266.679252][ T32] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 266.888998][ T8640] netlink: 'syz.3.735': attribute type 15 has an invalid length. [ 266.889018][ T8640] netlink: 666 bytes leftover after parsing attributes in process `syz.3.735'. [ 266.914285][ T32] usb 4-1: USB disconnect, device number 52 [ 267.200889][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 267.350917][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 267.351671][ T27] usb 5-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 267.354871][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.354902][ T27] usb 5-1: Product: syz [ 267.354919][ T27] usb 5-1: Manufacturer: syz [ 267.354931][ T27] usb 5-1: SerialNumber: syz [ 267.357120][ T27] usb 5-1: config 0 descriptor?? [ 267.367069][ T27] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 267.426746][ T8640] syz.3.735 (8640) used greatest stack depth: 12224 bytes left [ 267.532825][ T8661] comedi: No check for data length of config insn id 3 is implemented [ 267.532841][ T8661] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 267.532853][ T8661] comedi: Assuming n=15 is correct [ 267.541594][ T55] Bluetooth: hci4: command 0x1003 tx timeout [ 267.541706][ T5649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.591252][ T27] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 267.800637][ T8658] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.740'. [ 268.080937][ T5726] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 268.168554][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.186212][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.230883][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 268.231687][ T5726] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.232687][ T5726] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 268.232728][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.232747][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.232767][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.232788][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.232823][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.697265][ T8670] syz.2.743: attempt to access beyond end of device [ 268.697265][ T8670] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 268.728897][ T8670] device-mapper: table: 248:8: integrity: Error reading superblock (-EIO) [ 268.728922][ T8670] device-mapper: ioctl: error adding target to table [ 268.847972][ T5372] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 268.899642][ T8670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.910540][ T11] usb 3-1: USB disconnect, device number 51 [ 269.011830][ T5372] usb 4-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 269.013087][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.234832][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.235607][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.243600][ T5372] dln2 4-1:1.0: USB write failed: -110 [ 269.244664][ T5372] dln2 4-1:1.0: failed to initialize hardware [ 269.252381][ T5372] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 269.291029][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 269.440986][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 269.451538][ T10] usb 6-1: New USB device found: idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 269.452772][ T10] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 269.452801][ T10] usb 6-1: config 0 has no interface number 0 [ 269.452846][ T10] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 269.452875][ T10] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 269.455241][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.455270][ T10] usb 6-1: Product: syz [ 269.455286][ T10] usb 6-1: Manufacturer: syz [ 269.455303][ T10] usb 6-1: SerialNumber: syz [ 269.459377][ T10] usb 6-1: config 0 descriptor?? [ 269.536746][ T10] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 269.538993][ T10] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 269.855057][ T11] usb 5-1: USB disconnect, device number 23 [ 270.279215][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 270.828396][ T11] usb 6-1: USB disconnect, device number 12 [ 270.844143][ T11] cypress_m8 6-1:0.35: device disconnected [ 270.895730][ T8731] dvmrp24: entered allmulticast mode [ 271.647095][ T11] usb 4-1: USB disconnect, device number 53 [ 271.971736][ T8755] FAULT_INJECTION: forcing a failure. [ 271.971736][ T8755] name failslab, interval 1, probability 0, space 0, times 0 [ 271.971776][ T8755] CPU: 0 UID: 0 PID: 8755 Comm: syz.2.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.971817][ T8755] Tainted: [L]=SOFTLOCKUP [ 271.971827][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 271.971848][ T8755] Call Trace: [ 271.971859][ T8755] [ 271.971871][ T8755] dump_stack_lvl+0xe8/0x150 [ 271.971911][ T8755] should_fail_ex+0x3eb/0x540 [ 271.971958][ T8755] should_failslab+0xa8/0x100 [ 271.971995][ T8755] __kmalloc_noprof+0xf9/0x710 [ 271.972023][ T8755] ? down_write_nested+0x16d/0x200 [ 271.972057][ T8755] ? security_sb_alloc+0x48/0x310 [ 271.972088][ T8755] ? security_sb_alloc+0x48/0x310 [ 271.972128][ T8755] security_sb_alloc+0x48/0x310 [ 271.972163][ T8755] sget_fc+0x9d7/0x1a60 [ 271.972184][ T8755] ? __pfx_super_s_dev_test+0x10/0x10 [ 271.972215][ T8755] ? __pfx_super_s_dev_set+0x10/0x10 [ 271.972240][ T8755] ? __pfx_sget_fc+0x10/0x10 [ 271.972262][ T8755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.972304][ T8755] sget_dev+0xab/0xf0 [ 271.972336][ T8755] ? __pfx_sget_dev+0x10/0x10 [ 271.972363][ T8755] ? get_mtd_device+0x200/0x240 [ 271.972392][ T8755] ? __pfx_get_mtd_device+0x10/0x10 [ 271.972429][ T8755] mtd_get_sb+0x51/0x420 [ 271.972463][ T8755] ? __pfx_jffs2_fill_super+0x10/0x10 [ 271.972495][ T8755] ? __pfx_jffs2_fill_super+0x10/0x10 [ 271.972528][ T8755] get_tree_mtd+0x597/0x7d0 [ 271.972565][ T8755] ? __pfx_jffs2_fill_super+0x10/0x10 [ 271.972595][ T8755] ? __pfx_get_tree_mtd+0x10/0x10 [ 271.972644][ T8755] vfs_get_tree+0x92/0x2a0 [ 271.972687][ T8755] do_new_mount+0x325/0xb00 [ 271.972719][ T8755] ? __pfx_do_new_mount+0x10/0x10 [ 271.972748][ T8755] ? ns_capable+0x84/0xe0 [ 271.972781][ T8755] ? path_mount+0x647/0x1050 [ 271.972811][ T8755] ? user_path_at+0xd4/0x160 [ 271.972842][ T8755] __se_sys_mount+0x31d/0x420 [ 271.972875][ T8755] ? __pfx___se_sys_mount+0x10/0x10 [ 271.972907][ T8755] ? __x64_sys_mount+0x20/0xc0 [ 271.972936][ T8755] do_syscall_64+0x166/0x520 [ 271.972964][ T8755] ? trace_irq_disable+0x3b/0x140 [ 271.972988][ T8755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.973008][ T8755] ? clear_bhb_loop+0x70/0xc0 [ 271.973031][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.973050][ T8755] RIP: 0033:0x7efe4199f559 [ 271.973069][ T8755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.973086][ T8755] RSP: 002b:00007efe3fbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.973108][ T8755] RAX: ffffffffffffffda RBX: 00007efe41c25fa0 RCX: 00007efe4199f559 [ 271.973122][ T8755] RDX: 0000200000000780 RSI: 0000200000000740 RDI: 0000200000000700 [ 271.973135][ T8755] RBP: 00007efe41a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 271.973147][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.973159][ T8755] R13: 00007efe41c26038 R14: 00007efe41c25fa0 R15: 00007ffedda871e8 [ 271.973190][ T8755] [ 272.211549][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 272.212882][ T11] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 272.362880][ T10] usb 3-1: device descriptor read/64, error -71 [ 272.394824][ T11] usb 5-1: not running at top speed; connect to a high speed hub [ 272.394868][ T11] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 272.398085][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 272.398141][ T11] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 272.407553][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.407657][ T11] usb 5-1: Product: К [ 272.407706][ T11] usb 5-1: Manufacturer: à – [ 272.407763][ T11] usb 5-1: SerialNumber: 궬倄憸ⱑⷪ篼㑕修î é­»å¾¸ì¡¡ì€¥æ…⊭럻ꄯ쒳关뇯ë®é¾–춾㊅䴨黳ê©ë¹¥å†˜â‹®ê¶´â¹„诈â›æ¨ƒë¤²á°´é—硵꽦⛙蚎赲㧅䛉㴮计êŒá¿é«‘î®á¿“牒襭ђ艅갲㟹愦ᮌ㘃贳魶๥澦咽⧊俰쑻竀┊ㆎ뼌颒ǕḼí˜î•“癧䟓ꖠ岣縛ᛄ婾ᩒ㷯갤꤂楿㪷讋ﷳ蹼꧞짺㈕꫑ޜ኷蒘刄Ȼ無â╹ꉓᯡ [ 272.503878][ T8753] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.641645][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 272.727623][ T11] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 272.727685][ T11] cdc_ncm 5-1:1.0: bind() failure [ 272.757926][ T11] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 272.757980][ T11] cdc_ncm 5-1:1.1: bind() failure [ 272.776420][ T10] usb 3-1: device descriptor read/64, error -71 [ 272.793388][ T11] usb 5-1: USB disconnect, device number 24 [ 272.883240][ T10] usb usb3-port1: attempt power cycle [ 273.221383][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 273.241618][ T10] usb 3-1: device descriptor read/8, error -71 [ 273.482025][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 273.502504][ T10] usb 3-1: device descriptor read/8, error -71 [ 273.611376][ T10] usb usb3-port1: unable to enumerate USB device [ 273.801001][ T6969] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 273.950880][ T6969] usb 5-1: Using ep0 maxpacket: 8 [ 273.951773][ T6969] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.953506][ T6969] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 273.953559][ T6969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.953583][ T6969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.953613][ T6969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.953632][ T6969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.953663][ T6969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.254576][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.255037][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.257770][ T6969] usb 5-1: usb_control_msg returned -32 [ 274.257822][ T6969] usbtmc 5-1:16.0: can't read capabilities [ 274.481000][ T5726] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 274.633298][ T5726] usb 4-1: New USB device found: idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 274.634757][ T5726] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 274.634777][ T5726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.634792][ T5726] usb 4-1: config 0 has no interface number 0 [ 274.634822][ T5726] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 274.634842][ T5726] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.634862][ T5726] usb 4-1: config 0 interface 2 has no altsetting 0 [ 274.636989][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.637018][ T5726] usb 4-1: Product: syz [ 274.637041][ T5726] usb 4-1: Manufacturer: syz [ 274.637053][ T5726] usb 4-1: SerialNumber: syz [ 274.639228][ T5726] usb 4-1: config 0 descriptor?? [ 274.639954][ T8796] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 274.735237][ T5726] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.749035][ T5726] usb 4-1: invalid MIDI in EP 0 [ 274.761217][ T8799] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 274.851522][ T8796] netlink: 260 bytes leftover after parsing attributes in process `syz.3.777'. [ 274.944407][ T32] usb 5-1: USB disconnect, device number 25 [ 275.058262][ T5726] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 275.072109][ T5726] usb 4-1: USB disconnect, device number 54 [ 275.126675][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.500873][ T5726] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 275.554237][ T8816] binder: Read failure Err(EAGAIN) in pid:319 [ 275.674817][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 275.675564][ T5726] usb 6-1: New USB device found: idVendor=0403, idProduct=97c1, bcdDevice=0.00 [ 275.676595][ T5726] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 275.676645][ T5726] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.676677][ T5726] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 275.676706][ T5726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 275.676741][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.699252][ T5726] usb 6-1: config 0 descriptor?? [ 275.811387][ T11] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 275.963681][ T11] usb 4-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 275.982407][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.982439][ T11] usb 4-1: Product: syz [ 275.982456][ T11] usb 4-1: Manufacturer: syz [ 275.982473][ T11] usb 4-1: SerialNumber: syz [ 276.004847][ T11] usb 4-1: config 0 descriptor?? [ 276.154200][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 276.157800][ T5726] usbhid 6-1:0.0: can't add hid device: -71 [ 276.157934][ T5726] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 276.174321][ T5726] usb 6-1: USB disconnect, device number 13 [ 276.224735][ T11] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 276.239885][ T11] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 276.254163][ T11] usb 4-1: USB disconnect, device number 55 [ 276.390938][ T27] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 276.391225][ T32] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 276.532524][ T27] usb 3-1: device descriptor read/64, error -71 [ 276.560876][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 276.561613][ T32] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 276.562594][ T32] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 276.562621][ T32] usb 5-1: config 179 has no interface number 0 [ 276.562663][ T32] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 276.562683][ T32] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 276.562703][ T32] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.562722][ T32] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 276.562742][ T32] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 276.562773][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.568789][ T8836] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 276.821640][ T27] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 276.951013][ T27] usb 3-1: device descriptor read/64, error -71 [ 276.975114][ T8856] FAULT_INJECTION: forcing a failure. [ 276.975114][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 276.975151][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.3.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.975183][ T8856] Tainted: [L]=SOFTLOCKUP [ 276.975192][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 276.975206][ T8856] Call Trace: [ 276.975215][ T8856] [ 276.975226][ T8856] dump_stack_lvl+0xe8/0x150 [ 276.975265][ T8856] should_fail_ex+0x3eb/0x540 [ 276.975315][ T8856] should_failslab+0xa8/0x100 [ 276.975351][ T8856] __kmalloc_noprof+0xf9/0x710 [ 276.975375][ T8856] ? rcu_is_watching+0x16/0xb0 [ 276.975407][ T8856] ? tomoyo_realpath_from_path+0xef/0x640 [ 276.975441][ T8856] ? tomoyo_realpath_from_path+0xef/0x640 [ 276.975483][ T8856] tomoyo_realpath_from_path+0xef/0x640 [ 276.975530][ T8856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 276.975560][ T8856] tomoyo_path_number_perm+0x246/0x5f0 [ 276.975593][ T8856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.975621][ T8856] ? __lock_acquire+0x747/0x2de0 [ 276.975689][ T8856] ? __fget_files+0x2a/0x420 [ 276.975719][ T8856] ? __fget_files+0x2a/0x420 [ 276.975746][ T8856] ? __fget_files+0x2a/0x420 [ 276.975778][ T8856] security_file_ioctl+0xc3/0x2a0 [ 276.975808][ T8856] __se_sys_ioctl+0x47/0x170 [ 276.975844][ T8856] do_syscall_64+0x166/0x520 [ 276.975875][ T8856] ? trace_irq_disable+0x3b/0x140 [ 276.975904][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.975929][ T8856] ? clear_bhb_loop+0x70/0xc0 [ 276.975958][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.975982][ T8856] RIP: 0033:0x7f65b979f559 [ 276.976004][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.976024][ T8856] RSP: 002b:00007f65ba636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.976049][ T8856] RAX: ffffffffffffffda RBX: 00007f65b9a25fa0 RCX: 00007f65b979f559 [ 276.976066][ T8856] RDX: 0000200000000540 RSI: 00000000800452d3 RDI: 0000000000000004 [ 276.976082][ T8856] RBP: 00007f65ba636090 R08: 0000000000000000 R09: 0000000000000000 [ 276.976097][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.976112][ T8856] R13: 00007f65b9a26038 R14: 00007f65b9a25fa0 R15: 00007ffde273f148 [ 276.976150][ T8856] [ 276.976306][ T8856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.078890][ T27] usb usb3-port1: attempt power cycle [ 277.252024][ T5726] usb 5-1: USB disconnect, device number 26 [ 277.252087][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 277.252138][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 277.300893][ T8858] jffs2: notice: (8858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 277.521855][ T27] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 277.541834][ T27] usb 3-1: device descriptor read/8, error -71 [ 277.752085][ T5726] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 277.781286][ T27] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 277.803717][ T27] usb 3-1: device descriptor read/8, error -71 [ 277.876213][ T8874] loop0: detected capacity change from 0 to 4096 [ 277.888844][ T5726] usb 6-1: device descriptor read/64, error -71 [ 277.907619][ T8874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 277.907645][ T8874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 277.907698][ T8874] loop0: [ 277.922130][ T27] usb usb3-port1: unable to enumerate USB device [ 278.120921][ T5726] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 278.251084][ T5726] usb 6-1: device descriptor read/64, error -71 [ 278.340975][ T5739] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 278.361426][ T5726] usb usb6-port1: attempt power cycle [ 278.502396][ T5739] usb 4-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 278.506135][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.506169][ T5739] usb 4-1: Product: syz [ 278.506186][ T5739] usb 4-1: Manufacturer: syz [ 278.506203][ T5739] usb 4-1: SerialNumber: syz [ 278.509305][ T5739] usb 4-1: config 0 descriptor?? [ 278.710977][ T5726] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 278.731614][ T5726] usb 6-1: device descriptor read/8, error -71 [ 278.737945][ T5739] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 278.761827][ T5739] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 278.766534][ T5739] usb 4-1: USB disconnect, device number 56 [ 278.858466][ T8888] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6894] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[8888] [ 278.994834][ T8891] input: syz0 as /devices/virtual/input/input17 [ 279.000854][ T5726] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 279.023222][ T5726] usb 6-1: device descriptor read/8, error -71 [ 279.141340][ T5726] usb usb6-port1: unable to enumerate USB device [ 279.527476][ T8905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.809'. [ 279.829857][ T8916] FAULT_INJECTION: forcing a failure. [ 279.829857][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 279.829884][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.2.813 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.829905][ T8916] Tainted: [L]=SOFTLOCKUP [ 279.829912][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 279.829922][ T8916] Call Trace: [ 279.829929][ T8916] [ 279.829936][ T8916] dump_stack_lvl+0xe8/0x150 [ 279.829966][ T8916] should_fail_ex+0x3eb/0x540 [ 279.829994][ T8916] should_failslab+0xa8/0x100 [ 279.830027][ T8916] __kmalloc_noprof+0xf9/0x710 [ 279.830045][ T8916] ? trace_kmalloc+0x2a/0xf0 [ 279.830060][ T8916] ? tomoyo_encode+0x2ad/0x570 [ 279.830084][ T8916] ? tomoyo_encode+0x2ad/0x570 [ 279.830113][ T8916] tomoyo_encode+0x2ad/0x570 [ 279.830141][ T8916] tomoyo_realpath_from_path+0x5fa/0x640 [ 279.830174][ T8916] ? tomoyo_path_number_perm+0x219/0x5f0 [ 279.830195][ T8916] tomoyo_path_number_perm+0x246/0x5f0 [ 279.830218][ T8916] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.830237][ T8916] ? __lock_acquire+0x747/0x2de0 [ 279.830285][ T8916] ? __fget_files+0x2a/0x420 [ 279.830306][ T8916] ? __fget_files+0x2a/0x420 [ 279.830324][ T8916] ? __fget_files+0x2a/0x420 [ 279.830346][ T8916] security_file_ioctl+0xc3/0x2a0 [ 279.830367][ T8916] __se_sys_ioctl+0x47/0x170 [ 279.830393][ T8916] do_syscall_64+0x166/0x520 [ 279.830415][ T8916] ? trace_irq_disable+0x3b/0x140 [ 279.830436][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.830453][ T8916] ? clear_bhb_loop+0x70/0xc0 [ 279.830473][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.830494][ T8916] RIP: 0033:0x7efe4199f559 [ 279.830511][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.830526][ T8916] RSP: 002b:00007efe3fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.830543][ T8916] RAX: ffffffffffffffda RBX: 00007efe41c25fa0 RCX: 00007efe4199f559 [ 279.830555][ T8916] RDX: 0000200000000140 RSI: 0000000040104d07 RDI: 0000000000000003 [ 279.830566][ T8916] RBP: 00007efe3fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.830576][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.830586][ T8916] R13: 00007efe41c26038 R14: 00007efe41c25fa0 R15: 00007ffedda871e8 [ 279.830611][ T8916] [ 279.830647][ T8916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.195698][ T8920] FAULT_INJECTION: forcing a failure. [ 280.195698][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 280.195728][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.4.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.195751][ T8920] Tainted: [L]=SOFTLOCKUP [ 280.195757][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 280.195768][ T8920] Call Trace: [ 280.195774][ T8920] [ 280.195781][ T8920] dump_stack_lvl+0xe8/0x150 [ 280.195810][ T8920] should_fail_ex+0x3eb/0x540 [ 280.195839][ T8920] should_failslab+0xa8/0x100 [ 280.195865][ T8920] __kmalloc_noprof+0xf9/0x710 [ 280.195882][ T8920] ? security_inode_alloc+0x39/0x310 [ 280.195906][ T8920] ? kmem_cache_alloc_noprof+0x151/0x600 [ 280.195923][ T8920] ? sk_prot_alloc+0xe7/0x210 [ 280.195941][ T8920] ? sk_prot_alloc+0xe7/0x210 [ 280.195964][ T8920] sk_prot_alloc+0xe7/0x210 [ 280.195982][ T8920] ? sk_alloc+0x27/0x390 [ 280.196002][ T8920] sk_alloc+0x3a/0x390 [ 280.196023][ T8920] alg_create+0xcf/0x160 [ 280.196044][ T8920] __sock_create+0x4b5/0xac0 [ 280.196078][ T8920] __sys_socket+0xd6/0x1b0 [ 280.196108][ T8920] __x64_sys_socket+0x7a/0x90 [ 280.196136][ T8920] do_syscall_64+0x166/0x520 [ 280.196159][ T8920] ? trace_irq_disable+0x3b/0x140 [ 280.196180][ T8920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.196197][ T8920] ? clear_bhb_loop+0x70/0xc0 [ 280.196218][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.196235][ T8920] RIP: 0033:0x7f986159f559 [ 280.196251][ T8920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.196265][ T8920] RSP: 002b:00007f9862445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 280.196283][ T8920] RAX: ffffffffffffffda RBX: 00007f9861825fa0 RCX: 00007f986159f559 [ 280.196296][ T8920] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 280.196306][ T8920] RBP: 00007f9861636b20 R08: 0000000000000000 R09: 0000000000000000 [ 280.196316][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.196326][ T8920] R13: 00007f9861826038 R14: 00007f9861825fa0 R15: 00007ffeff83eb08 [ 280.196352][ T8920] [ 280.223240][ T8921] FAULT_INJECTION: forcing a failure. [ 280.223240][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 280.223361][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.2.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.223462][ T8921] Tainted: [L]=SOFTLOCKUP [ 280.223484][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 280.223525][ T8921] Call Trace: [ 280.223554][ T8921] [ 280.223577][ T8921] dump_stack_lvl+0xe8/0x150 [ 280.223683][ T8921] should_fail_ex+0x3eb/0x540 [ 280.223782][ T8921] should_failslab+0xa8/0x100 [ 280.223900][ T8921] __kmalloc_noprof+0xf9/0x710 [ 280.223965][ T8921] ? rcu_is_watching+0x16/0xb0 [ 280.224050][ T8921] ? tomoyo_realpath_from_path+0xef/0x640 [ 280.224170][ T8921] ? tomoyo_realpath_from_path+0xef/0x640 [ 280.224292][ T8921] tomoyo_realpath_from_path+0xef/0x640 [ 280.224409][ T8921] ? tomoyo_path_number_perm+0x219/0x5f0 [ 280.224491][ T8921] tomoyo_path_number_perm+0x246/0x5f0 [ 280.224575][ T8921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.224649][ T8921] ? __lock_acquire+0x747/0x2de0 [ 280.224830][ T8921] ? __fget_files+0x2a/0x420 [ 280.224906][ T8921] ? __fget_files+0x2a/0x420 [ 280.224979][ T8921] ? __fget_files+0x2a/0x420 [ 280.225063][ T8921] security_file_ioctl+0xc3/0x2a0 [ 280.225138][ T8921] __se_sys_ioctl+0x47/0x170 [ 280.225242][ T8921] do_syscall_64+0x166/0x520 [ 280.225325][ T8921] ? trace_irq_disable+0x3b/0x140 [ 280.225400][ T8921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.225466][ T8921] ? clear_bhb_loop+0x70/0xc0 [ 280.225541][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.225605][ T8921] RIP: 0033:0x7efe4199f559 [ 280.225661][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.225713][ T8921] RSP: 002b:00007efe3fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.225735][ T8921] RAX: ffffffffffffffda RBX: 00007efe41c26090 RCX: 00007efe4199f559 [ 280.225751][ T8921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 280.225764][ T8921] RBP: 00007efe3fbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 280.225778][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.225792][ T8921] R13: 00007efe41c26128 R14: 00007efe41c26090 R15: 00007ffedda871e8 [ 280.225825][ T8921] [ 280.225976][ T8921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.329470][ T8948] gadgetfs: bound to dummy_udc driver [ 281.600946][ T27] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 281.621582][ T5739] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 281.762842][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 281.764107][ T27] usb 5-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 281.766082][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.766122][ T27] usb 5-1: config 0 has no interfaces? [ 281.766156][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.830639][ T27] usb 5-1: config 0 descriptor?? [ 281.841281][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 281.845432][ T5739] usb 6-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 281.849630][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.883971][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.884004][ T5739] usb 6-1: Product: syz [ 281.884021][ T5739] usb 6-1: Manufacturer: syz [ 281.884037][ T5739] usb 6-1: SerialNumber: syz [ 281.888092][ T5739] usb 6-1: config 0 descriptor?? [ 281.921359][ T5739] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 282.098574][ T8950] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 282.099489][ T8950] IPVS: nq: FWM 3 0x00000003 - no destination available [ 282.129420][ T27] usb 6-1: USB disconnect, device number 18 [ 282.600974][ T11] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 282.690070][ T8963] dlm: no locking on control device [ 282.753668][ T11] usb 4-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 282.762488][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.762583][ T11] usb 4-1: Product: syz [ 282.762628][ T11] usb 4-1: Manufacturer: syz [ 282.762679][ T11] usb 4-1: SerialNumber: syz [ 282.789131][ T11] usb 4-1: config 0 descriptor?? [ 282.809792][ T11] ch341 4-1:0.0: ch341-uart converter detected [ 283.009415][ T11] usb 4-1: failed to receive control message: -121 [ 283.009480][ T11] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 283.231094][ T27] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 283.242184][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 283.371042][ T27] usb 3-1: device descriptor read/64, error -71 [ 283.390892][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 283.391510][ T10] usb 6-1: New USB device found: idVendor=0925, idProduct=8866, bcdDevice=0.00 [ 283.392824][ T10] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 283.394542][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 283.394569][ T10] usb 6-1: can't read configurations, error -61 [ 283.520872][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 283.614257][ T5649] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 283.631048][ T27] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 283.671061][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 283.672065][ T10] usb 6-1: New USB device found: idVendor=0925, idProduct=8866, bcdDevice=0.00 [ 283.672111][ T10] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 283.674223][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 283.674262][ T10] usb 6-1: can't read configurations, error -61 [ 283.674839][ T10] usb usb6-port1: attempt power cycle [ 283.781540][ T27] usb 3-1: device descriptor read/64, error -71 [ 283.901418][ T27] usb usb3-port1: attempt power cycle [ 284.010998][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 284.031394][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 284.031903][ T10] usb 6-1: New USB device found: idVendor=0925, idProduct=8866, bcdDevice=0.00 [ 284.031938][ T10] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 284.033201][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 284.033261][ T10] usb 6-1: can't read configurations, error -61 [ 284.160944][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 284.186412][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 284.186996][ T10] usb 6-1: New USB device found: idVendor=0925, idProduct=8866, bcdDevice=0.00 [ 284.187026][ T10] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 284.188575][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 284.188613][ T10] usb 6-1: can't read configurations, error -61 [ 284.188960][ T10] usb usb6-port1: unable to enumerate USB device [ 284.261246][ T27] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 284.282179][ T27] usb 3-1: device descriptor read/8, error -71 [ 284.346966][ T10] usb 5-1: USB disconnect, device number 27 [ 284.570328][ T27] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 284.601885][ T27] usb 3-1: device descriptor read/8, error -71 [ 284.721889][ T27] usb usb3-port1: unable to enumerate USB device [ 285.373376][ T5372] usb 4-1: USB disconnect, device number 57 [ 285.378377][ T5372] ch341 4-1:0.0: device disconnected [ 285.410962][ T32] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 285.571852][ T32] usb 5-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 285.572901][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.572955][ T32] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.573001][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.993484][ T8996] jffs2: notice: (8996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 286.282320][ T27] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 286.323777][ T9006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 286.350922][ T5372] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 286.450921][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 286.452291][ T27] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 286.453386][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.453412][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.455444][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.455471][ T27] usb 3-1: Product: syz [ 286.455487][ T27] usb 3-1: Manufacturer: syz [ 286.455502][ T27] usb 3-1: SerialNumber: syz [ 286.509551][ T5372] usb 6-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 286.530282][ T27] usb 3-1: 0:2 : does not exist [ 286.541829][ T5372] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 286.541865][ T5372] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 286.541893][ T5372] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.541938][ T5372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.548644][ T8999] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 286.548798][ T8999] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 286.571500][ T5372] pl2303 6-1:1.0: pl2303 converter detected [ 286.615296][ T5372] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 286.665640][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 286.714479][ T27] usb 3-1: USB disconnect, device number 64 [ 286.779857][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.861206][ T8999] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 286.862963][ T8999] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 286.864566][ T8999] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 286.868391][ T8999] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 286.895565][ T8999] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 287.002168][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 287.003036][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 287.003075][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 287.021708][ T5372] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 287.068241][ T27] usb 6-1: USB disconnect, device number 23 [ 287.068260][ C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 287.161678][ T8999] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 287.161833][ T8999] pl2303 ttyUSB0: error sending break = -19 [ 287.165775][ T27] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 287.166369][ T27] pl2303 6-1:1.0: device disconnected [ 287.211041][ T5372] usb 4-1: Using ep0 maxpacket: 32 [ 287.213298][ T5372] usb 4-1: New USB device found: idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 287.214677][ T5372] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 287.214715][ T5372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.214738][ T5372] usb 4-1: config 0 has no interface number 0 [ 287.214781][ T5372] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 287.214809][ T5372] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 287.214834][ T5372] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 287.214852][ T5372] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 287.214871][ T5372] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 287.214919][ T5372] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 287.214944][ T5372] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 287.214969][ T5372] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.214996][ T5372] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.217320][ T5372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.217349][ T5372] usb 4-1: Product: syz [ 287.217366][ T5372] usb 4-1: Manufacturer: syz [ 287.217382][ T5372] usb 4-1: SerialNumber: syz [ 287.220201][ T5372] usb 4-1: config 0 descriptor?? [ 287.246939][ T9011] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.402444][ T5372] usb 4-1: will this work? Command EP is not usually 12 [ 287.402477][ T5372] usb 4-1: will this work? Response EP is not usually 3 [ 287.402509][ T5372] usb 4-1: will this work? Image data EP is not usually 2 [ 287.433172][ T5372] scsi host1: microtekX6 [ 287.457901][ T5931] usb 4-1: error -90 submitting URB [ 287.473913][ T5931] usb 4-1: error -90 submitting URB [ 287.475358][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.475887][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.479019][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.510739][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.517375][ T2599] usb 4-1: error -90 submitting URB [ 287.519355][ T27] usb 4-1: USB disconnect, device number 58 [ 287.550928][ T2599] usb 4-1: error -19 submitting URB [ 288.141005][ T5726] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 288.321704][ T5726] usb 3-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 288.322986][ T5726] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 288.323015][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.323037][ T5726] usb 3-1: config 0 has no interface number 0 [ 288.323105][ T5726] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 288.323132][ T5726] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 288.325606][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.325626][ T5726] usb 3-1: Product: syz [ 288.325658][ T5726] usb 3-1: Manufacturer: syz [ 288.325670][ T5726] usb 3-1: SerialNumber: syz [ 288.328291][ T5726] usb 3-1: config 0 descriptor?? [ 288.330211][ T9023] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.330331][ T9023] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.437780][ T5649] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 288.464768][ T5726] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 288.799639][ T5726] usb 3-1: USB disconnect, device number 65 [ 289.102648][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 289.104641][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 289.105116][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 289.105716][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 289.106787][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 289.107248][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 289.107847][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 289.108893][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 289.109380][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 289.110643][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 289.113180][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 289.114965][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 289.116907][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 289.118622][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 289.120470][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 289.122629][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 289.124287][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 289.129655][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 289.130736][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 289.133423][ T32] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 289.329498][ T32] ax88179_178a 5-1:1.0 eth9: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, ea:24:be:dc:61:1e [ 289.350594][ T32] usb 5-1: USB disconnect, device number 28 [ 289.360092][ T32] ax88179_178a 5-1:1.0 eth9: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 289.656140][ T9050] phram: illegal erasesize or len [ 289.682533][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 289.682593][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 289.708295][ T9050] phram: illegal erasesize or len [ 289.721616][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 289.721664][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 289.792989][ T32] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 289.946491][ T32] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 289.947965][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.947995][ T32] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 289.951572][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.951601][ T32] usb 5-1: Product: syz [ 289.951618][ T32] usb 5-1: Manufacturer: syz [ 289.951633][ T32] usb 5-1: SerialNumber: syz [ 290.483250][ T9080] FAULT_INJECTION: forcing a failure. [ 290.483250][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.483299][ T9080] CPU: 0 UID: 0 PID: 9080 Comm: syz.3.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.483331][ T9080] Tainted: [L]=SOFTLOCKUP [ 290.483340][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.483354][ T9080] Call Trace: [ 290.483362][ T9080] [ 290.483373][ T9080] dump_stack_lvl+0xe8/0x150 [ 290.483408][ T9080] should_fail_ex+0x3eb/0x540 [ 290.483463][ T9080] _copy_from_user+0x2d/0xb0 [ 290.483500][ T9080] kstrtouint_from_user+0xd6/0x180 [ 290.483532][ T9080] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 290.483566][ T9080] ? lock_acquire+0x115/0x350 [ 290.483588][ T9080] proc_fail_nth_write+0x8e/0x210 [ 290.483639][ T9080] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.483681][ T9080] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.483715][ T9080] vfs_write+0x296/0xba0 [ 290.483742][ T9080] ? __pfx_vfs_write+0x10/0x10 [ 290.483784][ T9080] ? __fget_files+0x2a/0x420 [ 290.483809][ T9080] ? __fget_files+0x3a2/0x420 [ 290.483833][ T9080] ? __fget_files+0x2a/0x420 [ 290.483865][ T9080] ? fdget+0x1ac/0x250 [ 290.483889][ T9080] ksys_write+0x150/0x270 [ 290.483908][ T9080] ? __fget_files+0x3a2/0x420 [ 290.483950][ T9080] ? __pfx_ksys_write+0x10/0x10 [ 290.483992][ T9080] do_syscall_64+0x166/0x520 [ 290.484021][ T9080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.484045][ T9080] ? clear_bhb_loop+0x70/0xc0 [ 290.484065][ T9080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.484082][ T9080] RIP: 0033:0x7f65b975fd8e [ 290.484119][ T9080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.484139][ T9080] RSP: 002b:00007f65ba614fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.484165][ T9080] RAX: ffffffffffffffda RBX: 00007f65ba6156c0 RCX: 00007f65b975fd8e [ 290.484181][ T9080] RDX: 0000000000000001 RSI: 00007f65ba6150a0 RDI: 0000000000000005 [ 290.484197][ T9080] RBP: 00007f65ba615090 R08: 0000000000000000 R09: 0000000000000000 [ 290.484207][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.484217][ T9080] R13: 00007f65b9a26128 R14: 00007f65b9a26090 R15: 00007ffde273f148 [ 290.484258][ T9080] [ 291.056812][ C1] greybus greybus1: 0/0:0: incomplete message 0x0002 of type 0x02 received (8 < 11) [ 291.119648][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.864'. [ 291.258461][ T10] usb 5-1: USB disconnect, device number 29 [ 291.258468][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 291.258509][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 291.258546][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 291.258606][ C1] usb 5-1: failed to resubmit arpc in-urb: -19 [ 291.258644][ C1] usb 5-1: failed to resubmit arpc in-urb: -19 [ 291.258682][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 291.324297][ T10] usb 5-1: failed to send ARPC request 4: -19 [ 291.324374][ T10] usb 5-1: failed to execute ARPC: -19 [ 291.324393][ T10] usb 5-1: failed to flush cport 0: -19 [ 291.324412][ T10] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 291.324560][ T10] usb 5-1: failed to send ARPC request 2: -19 [ 291.324630][ T10] usb 5-1: failed to execute ARPC: -19 [ 291.324646][ T10] usb 5-1: failed to quiesce cport 0: -19 (0) [ 291.324666][ T10] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 291.324810][ T10] usb 5-1: failed to send ARPC request 3: -19 [ 291.324887][ T10] usb 5-1: failed to execute ARPC: -19 [ 291.324906][ T10] usb 5-1: failed to clear cport 0: -19 [ 291.324925][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 291.330636][ T9102] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 291.513355][ T9104] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 291.635256][ T9104] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 291.640406][ T9104] team0: Port device wlan0 added [ 291.708894][ T9108] ªªªªªª: renamed from vlan0 (while UP) [ 292.435634][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 292.440302][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.878'. [ 292.466673][ T9139] netlink: 'syz.3.878': attribute type 10 has an invalid length. [ 292.506462][ T5649] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 292.506551][ T5649] Bluetooth: hci2: Injecting HCI hardware error event [ 292.508523][ T55] Bluetooth: hci2: hardware error 0x00 [ 292.602656][ T9139] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 292.626151][ T9139] team0: Port device wlan0 added [ 292.744575][ T9148] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.881'. [ 292.837846][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 292.842179][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 293.103378][ T9168] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 293.122577][ T5931] rtrs_client L2031: : CM error (CM event: address error, err: -ENODEV) [ 293.123366][ T9168] rtrs_client L2656: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 293.353204][ T9176] jffs2: notice: (9176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 293.692146][ T9178] jffs2: notice: (9178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 293.748096][ T33] audit: type=1800 audit(1793274479.990:9): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.894" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 294.481054][ T32] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 294.521040][ T5726] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 294.581456][ T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 294.631051][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 294.631833][ T32] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.634018][ T32] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 294.634092][ T32] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.634119][ T32] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.634146][ T32] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.634171][ T32] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.634202][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.671932][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 294.675945][ T5726] usb 6-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 294.695505][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.738899][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.739056][ T5726] usb 6-1: Product: syz [ 294.739109][ T5726] usb 6-1: Manufacturer: syz [ 294.739234][ T5726] usb 6-1: SerialNumber: syz [ 294.783323][ T5726] usb 6-1: config 0 descriptor?? [ 294.789453][ T5726] cdc_ether 6-1:0.0: missing cdc header descriptor [ 294.790423][ T5726] usb 6-1: unsupported MDLM descriptors [ 294.840454][ T32] usb 5-1: GET_CAPABILITIES returned 0 [ 294.840495][ T32] usbtmc 5-1:16.0: can't read capabilities [ 294.996280][ T9202] __nla_validate_parse: 2 callbacks suppressed [ 294.996299][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.897'. [ 294.996322][ T9202] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 295.082241][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.082581][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.082616][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.082646][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.082677][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.082708][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083077][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083111][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083145][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083177][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083208][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083433][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083478][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083522][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083567][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.083611][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.153817][ T32] usb 5-1: USB disconnect, device number 30 [ 295.645518][ T9228] FAULT_INJECTION: forcing a failure. [ 295.645518][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 295.645561][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.3.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.645592][ T9228] Tainted: [L]=SOFTLOCKUP [ 295.645601][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 295.645618][ T9228] Call Trace: [ 295.645625][ T9228] [ 295.645633][ T9228] dump_stack_lvl+0xe8/0x150 [ 295.645662][ T9228] should_fail_ex+0x3eb/0x540 [ 295.645690][ T9228] should_failslab+0xa8/0x100 [ 295.645715][ T9228] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 295.645735][ T9228] ? alloc_inode+0xb8/0x1b0 [ 295.645750][ T9228] ? alloc_inode+0xb8/0x1b0 [ 295.645767][ T9228] ? simple_start_creating+0xcc/0x110 [ 295.645791][ T9228] alloc_inode+0xb8/0x1b0 [ 295.645809][ T9228] new_inode+0x1f/0x170 [ 295.645830][ T9228] devpts_fill_super+0x2af/0x4f0 [ 295.645853][ T9228] ? __pfx_devpts_fill_super+0x10/0x10 [ 295.645876][ T9228] get_tree_nodev+0xbb/0x150 [ 295.645903][ T9228] vfs_get_tree+0x92/0x2a0 [ 295.645932][ T9228] do_new_mount+0x325/0xb00 [ 295.645959][ T9228] ? __pfx_do_new_mount+0x10/0x10 [ 295.645979][ T9228] ? ns_capable+0x84/0xe0 [ 295.646002][ T9228] ? path_mount+0x647/0x1050 [ 295.646022][ T9228] ? user_path_at+0xd4/0x160 [ 295.646044][ T9228] __se_sys_mount+0x31d/0x420 [ 295.646067][ T9228] ? __pfx___se_sys_mount+0x10/0x10 [ 295.646090][ T9228] ? __x64_sys_mount+0x20/0xc0 [ 295.646110][ T9228] do_syscall_64+0x166/0x520 [ 295.646134][ T9228] ? trace_irq_disable+0x3b/0x140 [ 295.646156][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.646173][ T9228] ? clear_bhb_loop+0x70/0xc0 [ 295.646194][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.646246][ T9228] RIP: 0033:0x7f65b979f559 [ 295.646269][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.646290][ T9228] RSP: 002b:00007f65ba636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.646315][ T9228] RAX: ffffffffffffffda RBX: 00007f65b9a25fa0 RCX: 00007f65b979f559 [ 295.646332][ T9228] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 295.646349][ T9228] RBP: 00007f65b9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 295.646391][ T9228] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 295.646408][ T9228] R13: 00007f65b9a26038 R14: 00007f65b9a25fa0 R15: 00007ffde273f148 [ 295.646447][ T9228] [ 295.646988][ T9228] devpts: Unable to alloc inode for ptmx node [ 296.210905][ T32] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 296.360851][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 296.361665][ T32] usb 5-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00 [ 296.363758][ T32] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 296.363796][ T32] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.363827][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.363877][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.367037][ T32] usb 5-1: config 0 descriptor?? [ 296.795455][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795531][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795562][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795591][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795620][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795649][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795677][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795706][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795734][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795762][ T32] magicmouse 0003:05AC:0269.000B: unknown main item tag 0x0 [ 296.795810][ T32] magicmouse 0003:05AC:0269.000B: unbalanced collection at end of report description [ 296.797849][ T32] magicmouse 0003:05AC:0269.000B: magicmouse hid parse failed [ 296.798020][ T32] magicmouse 0003:05AC:0269.000B: probe with driver magicmouse failed with error -22 [ 297.193754][ T5372] usb 5-1: USB disconnect, device number 31 [ 297.250150][ T5726] usb 6-1: USB disconnect, device number 24 [ 297.406804][ T9237] overlayfs: upper fs does not support file handles, falling back to index=off. [ 297.407053][ T9237] overlayfs: failed to set uuid (238/file2, err=-1); falling back to uuid=null. [ 297.619029][ T9251] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 297.619135][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 297.690312][ T9244] netlink: 'syz.5.909': attribute type 4 has an invalid length. [ 297.690352][ T9244] netlink: 'syz.5.909': attribute type 7 has an invalid length. [ 297.928957][ T9260] FAULT_INJECTION: forcing a failure. [ 297.928957][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 297.928987][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.2.913 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.929009][ T9260] Tainted: [L]=SOFTLOCKUP [ 297.929016][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 297.929026][ T9260] Call Trace: [ 297.929033][ T9260] [ 297.929041][ T9260] dump_stack_lvl+0xe8/0x150 [ 297.929070][ T9260] should_fail_ex+0x3eb/0x540 [ 297.929099][ T9260] should_failslab+0xa8/0x100 [ 297.929123][ T9260] __kmalloc_noprof+0xf9/0x710 [ 297.929141][ T9260] ? down_write_nested+0x16d/0x200 [ 297.929165][ T9260] ? security_sb_alloc+0x48/0x310 [ 297.929186][ T9260] ? security_sb_alloc+0x48/0x310 [ 297.929213][ T9260] security_sb_alloc+0x48/0x310 [ 297.929237][ T9260] sget_fc+0x9d7/0x1a60 [ 297.929263][ T9260] ? __pfx_set_anon_super_fc+0x10/0x10 [ 297.929285][ T9260] ? __pfx_sget_fc+0x10/0x10 [ 297.929301][ T9260] ? __kmalloc_cache_noprof+0x31c/0x600 [ 297.929319][ T9260] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 297.929342][ T9260] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 297.929371][ T9260] ? __pfx_devpts_fill_super+0x10/0x10 [ 297.929395][ T9260] get_tree_nodev+0x2a/0x150 [ 297.929424][ T9260] vfs_get_tree+0x92/0x2a0 [ 297.929448][ T9260] do_new_mount+0x325/0xb00 [ 297.929469][ T9260] ? __pfx_do_new_mount+0x10/0x10 [ 297.929489][ T9260] ? ns_capable+0x84/0xe0 [ 297.929510][ T9260] ? path_mount+0x647/0x1050 [ 297.929530][ T9260] ? user_path_at+0xd4/0x160 [ 297.929552][ T9260] __se_sys_mount+0x31d/0x420 [ 297.929574][ T9260] ? __pfx___se_sys_mount+0x10/0x10 [ 297.929597][ T9260] ? __x64_sys_mount+0x20/0xc0 [ 297.929616][ T9260] do_syscall_64+0x166/0x520 [ 297.929638][ T9260] ? trace_irq_disable+0x3b/0x140 [ 297.929658][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.929675][ T9260] ? clear_bhb_loop+0x70/0xc0 [ 297.929724][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.929748][ T9260] RIP: 0033:0x7efe4199f559 [ 297.929769][ T9260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.929788][ T9260] RSP: 002b:00007efe3fbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.929817][ T9260] RAX: ffffffffffffffda RBX: 00007efe41c25fa0 RCX: 00007efe4199f559 [ 297.929831][ T9260] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 297.929842][ T9260] RBP: 00007efe3fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.929852][ T9260] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000002 [ 297.929862][ T9260] R13: 00007efe41c26038 R14: 00007efe41c25fa0 R15: 00007ffedda871e8 [ 297.929905][ T9260] [ 297.982155][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 298.230882][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 298.231690][ T10] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 298.232733][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.232759][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.234830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.234849][ T10] usb 4-1: Product: syz [ 298.234861][ T10] usb 4-1: Manufacturer: syz [ 298.234872][ T10] usb 4-1: SerialNumber: syz [ 298.255179][ T11] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 298.307377][ T10] usb 4-1: 0:2 : does not exist [ 298.421217][ T11] usb 6-1: device descriptor read/64, error -71 [ 298.454721][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 298.499521][ T10] usb 4-1: USB disconnect, device number 59 [ 298.540219][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.551315][ T32] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 298.661820][ T11] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 298.701086][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 298.701932][ T32] usb 3-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 298.702839][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.704600][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.704627][ T32] usb 3-1: Product: syz [ 298.704643][ T32] usb 3-1: Manufacturer: syz [ 298.704659][ T32] usb 3-1: SerialNumber: syz [ 298.706962][ T32] usb 3-1: config 0 descriptor?? [ 298.710660][ T32] cdc_ether 3-1:0.0: missing cdc header descriptor [ 298.769705][ T32] usb 3-1: unsupported MDLM descriptors [ 298.831996][ T11] usb 6-1: device descriptor read/64, error -71 [ 298.890923][ T5372] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 298.912750][ T32] usb 3-1: USB disconnect, device number 66 [ 298.941344][ T11] usb usb6-port1: attempt power cycle [ 299.050894][ T5372] usb 5-1: Using ep0 maxpacket: 32 [ 299.051692][ T5372] usb 5-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 299.052696][ T5372] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 299.057971][ T5372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.058000][ T5372] usb 5-1: Product: syz [ 299.058017][ T5372] usb 5-1: Manufacturer: syz [ 299.058034][ T5372] usb 5-1: SerialNumber: syz [ 299.108496][ T5372] usb 5-1: config 0 descriptor?? [ 299.119960][ T5372] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 299.120504][ T5372] dvb-usb: bulk message failed: -22 (2/0) [ 299.139526][ T5372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.140273][ T5372] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 299.140332][ T5372] usb 5-1: media controller created [ 299.177921][ T5372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.206820][ T5372] usb 5-1: selecting invalid altsetting 7 [ 299.206844][ T5372] cxusb: set interface failed [ 299.206858][ T5372] dvb-usb: bulk message failed: -22 (1/0) [ 299.265899][ T5372] DVB: Unable to find symbol lgdt330x_attach() [ 299.265917][ T5372] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 299.287102][ T11] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 299.313017][ T11] usb 6-1: device descriptor read/8, error -71 [ 299.390951][ T5372] rc_core: IR keymap rc-dvico-portable not found [ 299.390974][ T5372] Registered IR keymap rc-empty [ 299.392764][ T5372] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 299.395296][ T5372] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 299.457457][ T5372] dvb-usb: schedule remote query interval to 100 msecs. [ 299.457483][ T5372] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 299.479392][ T5372] usb 5-1: USB disconnect, device number 32 [ 299.573178][ T11] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 299.595171][ T11] usb 6-1: device descriptor read/8, error -71 [ 299.633567][ T5372] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 299.704200][ T11] usb usb6-port1: unable to enumerate USB device [ 300.280224][ T9292] FAULT_INJECTION: forcing a failure. [ 300.280224][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 300.280253][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.4.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.280275][ T9292] Tainted: [L]=SOFTLOCKUP [ 300.280282][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.280292][ T9292] Call Trace: [ 300.280299][ T9292] [ 300.280306][ T9292] dump_stack_lvl+0xe8/0x150 [ 300.280335][ T9292] should_fail_ex+0x3eb/0x540 [ 300.280367][ T9292] should_failslab+0xa8/0x100 [ 300.280390][ T9292] ? skb_clone+0x212/0x3a0 [ 300.280411][ T9292] kmem_cache_alloc_noprof+0x9c/0x600 [ 300.280428][ T9292] ? lock_acquire+0x115/0x350 [ 300.280447][ T9292] ? skb_clone+0x212/0x3a0 [ 300.280474][ T9292] skb_clone+0x212/0x3a0 [ 300.280493][ T9292] ? dev_queue_xmit_nit+0x25c/0xac0 [ 300.280516][ T9292] dev_queue_xmit_nit+0x28d/0xac0 [ 300.280535][ T9292] ? dev_queue_xmit_nit+0x2d/0xac0 [ 300.280560][ T9292] dev_hard_start_xmit+0x1c1/0x830 [ 300.280590][ T9292] ? validate_xmit_skb+0xecb/0x1a00 [ 300.280622][ T9292] __dev_queue_xmit+0x14d1/0x3920 [ 300.280645][ T9292] ? sock_write_iter+0x2de/0x3e0 [ 300.280670][ T9292] ? __dev_queue_xmit+0x29b/0x3920 [ 300.280707][ T9292] ? __pfx___dev_queue_xmit+0x10/0x10 [ 300.280762][ T9292] ? __copy_skb_header+0xa3/0x4a0 [ 300.280792][ T9292] ? __asan_memcpy+0x40/0x70 [ 300.280814][ T9292] ? __skb_clone+0x5c/0x760 [ 300.280847][ T9292] ? __skb_clone+0x4a2/0x760 [ 300.280882][ T9292] ? skb_clone+0x246/0x3a0 [ 300.280915][ T9292] __netlink_deliver_tap+0x4f1/0x6e0 [ 300.280950][ T9292] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.280975][ T9292] netlink_deliver_tap+0x19c/0x1b0 [ 300.281000][ T9292] netlink_dump+0x95b/0xee0 [ 300.281034][ T9292] ? __netlink_lookup+0xe6/0x8f0 [ 300.281070][ T9292] ? __pfx_netlink_dump+0x10/0x10 [ 300.281117][ T9292] ? netlink_lookup+0x30/0x200 [ 300.281149][ T9292] ? netlink_lookup+0x30/0x200 [ 300.281191][ T9292] __netlink_dump_start+0x589/0x7b0 [ 300.281236][ T9292] packet_diag_handler_dump+0x1d9/0x2a0 [ 300.281262][ T9292] ? lock_acquire+0x115/0x350 [ 300.281289][ T9292] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 300.281313][ T9292] ? __pfx_packet_diag_dump+0x10/0x10 [ 300.281342][ T9292] ? sock_diag_lock_handler+0x19/0x290 [ 300.281370][ T9292] ? sock_diag_lock_handler+0x19/0x290 [ 300.281402][ T9292] sock_diag_rcv_msg+0x4b0/0x5f0 [ 300.281433][ T9292] netlink_rcv_skb+0x226/0x4a0 [ 300.281470][ T9292] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 300.281496][ T9292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.281548][ T9292] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.281578][ T9292] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.281608][ T9292] netlink_unicast+0x8ef/0xa80 [ 300.281662][ T9292] netlink_sendmsg+0x7f0/0xb20 [ 300.281694][ T9292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.281721][ T9292] ? aa_sock_msg_perm+0x144/0x210 [ 300.281760][ T9292] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.281787][ T9292] ? lock_acquire+0x115/0x350 [ 300.281813][ T9292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.281835][ T9292] sock_sendmsg_nosec+0x14e/0x190 [ 300.281873][ T9292] sock_write_iter+0x2de/0x3e0 [ 300.281908][ T9292] ? __pfx_sock_write_iter+0x10/0x10 [ 300.281949][ T9292] ? bpf_lsm_file_permission+0x9/0x20 [ 300.281977][ T9292] ? security_file_permission+0x75/0x260 [ 300.282014][ T9292] vfs_write+0x612/0xba0 [ 300.282053][ T9292] ? __pfx_vfs_write+0x10/0x10 [ 300.282084][ T9292] ? __fget_files+0x3a2/0x420 [ 300.282111][ T9292] ? __fget_files+0x2a/0x420 [ 300.282142][ T9292] ? fdget+0x1ac/0x250 [ 300.282177][ T9292] ksys_write+0x150/0x270 [ 300.282208][ T9292] ? __pfx_ksys_write+0x10/0x10 [ 300.282251][ T9292] do_syscall_64+0x166/0x520 [ 300.282282][ T9292] ? trace_irq_disable+0x3b/0x140 [ 300.282311][ T9292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.282335][ T9292] ? clear_bhb_loop+0x70/0xc0 [ 300.282364][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.282388][ T9292] RIP: 0033:0x7f986159f559 [ 300.282410][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.282441][ T9292] RSP: 002b:00007f9862445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.282466][ T9292] RAX: ffffffffffffffda RBX: 00007f9861825fa0 RCX: 00007f986159f559 [ 300.282484][ T9292] RDX: 0000000000000027 RSI: 0000200000000400 RDI: 0000000000000004 [ 300.282500][ T9292] RBP: 00007f9862445090 R08: 0000000000000000 R09: 0000000000000000 [ 300.282515][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.282529][ T9292] R13: 00007f9861826038 R14: 00007f9861825fa0 R15: 00007ffeff83eb08 [ 300.282568][ T9292] [ 300.853172][ T9302] syzkaller1: entered promiscuous mode [ 300.853192][ T9302] syzkaller1: entered allmulticast mode [ 301.010929][ T5739] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 301.161010][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 301.161622][ T5739] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 301.163096][ T5739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.163121][ T5739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.169167][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.169198][ T5739] usb 4-1: Product: syz [ 301.169214][ T5739] usb 4-1: Manufacturer: syz [ 301.169230][ T5739] usb 4-1: SerialNumber: syz [ 301.235899][ T9306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.238488][ T5739] usb 4-1: 0:2 : does not exist [ 301.402953][ T5739] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 301.487744][ T5739] usb 4-1: USB disconnect, device number 60 [ 301.539656][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.286499][ T10] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 302.311265][ T10] wiimote 0005:057E:0306.000C: New device registered (Wiimote 1) [ 302.474047][ T9342] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 302.520969][ T5372] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 302.544410][ T9346] FAULT_INJECTION: forcing a failure. [ 302.544410][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 302.544437][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.544459][ T9346] Tainted: [L]=SOFTLOCKUP [ 302.544465][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.544475][ T9346] Call Trace: [ 302.544490][ T9346] [ 302.544497][ T9346] dump_stack_lvl+0xe8/0x150 [ 302.544527][ T9346] should_fail_ex+0x3eb/0x540 [ 302.544555][ T9346] should_failslab+0xa8/0x100 [ 302.544580][ T9346] __kvmalloc_node_noprof+0x171/0x820 [ 302.544603][ T9346] ? alloc_netdev_mqs+0xb01/0x1240 [ 302.544627][ T9346] ? alloc_netdev_mqs+0xb01/0x1240 [ 302.544656][ T9346] alloc_netdev_mqs+0xb01/0x1240 [ 302.544685][ T9346] ppp_ioctl+0xa89/0x1c00 [ 302.544707][ T9346] ? __pfx_ppp_ioctl+0x10/0x10 [ 302.544721][ T9346] ? __fget_files+0x2a/0x420 [ 302.544742][ T9346] ? __fget_files+0x2a/0x420 [ 302.544760][ T9346] ? __fget_files+0x2a/0x420 [ 302.544782][ T9346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 302.544804][ T9346] ? __pfx_ppp_ioctl+0x10/0x10 [ 302.544819][ T9346] __se_sys_ioctl+0xfc/0x170 [ 302.544845][ T9346] do_syscall_64+0x166/0x520 [ 302.544867][ T9346] ? trace_irq_disable+0x3b/0x140 [ 302.544888][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.544904][ T9346] ? clear_bhb_loop+0x70/0xc0 [ 302.544925][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.544941][ T9346] RIP: 0033:0x7f65b979f559 [ 302.544957][ T9346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.544971][ T9346] RSP: 002b:00007f65ba636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.544991][ T9346] RAX: ffffffffffffffda RBX: 00007f65b9a25fa0 RCX: 00007f65b979f559 [ 302.545004][ T9346] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 302.545015][ T9346] RBP: 00007f65ba636090 R08: 0000000000000000 R09: 0000000000000000 [ 302.545025][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.545035][ T9346] R13: 00007f65b9a26038 R14: 00007f65b9a25fa0 R15: 00007ffde273f148 [ 302.545061][ T9346] [ 302.671202][ T5739] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 302.803034][ T10] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1) (1) [ 302.825341][ T5372] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.826224][ T5372] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 302.830666][ T5372] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 302.830708][ T5372] usb 5-1: can't read configurations, error -71 [ 302.864576][ T5739] usb 6-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 302.882784][ T5739] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.882818][ T5739] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.882861][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.003269][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input20 [ 303.047760][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input21 [ 303.076509][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input19 [ 303.180872][ T5372] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 303.186975][ T5726] usb 6-1: USB disconnect, device number 29 [ 303.323674][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.944'. [ 303.323717][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.944'. [ 303.331092][ T5372] usb 5-1: Using ep0 maxpacket: 16 [ 303.335579][ T5372] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 303.338697][ T5372] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.338866][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.338971][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.339037][ T5372] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 303.339104][ T5372] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.341044][ T5739] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 303.351091][ T5372] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.351121][ T5372] usb 5-1: Manufacturer: syz [ 303.369032][ T5372] usb 5-1: config 0 descriptor?? [ 303.460087][ T9350] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 303.460115][ T9350] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 303.460130][ T9350] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 303.460174][ T9350] page_type: f5(slab) [ 303.460197][ T9350] raw: 00fff00000000040 ffff88813ff3c140 dead000000000100 dead000000000122 [ 303.460223][ T9350] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 303.460240][ T9350] head: 00fff00000000040 ffff88813ff3c140 dead000000000100 dead000000000122 [ 303.460254][ T9350] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 303.460269][ T9350] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 303.460284][ T9350] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 303.460293][ T9350] page dumped because: unmovable page [ 303.460325][ T9350] page_owner tracks the page as allocated [ 303.460335][ T9350] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 46, tgid 46 (kworker/u8:2), ts 139256679583 [ 303.460372][ T9350] post_alloc_hook+0x1f9/0x250 [ 303.460403][ T9350] get_page_from_freelist+0x220f/0x2280 [ 303.460423][ T9350] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 303.460442][ T9350] allocate_slab+0x7d/0x5e0 [ 303.460483][ T9350] refill_objects+0x2d5/0x350 [ 303.460516][ T9350] __pcs_replace_empty_main+0x2c8/0x6c0 [ 303.460544][ T9350] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 303.460574][ T9350] __alloc_skb+0x2c1/0x7a0 [ 303.460591][ T9350] nsim_dev_trap_report_work+0x25f/0xb30 [ 303.460609][ T9350] process_scheduled_works+0xc3d/0x1630 [ 303.460673][ T9350] worker_thread+0xa47/0xfb0 [ 303.460701][ T9350] kthread+0x38b/0x480 [ 303.460726][ T9350] ret_from_fork+0x514/0xb70 [ 303.503830][ T9350] ret_from_fork_asm+0x1a/0x30 [ 303.504026][ T9350] page last free pid 5643 tgid 5643 ts 139132295378 stack trace: [ 303.504079][ T9350] __free_frozen_pages+0xc97/0xd90 [ 303.504197][ T9350] __slab_free+0x269/0x2c0 [ 303.504269][ T9350] qlist_free_all+0x99/0x100 [ 303.504389][ T9350] kasan_quarantine_reduce+0x148/0x160 [ 303.504463][ T9350] __kasan_slab_alloc+0x22/0x80 [ 303.504592][ T9350] kmem_cache_alloc_noprof+0x2b4/0x600 [ 303.504655][ T9350] vm_area_dup+0x32/0x8e0 [ 303.505032][ T9350] dup_mmap+0x8d6/0x1e10 [ 303.505093][ T9350] copy_mm+0x115/0x470 [ 303.505222][ T9350] copy_process+0x1ecc/0x44b0 [ 303.505295][ T9350] kernel_clone+0x2d7/0x940 [ 303.505427][ T9350] __x64_sys_clone+0x1b6/0x230 [ 303.505509][ T9350] do_syscall_64+0x166/0x520 [ 303.505660][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.585065][ T5739] usb 3-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 303.613209][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.613247][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.613290][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.775613][ T5739] usb 3-1: config 0 descriptor?? [ 303.986060][ T9353] wiimote 0005:057E:0306.000C: Device removed [ 304.070870][ T5372] rc_core: IR keymap rc-hauppauge not found [ 304.070891][ T5372] Registered IR keymap rc-empty [ 304.071429][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.092415][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.124570][ T5372] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 304.130229][ T5372] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 304.162163][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.181004][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.201424][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.220916][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.223289][ T5739] hid_parser_main: 2 callbacks suppressed [ 304.223315][ T5739] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 304.228685][ T5739] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 304.228727][ T5739] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 304.229153][ T5739] hid-steam 0003:28DE:1142.000D: No HID_FEATURE_REPORT present for ID 0 [ 304.229177][ T5739] hid-steam 0003:28DE:1142.000D: steam_probe:steam_get_conn_status failed with error -22 [ 304.243998][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.264683][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.292101][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.315059][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.330946][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.340706][ T5739] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 304.357187][ T5372] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 304.387623][ T5739] hid-steam 0003:28DE:1142.000E: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 304.406264][ T5372] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 304.406292][ T5372] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 304.437608][ T5372] usb 5-1: USB disconnect, device number 34 [ 304.747288][ T9384] MTD: Couldn't look up 'mtd0/file0': -2 [ 304.789766][ T9384] FAULT_INJECTION: forcing a failure. [ 304.789766][ T9384] name failslab, interval 1, probability 0, space 0, times 0 [ 304.789808][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.3.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.789841][ T9384] Tainted: [L]=SOFTLOCKUP [ 304.789850][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 304.789864][ T9384] Call Trace: [ 304.789875][ T9384] [ 304.789885][ T9384] dump_stack_lvl+0xe8/0x150 [ 304.789927][ T9384] should_fail_ex+0x3eb/0x540 [ 304.789969][ T9384] should_failslab+0xa8/0x100 [ 304.790007][ T9384] __kmalloc_noprof+0xf9/0x710 [ 304.790035][ T9384] ? __register_sysctl_table+0xc02/0x1370 [ 304.790073][ T9384] ? __register_sysctl_table+0xc02/0x1370 [ 304.790120][ T9384] __register_sysctl_table+0xc02/0x1370 [ 304.790172][ T9384] neigh_sysctl_register+0x9b1/0xa90 [ 304.790203][ T9384] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 304.790238][ T9384] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 304.790283][ T9384] ? ecm_bind+0x201/0xa30 [ 304.790306][ T9384] ? usb_add_function+0x2e1/0x9f0 [ 304.790341][ T9384] ? configfs_composite_bind+0xde0/0x1410 [ 304.790376][ T9384] ? gadget_bind_driver+0x2ca/0x9e0 [ 304.790404][ T9384] ? really_probe+0x254/0xae0 [ 304.790437][ T9384] ? __driver_probe_device+0x1e8/0x360 [ 304.790470][ T9384] ? __driver_attach+0x34e/0x630 [ 304.790501][ T9384] ? bus_for_each_dev+0x23b/0x2c0 [ 304.790524][ T9384] ? bus_add_driver+0x38f/0x6e0 [ 304.790547][ T9384] ? neigh_parms_alloc+0x404/0x500 [ 304.790578][ T9384] devinet_sysctl_register+0xad/0x200 [ 304.790611][ T9384] inetdev_init+0x2c8/0x4f0 [ 304.790641][ T9384] inetdev_event+0x11c4/0x1610 [ 304.790665][ T9384] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 304.790701][ T9384] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 304.790750][ T9384] ? __pfx_inetdev_event+0x10/0x10 [ 304.790799][ T9384] notifier_call_chain+0x1a5/0x3d0 [ 304.790834][ T9384] register_netdevice+0x1bfe/0x2280 [ 304.790888][ T9384] ? __pfx_register_netdevice+0x10/0x10 [ 304.790924][ T9384] ? dev_addr_mod+0x174/0x350 [ 304.790962][ T9384] ? dev_addr_mod+0x1ba/0x350 [ 304.790996][ T9384] register_netdev+0x40/0x60 [ 304.791030][ T9384] gether_register_netdev+0x84/0x180 [ 304.791068][ T9384] ecm_bind+0x201/0xa30 [ 304.791105][ T9384] usb_add_function+0x2e1/0x9f0 [ 304.791141][ T9384] ? check_remote_wakeup_config+0x58/0x1c0 [ 304.791183][ T9384] configfs_composite_bind+0xde0/0x1410 [ 304.791234][ T9384] ? __pfx_configfs_composite_bind+0x10/0x10 [ 304.791418][ T9384] gadget_bind_driver+0x2ca/0x9e0 [ 304.791472][ T9384] ? __pfx_gadget_bind_driver+0x10/0x10 [ 304.791504][ T9384] really_probe+0x254/0xae0 [ 304.791548][ T9384] __driver_probe_device+0x1e8/0x360 [ 304.791588][ T9384] driver_probe_device+0x4f/0x240 [ 304.791628][ T9384] __driver_attach+0x34e/0x630 [ 304.791668][ T9384] bus_for_each_dev+0x23b/0x2c0 [ 304.791697][ T9384] ? __pfx___driver_attach+0x10/0x10 [ 304.791731][ T9384] ? __pfx_bus_for_each_dev+0x10/0x10 [ 304.791764][ T9384] ? do_raw_spin_unlock+0xf5/0x200 [ 304.791808][ T9384] bus_add_driver+0x38f/0x6e0 [ 304.791849][ T9384] driver_register+0x23a/0x320 [ 304.791891][ T9384] usb_gadget_register_driver_owner+0xf9/0x270 [ 304.791928][ T9384] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 304.791963][ T9384] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 304.792001][ T9384] configfs_write_iter+0x337/0x430 [ 304.792052][ T9384] vfs_write+0x612/0xba0 [ 304.792096][ T9384] ? __pfx_vfs_write+0x10/0x10 [ 304.792131][ T9384] ? __fget_files+0x3a2/0x420 [ 304.792158][ T9384] ? __fget_files+0x2a/0x420 [ 304.792193][ T9384] ? fdget+0x1ac/0x250 [ 304.792229][ T9384] ksys_write+0x150/0x270 [ 304.792264][ T9384] ? __pfx_ksys_write+0x10/0x10 [ 304.792321][ T9384] do_syscall_64+0x166/0x520 [ 304.792355][ T9384] ? trace_irq_disable+0x3b/0x140 [ 304.792386][ T9384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.792413][ T9384] ? clear_bhb_loop+0x70/0xc0 [ 304.792447][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.792474][ T9384] RIP: 0033:0x7f65b979f559 [ 304.792500][ T9384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.792523][ T9384] RSP: 002b:00007f65ba636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.792552][ T9384] RAX: ffffffffffffffda RBX: 00007f65b9a25fa0 RCX: 00007f65b979f559 [ 304.792573][ T9384] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000007 [ 304.792589][ T9384] RBP: 00007f65b9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 304.792605][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.792621][ T9384] R13: 00007f65b9a26038 R14: 00007f65b9a25fa0 R15: 00007ffde273f148 [ 304.792663][ T9384] [ 304.885277][ T9384] sysctl could not get directory: /net/ipv4/neigh/usb0 -12 [ 305.388753][ T9384] udc dummy_udc.0: failed to start g1: -105 [ 305.388790][ T9384] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -105 [ 305.419821][ T9384] UDC core: g1: couldn't find an available UDC or it's busy [ 305.445184][ T9387 ** replaying previous printk message ** [ 305.445184][ T9387] ------------[ cut here ]------------ [ 305.445233][ T9387] kernel BUG at net/core/dev.c:11597! [ 305.449238][ T9387] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 305.470617][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.4.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.481529][ T9387] Tainted: [L]=SOFTLOCKUP [ 305.485903][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.495998][ T9387] RIP: 0010:register_netdevice+0x2225/0x2280 [ 305.502014][ T9387] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 30 5b f8 e9 16 fb ff ff e8 34 1d e4 f7 90 0f 0b e8 2c 1d e4 f7 90 <0f> 0b e8 24 1d e4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 305.521674][ T9387] RSP: 0018:ffffc90002df7580 EFLAGS: 00010283 [ 305.527788][ T9387] RAX: ffffffff89e52c24 RBX: 1ffff920005beec4 RCX: 0000000000080000 [ 305.535807][ T9387] RDX: ffffc90003f99000 RSI: 000000000000067b RDI: 000000000000067c [ 305.543898][ T9387] RBP: ffffc90002df76f0 R08: ffffffff916bf8c7 R09: 1ffffffff22d7f18 [ 305.551891][ T9387] R10: dffffc0000000000 R11: fffffbfff22d7f19 R12: ffff88807c6507a8 [ 305.559887][ T9387] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88807c650000 [ 305.567899][ T9387] FS: 00007f98624456c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 305.576854][ T9387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.583477][ T9387] CR2: 00007feeb13ecc40 CR3: 000000005d5be000 CR4: 00000000003526f0 [ 305.591482][ T9387] Call Trace: [ 305.594787][ T9387] [ 305.597742][ T9387] ? __mutex_lock+0x305/0x15a0 [ 305.602536][ T9387] ? kernfs_activate_one+0x22d/0x340 [ 305.607964][ T9387] ? __pfx___mutex_lock+0x10/0x10 [ 305.613023][ T9387] ? __pfx_register_netdevice+0x10/0x10 [ 305.618613][ T9387] ? dev_addr_mod+0x174/0x350 [ 305.623317][ T9387] ? dev_addr_mod+0x1ba/0x350 [ 305.628039][ T9387] register_netdev+0x40/0x60 [ 305.632672][ T9387] gether_register_netdev+0x84/0x180 [ 305.637992][ T9387] ecm_bind+0x201/0xa30 [ 305.642163][ T9387] ? rcu_is_watching+0x16/0xb0 [ 305.646947][ T9387] usb_add_function+0x2e1/0x9f0 [ 305.651827][ T9387] ? check_remote_wakeup_config+0x58/0x1c0 [ 305.657665][ T9387] configfs_composite_bind+0xde0/0x1410 [ 305.663260][ T9387] ? __pfx_configfs_composite_bind+0x10/0x10 [ 305.669270][ T9387] gadget_bind_driver+0x2ca/0x9e0 [ 305.674333][ T9387] ? __pfx_gadget_bind_driver+0x10/0x10 [ 305.679951][ T9387] really_probe+0x254/0xae0 [ 305.684622][ T9387] __driver_probe_device+0x1e8/0x360 [ 305.690098][ T9387] driver_probe_device+0x4f/0x240 [ 305.695193][ T9387] __driver_attach+0x34e/0x630 [ 305.700018][ T9387] bus_for_each_dev+0x23b/0x2c0 [ 305.704919][ T9387] ? __pfx___driver_attach+0x10/0x10 [ 305.710263][ T9387] ? __pfx_bus_for_each_dev+0x10/0x10 [ 305.715689][ T9387] ? do_raw_spin_unlock+0xf5/0x200 [ 305.720882][ T9387] bus_add_driver+0x38f/0x6e0 [ 305.725600][ T9387] driver_register+0x23a/0x320 [ 305.730413][ T9387] usb_gadget_register_driver_owner+0xf9/0x270 [ 305.736617][ T9387] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 305.742300][ T9387] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 305.748505][ T9387] configfs_write_iter+0x337/0x430 [ 305.753674][ T9387] vfs_write+0x612/0xba0 [ 305.757967][ T9387] ? __pfx_vfs_write+0x10/0x10 [ 305.762784][ T9387] ? __fget_files+0x3a2/0x420 [ 305.767508][ T9387] ? __fget_files+0x2a/0x420 [ 305.772145][ T9387] ? fdget+0x1ac/0x250 [ 305.776267][ T9387] ksys_write+0x150/0x270 [ 305.780739][ T9387] ? __pfx_ksys_write+0x10/0x10 [ 305.785655][ T9387] do_syscall_64+0x166/0x520 [ 305.790294][ T9387] ? trace_irq_disable+0x3b/0x140 [ 305.795390][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.801510][ T9387] ? clear_bhb_loop+0x70/0xc0 [ 305.806241][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.812224][ T9387] RIP: 0033:0x7f986159f559 [ 305.816694][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.836341][ T9387] RSP: 002b:00007f9862445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.844856][ T9387] RAX: ffffffffffffffda RBX: 00007f9861825fa0 RCX: 00007f986159f559 [ 305.852875][ T9387] RDX: 000000000000000c RSI: 0000200000000940 RDI: 0000000000000003 [ 305.860902][ T9387] RBP: 00007f9861636b20 R08: 0000000000000000 R09: 0000000000000000 [ 305.868948][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.876956][ T9387] R13: 00007f9861826038 R14: 00007f9861825fa0 R15: 00007ffeff83eb08 [ 305.884988][ T9387] [ 305.888053][ T9387] Modules linked in: [ 305.893550][ T9387] ---[ end trace 0000000000000000 ]--- [ 305.905735][ T9387] RIP: 0010:register_netdevice+0x2225/0x2280 [ 305.905782][ T9387] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 30 5b f8 e9 16 fb ff ff e8 34 1d e4 f7 90 0f 0b e8 2c 1d e4 f7 90 <0f> 0b e8 24 1d e4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 305.905806][ T9387] RSP: 0018:ffffc90002df7580 EFLAGS: 00010283 [ 305.905829][ T9387] RAX: ffffffff89e52c24 RBX: 1ffff920005beec4 RCX: 0000000000080000 [ 305.905848][ T9387] RDX: ffffc90003f99000 RSI: 000000000000067b RDI: 000000000000067c [ 305.905864][ T9387] RBP: ffffc90002df76f0 R08: ffffffff916bf8c7 R09: 1ffffffff22d7f18 [ 305.905881][ T9387] R10: dffffc0000000000 R11: fffffbfff22d7f19 R12: ffff88807c6507a8 [ 305.905900][ T9387] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88807c650000 [ 305.905917][ T9387] FS: 00007f98624456c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 305.905938][ T9387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.905955][ T9387] CR2: 00007feeb13ecc40 CR3: 000000005d5be000 CR4: 00000000003526f0 [ 305.905980][ T9387] Kernel panic - not syncing: Fatal exception [ 306.008217][ T9387] Kernel Offset: disabled [ 306.012564][ T9387] Rebooting in 86400 seconds..